
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft
File: NuTjWeIN2mUTPhIaktbWrLHlMSM.mft (raw, json)
Hash identifier: +GEzWtFDDmT1igKma227jk0guBUY+cG4zOn/GFp3eN4=
Subject key identifier: E2:DE:89:90:DE:18:CC:42:44:34:2C:40:30:66:BF:F5:93:3E:DF:59
Authority key identifier: 36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23
Certificate issuer: /CN=A91DD112/serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123
Certificate serial: 038B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft
Manifest number: 0387
Signing time: Thu 19 Feb 2026 00:00:59 +0000
Manifest this update: Thu 19 Feb 2026 00:00:59 +0000
Manifest next update: Thu 26 Feb 2026 00:00:59 +0000
Files and hashes: 1: NuTjWeIN2mUTPhIaktbWrLHlMSM.crl (hash: jM87gACc/lZqZOJRocVormdZ8wklAKvqftc68ptzYic=)
2: 0D09EE14D79411EC955CCA68C4F9AE02.roa (hash: mRRgwNA+PP2GD4RfPaz1cyaWGNrkL/T4dyult2MIxPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl
rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 907 (0x38b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD112, serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123
Validity
Not Before: Feb 19 00:00:59 2026 GMT
Not After : Feb 26 00:00:59 2026 GMT
Subject: CN=699652bb-82ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:10:2f:2e:50:a8:ee:13:fe:c8:73:72:20:b1:
81:08:6d:af:8f:d0:3b:9a:b3:70:19:dc:c2:ea:de:
4e:99:00:ea:48:0e:0e:b8:7d:6b:4b:6c:fb:fe:ab:
e8:9b:e8:97:84:31:9e:28:e0:34:7a:b7:48:81:51:
85:89:cb:01:75:4b:80:cc:c2:31:0c:31:15:bc:92:
38:88:79:ae:8d:ca:0f:67:0a:c0:b6:37:b2:7d:91:
29:10:9e:ce:1f:46:f0:1e:d1:12:e3:6f:4d:9c:21:
74:f1:cf:35:49:53:9a:61:12:75:7a:e4:92:7b:3c:
84:1b:0f:7e:25:02:ab:63:db:bd:64:4e:b7:d9:40:
2e:d3:98:fc:32:ad:a1:b6:d9:49:59:63:3f:32:d3:
e8:3e:9b:a1:4f:3e:c6:81:c1:e2:59:ed:77:27:f8:
ab:9c:27:2d:f9:a4:61:79:97:f9:c6:0c:4e:7a:f9:
17:b8:31:df:70:9c:7e:b6:94:0c:01:c8:62:60:59:
5a:b8:6c:e1:32:91:7b:36:5e:04:b8:f4:8f:49:f6:
d5:df:ab:ac:24:3a:f8:f3:2f:b2:38:7f:bc:8e:fa:
f7:77:39:74:b1:45:9f:34:5d:b0:7c:65:c0:2d:a9:
2a:ea:e0:a6:f7:bd:f8:c1:55:c8:a6:fb:56:a9:32:
d0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DE:89:90:DE:18:CC:42:44:34:2C:40:30:66:BF:F5:93:3E:DF:59
X509v3 Authority Key Identifier:
keyid:36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1d:6f:0f:91:df:d1:57:a8:82:ff:4e:47:23:f4:94:a5:a9:
ca:89:d4:2b:50:33:a1:12:cf:2d:eb:f7:10:5a:12:bd:2e:c6:
ef:2e:ce:33:2e:e1:26:3e:8a:5a:c2:57:4f:80:d8:b7:2f:c5:
77:e5:ae:dc:9b:75:f6:96:f7:1c:e9:22:a4:64:45:f9:df:ea:
fd:e1:19:38:42:28:36:f0:06:09:0b:ed:53:61:34:e2:f1:17:
0f:a8:68:e1:9a:5b:4a:76:e7:87:6c:ce:a6:3f:71:96:53:4f:
77:e1:e0:0a:e9:03:bd:b2:61:50:24:97:86:37:ca:46:a2:c7:
86:0e:e8:e3:5e:ea:5d:94:34:26:6f:92:47:3e:43:a5:1c:1f:
61:f9:10:c3:bd:21:1c:d6:67:7f:b4:46:db:5f:45:21:f0:71:
da:5c:a5:10:d6:33:0e:36:48:c3:cb:78:57:64:67:d7:28:c0:
65:2c:02:d7:85:34:50:77:de:42:c8:ae:73:c7:9e:b1:7f:1f:
e4:73:8d:a2:60:ee:ac:a5:58:29:93:e1:b0:b1:2d:a4:d0:b0:
20:cd:f3:06:99:fd:7b:e9:21:50:d0:87:cf:f5:8a:b7:14:1b:
9f:f5:c4:da:7e:77:62:6c:7f:68:95:a7:66:42:6f:82:9e:93:
99:09:61:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:28:41 2026 by rpki-client