
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft
File: k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft (raw, json)
Hash identifier: I8RX4J62uUNOQQWgTOjM8SuHkr/bTW12rXWICalCDz0=
Subject key identifier: F6:E0:7C:DE:AC:BA:4B:B0:E7:EB:75:70:3E:8A:A9:9E:1B:79:9D:D0
Authority key identifier: 93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9
Certificate issuer: /CN=A91E3D15/serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9
Certificate serial: 144D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft
Manifest number: 1432
Signing time: Wed 18 Feb 2026 16:40:13 +0000
Manifest this update: Wed 18 Feb 2026 16:40:13 +0000
Manifest next update: Wed 25 Feb 2026 16:40:13 +0000
Files and hashes: 1: k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl (hash: CassqYllvX6gMQzSmNHw8GnWDh4Zk9yK5y43DcMIP/4=)
2: A04E05E42CE911EC8F99F486C4F9AE02.roa (hash: bw4oyTaqoqfdp29e2lYAU370gy2twH+W8CpSCQrTXLg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl
rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:40:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5197 (0x144d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3D15, serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9
Validity
Not Before: Feb 18 16:40:13 2026 GMT
Not After : Feb 25 16:40:13 2026 GMT
Subject: CN=6995eb6d-8913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:10:82:a1:d0:3b:88:28:12:79:58:d9:e6:
6d:e4:08:26:5d:d7:d0:82:1f:b8:37:e5:e0:2e:ab:
b8:bf:a8:f2:aa:fd:eb:15:d8:c2:51:18:ce:31:c0:
1e:ef:19:73:d8:0a:ee:ae:20:4f:16:d8:92:43:38:
31:30:37:da:c9:44:85:da:9c:9c:ba:5b:96:33:27:
84:87:bb:82:cf:42:62:7e:7b:4c:7f:0d:54:63:9c:
f6:fb:c8:d8:38:9b:37:89:4a:b1:4b:44:a4:2a:ed:
9c:a3:7f:17:0c:d3:c5:9a:0d:b7:99:79:ae:f8:4b:
37:38:26:ed:c6:59:e9:bd:0b:b6:b6:57:4b:6f:43:
ce:18:8f:07:d5:26:ef:c6:b8:6c:8f:3b:f6:7a:39:
6b:66:00:4c:95:eb:94:56:87:c6:32:88:6f:92:3b:
88:1c:6a:d2:7d:a7:34:fd:bf:ad:b1:53:87:04:ed:
b6:0d:9e:2d:bd:27:b1:66:e1:b1:13:ba:59:58:05:
da:a8:0b:2e:b5:a0:d4:b0:3b:eb:b0:54:5a:08:1b:
35:75:c8:25:b7:05:e3:06:50:5e:1a:15:bd:32:c5:
10:9f:45:dc:c3:8f:dd:ad:85:b3:4b:c7:96:bb:dd:
f6:1b:a7:2e:a6:f9:64:f5:2f:e7:f3:e8:5a:85:84:
41:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E0:7C:DE:AC:BA:4B:B0:E7:EB:75:70:3E:8A:A9:9E:1B:79:9D:D0
X509v3 Authority Key Identifier:
keyid:93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:72:8f:02:e6:d3:ca:18:ff:71:d0:b9:cd:fa:27:62:fa:e2:
84:af:95:65:59:5c:72:2d:93:50:81:ea:e4:71:f6:d2:87:57:
2e:c0:61:fa:3f:9c:60:41:2d:42:f5:89:db:bb:38:78:d9:a2:
24:a0:09:8d:2c:c6:d3:8f:dc:05:21:50:d4:3e:99:94:73:5e:
2e:03:ba:94:67:ec:5c:48:e8:a1:fa:bd:84:98:d7:ab:7e:3b:
a0:e9:12:25:59:4a:32:3f:09:c7:8c:5a:a2:59:ef:3a:4f:d4:
7a:5e:8a:eb:d6:71:e6:0b:7a:81:f1:ad:20:fa:ed:23:fe:46:
76:64:30:e4:61:82:9a:0f:69:89:0c:1f:81:8e:fc:47:8f:45:
fa:ff:47:65:dd:cf:2a:f9:69:fe:b2:fc:bc:06:6e:56:c0:c3:
03:06:89:94:93:d0:68:8b:bb:bd:09:71:1e:ac:ae:f9:4a:b6:
4d:9e:1a:31:29:50:03:54:85:2f:89:71:fb:1f:19:4b:c2:14:
1a:02:f7:04:a7:19:01:44:73:3c:e4:8f:7e:44:f7:39:f0:45:
73:9b:6f:2c:bb:7e:d4:2f:5b:4a:87:b3:1c:a3:a8:e0:ec:71:
9b:1c:37:ec:43:b1:96:ff:a0:bc:22:47:77:3b:cd:96:f0:33:
6d:80:65:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:27 2026 by rpki-client