
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft
File: NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft (raw, json)
Hash identifier: IjtHn1O5mtLujGrN/wU/vroGYXqEbsZXytG1/pZR1x8=
Subject key identifier: F4:99:AF:04:8E:2D:28:CF:61:00:82:67:09:50:E9:73:27:35:2F:33
Authority key identifier: 34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD
Certificate issuer: /CN=A91E8F36/serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD
Certificate serial: 025E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft
Manifest number: 0257
Signing time: Thu 19 Feb 2026 01:06:10 +0000
Manifest this update: Thu 19 Feb 2026 01:06:09 +0000
Manifest next update: Thu 26 Feb 2026 01:06:09 +0000
Files and hashes: 1: NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl (hash: 3cglATl/8g6TyHcVg4x46LHQKvXrxbJ9YKAlepoTmGA=)
2: AC270A727D0711ED8181DA7FC4F9AE02.roa (hash: iIeWWLVIFJDjrG1ibZP/xl+WAjIK44IJWqOkBlQGCcU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl
rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606 (0x25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8F36, serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD
Validity
Not Before: Feb 19 01:06:09 2026 GMT
Not After : Feb 26 01:06:09 2026 GMT
Subject: CN=69966202-8b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:38:70:76:41:1f:3f:b2:03:2f:5d:61:c1:
cb:72:74:91:8c:72:c7:1d:6e:f1:3f:2e:8c:3a:3b:
35:9a:35:a1:62:07:16:c3:e9:d2:a0:84:21:31:5b:
cf:48:39:2d:ce:c7:5e:75:68:9f:7e:5e:98:ed:eb:
b5:60:e9:fd:5e:a0:fe:ca:93:3e:c8:76:7d:ab:8e:
ba:68:0a:1f:05:bd:c6:3f:42:0f:a5:78:f7:37:be:
f3:97:95:08:3f:f3:9c:87:0a:24:99:27:e0:9c:0f:
96:4f:a9:62:f2:9c:3f:b9:f1:12:82:f6:b3:54:31:
11:ca:d0:ed:3d:d6:c4:38:81:a2:c5:a8:84:ea:39:
81:19:98:ec:d4:de:eb:f8:cd:f7:a4:d6:6a:5c:a1:
d5:6c:90:b5:5f:22:54:a4:c0:57:58:08:f0:4a:fe:
99:dc:ba:bd:9c:96:93:4c:a8:15:44:2c:58:8e:ef:
37:23:42:65:9e:b0:22:62:24:87:c8:5b:85:c0:cb:
39:5a:5e:4d:f4:1b:cf:67:cc:59:e0:f7:4f:70:b9:
78:33:d4:5f:09:c5:4b:1d:3b:35:72:e7:f5:03:7f:
d2:35:ca:b8:18:b1:21:f2:8a:95:d1:14:8c:2e:e8:
62:6a:91:65:62:77:32:bb:02:44:1d:52:23:cf:bb:
da:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:99:AF:04:8E:2D:28:CF:61:00:82:67:09:50:E9:73:27:35:2F:33
X509v3 Authority Key Identifier:
keyid:34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:0e:e1:51:45:85:ce:25:08:50:c0:38:6f:bd:38:0a:fc:ec:
61:c3:f7:95:f1:7e:20:5e:c3:e2:0d:f0:27:6a:fa:fd:dc:72:
5e:55:26:6a:39:42:5a:d7:fc:fa:e1:0d:88:77:24:f3:c6:fc:
7c:60:a4:81:b4:47:50:2d:80:20:84:0f:f9:1f:8d:a9:b5:be:
17:c8:0a:15:cc:95:3a:36:8c:13:aa:76:d0:c4:d0:7a:3d:e3:
d7:5c:7a:13:54:ef:d3:79:a4:f2:c0:12:68:dc:8b:cd:04:76:
57:ef:77:3f:10:14:7c:62:84:ce:b1:0a:d0:b3:9d:d1:5d:0a:
77:be:01:db:e4:7c:92:1d:6e:b8:d4:92:bc:f8:07:d0:20:fc:
c1:ac:b3:2f:e9:2a:02:6b:82:e2:5f:d5:40:cb:5a:1c:47:12:
28:16:f4:a2:02:5f:f1:26:24:3b:88:c8:d4:ac:d2:fb:85:de:
07:fd:8a:b7:ce:cb:2d:1b:33:95:57:9d:ff:a4:a1:47:c2:8c:
11:d3:71:cb:06:fa:38:87:96:5b:fd:17:67:f9:28:f3:07:8e:
80:89:12:68:b4:90:c3:bc:99:47:7e:df:22:96:15:ef:d8:cc:
f7:1f:10:0e:4f:c7:b8:1e:27:a9:d8:a8:44:a3:84:d5:3b:41:
03:71:98:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:40:25 2026 by rpki-client