
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
File: 8iz473at_fLPnv7b7BITSIY1b00.mft (raw, json)
Hash identifier: /28/TnnWAs2CkUusK4Afavp3XmuHQhqQt5YyqkcHubs=
Subject key identifier: E9:47:6C:0D:3E:C1:F7:C1:ED:0A:AD:E3:DE:81:2B:3D:0E:3D:AD:23
Authority key identifier: F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D
Certificate issuer: /CN=A91E1604/serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
Certificate serial: 0135
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
Manifest number: 0132
Signing time: Thu 19 Feb 2026 03:56:15 +0000
Manifest this update: Thu 19 Feb 2026 03:56:15 +0000
Manifest next update: Thu 26 Feb 2026 03:56:15 +0000
Files and hashes: 1: 8iz473at_fLPnv7b7BITSIY1b00.crl (hash: 9JtLIMQZoMSmH7eBZP0p8T6K/M8Hk1M34N3Czk4Gx30=)
2: E36214403D0011EFAD623342C4F9AE02.roa (hash: AwYKGbCuVNqR5TnlD+W51Ob1Ci3CK6EmFUtU8criHKk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl
rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:56:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309 (0x135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1604, serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
Validity
Not Before: Feb 19 03:56:15 2026 GMT
Not After : Feb 26 03:56:15 2026 GMT
Subject: CN=699689df-24dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:b5:05:f1:42:bc:cc:53:32:e5:92:2d:04:
01:b9:41:cb:72:50:c5:36:3c:ca:38:78:f6:7e:39:
6d:cb:ac:5f:05:1c:a0:03:81:2b:9e:8b:a0:38:17:
11:be:37:fb:45:67:73:92:2b:bf:99:a1:98:12:08:
83:27:b1:41:18:61:75:88:e9:c7:ed:49:9c:1d:ce:
0c:e2:bf:ae:f9:99:3d:2f:f6:6b:86:e2:6b:79:50:
12:c7:b0:ca:a9:b4:32:93:f2:24:fa:ea:b1:b5:ef:
00:64:0d:a1:3a:6b:d7:3e:20:ec:a1:d7:9b:2f:61:
73:78:ea:7e:04:83:5c:ec:11:97:ce:35:d7:77:a2:
e0:4b:78:5d:56:30:8a:a5:52:5c:70:36:5b:1a:e9:
42:c0:a1:06:23:e4:31:74:17:ca:e5:69:43:6b:8d:
29:a1:b1:e1:16:a3:90:f6:49:17:e2:8f:61:b9:36:
d7:04:d4:0c:0f:6b:50:83:03:19:4b:b6:1d:66:73:
3a:5f:30:48:d6:1b:2e:8a:7b:4f:b4:12:5f:91:11:
43:7d:2c:b1:53:bc:5f:d9:3a:71:a5:6f:43:f4:1e:
3f:65:5e:7a:db:7c:a6:a5:b0:63:99:93:56:71:2d:
42:74:67:0c:61:dd:db:79:5c:3c:34:fd:47:7f:28:
8a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:47:6C:0D:3E:C1:F7:C1:ED:0A:AD:E3:DE:81:2B:3D:0E:3D:AD:23
X509v3 Authority Key Identifier:
keyid:F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6b:e0:5b:3c:aa:37:1b:c8:88:f6:90:ca:8b:2f:d0:f2:4b:
a8:96:49:dc:6b:a8:6a:f0:c0:e2:fd:a6:06:88:30:da:50:93:
65:bb:d6:c9:4a:1f:73:6c:95:51:1d:05:b7:ca:3e:07:62:21:
86:96:50:8c:cd:10:f5:4e:ae:da:d0:0a:c0:ca:c9:98:b0:de:
b9:7d:25:e3:24:4c:7f:25:0a:4c:59:b2:ab:ae:7c:e5:52:97:
61:79:38:8c:a8:8e:f1:8e:e0:7e:ab:15:54:52:a5:ec:50:33:
28:20:74:1f:2a:81:86:f9:4a:d4:56:20:ae:e1:45:12:1d:4b:
c9:48:01:25:0c:d1:28:d8:8b:47:8d:a4:d3:0a:f5:c5:ae:9f:
9f:bc:1c:c7:ef:8c:3c:e0:44:88:d7:d6:2c:30:1e:04:75:2e:
01:b2:00:e6:2e:d0:8f:62:df:ef:ed:52:66:d6:36:3d:49:4f:
21:f1:3a:b0:a4:d0:49:9d:4d:30:c5:6f:69:7c:11:98:82:02:
97:de:ce:2b:48:89:62:6f:52:14:56:7c:c2:e4:27:c0:9a:93:
b9:91:75:e8:1d:78:21:b4:00:e8:df:e2:4d:f1:fc:2d:a1:d2:
cd:7e:5e:2e:de:8d:98:fc:27:33:ec:bb:d2:fa:12:4b:5b:d8:
3e:35:a7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 06:14:26 2026 by rpki-client