
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft
File: NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft (raw, json)
Hash identifier: xjRh8CFNeCQWOFdFoM2x44V+QAAXwjg0kY9mPIu55T4=
Subject key identifier: 12:B0:C7:86:D5:BB:A8:90:8C:BF:D2:69:38:4F:29:25:5A:CF:7A:EE
Authority key identifier: 37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A
Certificate issuer: /CN=A91DE7DE/serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A
Certificate serial: 1245
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft
Manifest number: 1215
Signing time: Wed 18 Feb 2026 16:54:51 +0000
Manifest this update: Wed 18 Feb 2026 16:54:50 +0000
Manifest next update: Wed 25 Feb 2026 16:54:50 +0000
Files and hashes: 1: NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl (hash: n3koZZHQmjf1DkCAqi9Qh0yGcmWV9E1GhQmwggxGDW8=)
2: 7F7F1470091D11F0B7E95627C4F9AE02.roa (hash: 1Dte1jitl8LnOYOoLvG0ce2OItlY4tphV2pGfVGqSvQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl
rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:54:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4677 (0x1245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE7DE, serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A
Validity
Not Before: Feb 18 16:54:50 2026 GMT
Not After : Feb 25 16:54:50 2026 GMT
Subject: CN=6995eedb-8e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:42:ab:ab:55:b1:a2:b2:e8:0d:7e:5e:45:29:
e2:b7:60:de:11:52:26:29:33:7b:53:64:d4:8c:d3:
f4:7c:41:67:1f:79:4f:d5:65:65:52:91:e2:de:c7:
1f:1e:b7:29:57:e9:60:0b:84:6a:5a:08:fe:aa:69:
60:91:d8:47:05:8b:ad:0a:1e:96:4d:7c:83:20:1c:
e3:3d:75:40:63:57:c6:4d:8b:b0:5c:25:3a:b7:72:
bf:f2:a0:08:65:86:f4:fa:b5:ba:2a:79:db:87:df:
a8:55:b1:73:dd:32:41:98:6c:6a:50:90:f7:6d:7e:
39:52:f1:4e:4d:e3:a5:09:17:e1:9f:12:0f:74:73:
f9:a1:1d:c1:0e:3e:14:26:89:10:0d:df:42:75:24:
2f:17:11:42:e0:a7:44:ed:9c:a7:2b:37:75:8f:ce:
e3:61:7c:37:bf:8a:25:45:20:17:42:b4:ec:83:ea:
2e:68:d7:5d:58:d5:57:eb:ad:83:68:e1:e4:e5:f7:
9b:e1:2c:b6:d1:ba:98:62:ee:71:80:03:c0:7f:83:
7c:8a:24:78:ae:05:5b:c5:c6:91:58:93:bb:56:0f:
02:c0:db:38:78:38:89:78:bf:97:3d:75:4f:62:bb:
86:e2:4b:be:fe:ae:35:58:f8:3f:bf:dd:4a:42:ab:
9f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B0:C7:86:D5:BB:A8:90:8C:BF:D2:69:38:4F:29:25:5A:CF:7A:EE
X509v3 Authority Key Identifier:
keyid:37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:93:09:2e:a3:b8:eb:c8:5b:ca:81:ea:00:4c:ad:54:cf:c4:
35:ed:95:a8:3f:cd:06:b2:e8:4b:98:bf:13:85:f6:f2:0b:c6:
59:91:bc:20:4d:fb:4c:ca:a1:41:51:a0:d4:84:26:55:c9:34:
2b:16:b1:18:63:34:cb:66:81:3d:bb:6d:a1:39:32:03:d5:0c:
04:77:94:60:5b:b5:21:cc:c0:0f:7a:81:58:22:c4:6d:7f:da:
98:db:98:ed:4e:a3:ea:25:24:9d:5c:49:f8:4a:6e:04:2b:85:
2b:e7:d2:f5:ed:e7:13:05:ab:b9:1a:4f:01:06:aa:12:be:b4:
61:e8:5b:4e:6b:84:42:28:75:48:8e:df:5f:13:2e:41:b9:33:
ae:f5:82:d4:43:98:af:62:80:5c:98:30:01:af:85:d6:ef:ee:
3b:44:6d:0d:9f:a5:b4:58:1d:c1:14:10:e5:07:20:43:44:f3:
ea:6c:c0:1e:54:f6:15:09:ab:17:fb:5e:18:2c:47:da:8a:94:
05:17:d7:c3:b5:1f:04:b4:94:b5:b9:b5:88:2d:bc:38:56:4b:
ca:2b:f5:e3:85:b0:3f:0b:57:13:fd:96:53:66:f0:ac:5e:b7:
d4:7a:04:81:7e:87:fb:89:cf:8c:7e:07:d2:49:1a:10:ed:41:
1e:48:02:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:57:17 2026 by rpki-client