
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft
File: PN9D1xf8WEnyOpTimncrKKXXAeM.mft (raw, json)
Hash identifier: xfrJjhroCx3E3iNNDK9CCpRZWyxoWnI7NOBe9G2W9EA=
Subject key identifier: 5B:1B:40:CD:69:48:42:23:8E:D5:8C:3A:EA:A2:DD:63:D7:8E:25:27
Authority key identifier: 3C:DF:43:D7:17:FC:58:49:F2:3A:94:E2:9A:77:2B:28:A5:D7:01:E3
Certificate issuer: /CN=A91E3BB3/serialNumber=3CDF43D717FC5849F23A94E29A772B28A5D701E3
Certificate serial: 08D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft
Manifest number: 08D0
Signing time: Wed 18 Feb 2026 19:55:08 +0000
Manifest this update: Wed 18 Feb 2026 19:55:08 +0000
Manifest next update: Wed 25 Feb 2026 19:55:08 +0000
Files and hashes: 1: PN9D1xf8WEnyOpTimncrKKXXAeM.crl (hash: /7FQUWX7z4IFJGoWR4NfWOENVHSqktko2OSkROosZPM=)
2: D0CF108ED85111EF9DC0826CC4F9AE02.roa (hash: YDlJJK3r3QY2jge7AOb3CYnCW+wC8nrMDrmyeODCDi8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.crl
rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:55:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2265 (0x8d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3BB3, serialNumber=3CDF43D717FC5849F23A94E29A772B28A5D701E3
Validity
Not Before: Feb 18 19:55:08 2026 GMT
Not After : Feb 25 19:55:08 2026 GMT
Subject: CN=6996191c-2544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:95:04:f5:4c:3c:f7:cb:40:d6:bc:19:5d:
b9:54:43:be:5e:53:76:30:06:40:bc:db:95:13:73:
0d:02:88:61:e3:94:92:b8:a9:24:00:fc:f3:b4:54:
b1:9b:38:e7:5d:8a:52:7f:9a:a3:8f:f1:89:ec:27:
86:40:96:c2:52:42:26:77:8c:3e:ce:5f:8a:fc:83:
b4:42:fb:68:1b:5f:59:05:78:93:fa:8f:cb:74:31:
34:fe:92:0d:94:ee:36:d6:15:74:77:7f:5f:02:0b:
e8:ed:08:42:9b:74:02:05:b9:80:df:93:33:ec:8a:
b6:a0:70:9b:86:9d:0f:4e:2f:af:49:40:d4:bb:e3:
13:01:ee:80:42:b7:59:11:b5:be:a1:3e:1d:df:bf:
b9:19:b5:a9:2c:92:64:db:cd:c9:b4:b9:b6:36:c6:
b0:e8:40:c9:79:63:c2:5d:00:d1:88:5d:cf:e6:a8:
b0:8e:b5:d8:44:38:36:b4:24:68:ba:60:cb:f7:97:
b1:97:3f:a8:73:6a:4c:14:5b:bb:90:5f:d3:cf:d0:
88:9d:f5:67:4b:49:63:6d:8a:ed:24:b5:57:11:68:
a7:49:7a:18:ae:13:ad:ba:4a:27:d9:3f:a3:d2:4e:
f9:a9:6a:24:95:f8:c2:93:2c:2d:34:e4:45:55:23:
dd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1B:40:CD:69:48:42:23:8E:D5:8C:3A:EA:A2:DD:63:D7:8E:25:27
X509v3 Authority Key Identifier:
keyid:3C:DF:43:D7:17:FC:58:49:F2:3A:94:E2:9A:77:2B:28:A5:D7:01:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:88:fd:b3:4d:60:41:41:09:b0:f1:ed:b7:c2:80:f9:f2:19:
9d:18:db:6d:50:1a:b0:ca:53:01:48:ac:8c:2d:08:60:6a:8c:
3f:8b:4f:db:64:af:23:a1:01:14:d1:4f:e1:d4:fe:f8:80:4c:
14:b5:14:7d:32:96:dc:d2:98:30:02:73:30:50:7f:6c:b9:7c:
f4:c7:97:e7:f9:3f:be:57:97:5f:27:3c:f1:76:c3:36:98:5c:
5f:7f:e9:8c:7c:89:15:27:09:ca:d5:30:4d:58:e6:75:6e:8e:
34:77:c4:ac:8a:87:1d:f2:05:e0:96:37:4c:e2:55:86:3a:1e:
5d:60:83:17:03:75:00:52:f9:93:29:e1:27:8e:84:bc:6e:b7:
1d:75:22:f5:05:1c:e9:ca:d7:a2:b9:72:8e:94:b1:ef:55:e5:
ed:88:5c:d7:10:ae:14:bb:f4:c4:c1:d2:f9:21:3d:74:b7:44:
dc:89:cc:06:89:d1:eb:6a:e2:f3:12:74:ac:e4:16:03:22:5c:
bf:28:8b:d1:34:dc:91:07:cf:af:6e:38:59:d0:6e:33:6e:39:
dc:1d:52:7e:fe:aa:22:6b:86:bf:67:64:09:08:81:a7:be:46:
92:b9:f8:90:50:3e:47:ee:f3:f4:5a:2a:4c:a1:50:0e:a7:9e:
79:bf:bb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:56 2026 by rpki-client