
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft
File: cNjYKyIacSIO_Vg9kvc2F15dAvE.mft (raw, json)
Hash identifier: 3ZKKbWDK5a147CVvtJg8cPcuaifvhxM9Q+cZA1MeQmo=
Subject key identifier: D3:E8:AF:01:9C:C1:F6:14:79:20:B9:0F:8F:69:67:F6:0A:0A:CD:B6
Authority key identifier: 70:D8:D8:2B:22:1A:71:22:0E:FD:58:3D:92:F7:36:17:5E:5D:02:F1
Certificate issuer: /CN=A91E9B39/serialNumber=70D8D82B221A71220EFD583D92F736175E5D02F1
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft
Manifest number: 29
Signing time: Thu 19 Feb 2026 07:00:03 +0000
Manifest this update: Thu 19 Feb 2026 07:00:02 +0000
Manifest next update: Thu 26 Feb 2026 07:00:02 +0000
Files and hashes: 1: cNjYKyIacSIO_Vg9kvc2F15dAvE.crl (hash: xiljeXX4DU1IE3qPYe84AANzT6wieEVSHaFpC/Xta58=)
2: 98127914D29411F0BA72510FC4F9AE02.roa (hash: cJUf464wfN4hlFnC0PZnSNNiMNLf0O5oWZ+yW9kxGh8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.crl
rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9B39, serialNumber=70D8D82B221A71220EFD583D92F736175E5D02F1
Validity
Not Before: Feb 19 07:00:02 2026 GMT
Not After : Feb 26 07:00:02 2026 GMT
Subject: CN=6996b4f3-87a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2b:49:3e:e5:fd:36:91:96:24:23:4c:3c:4f:
8a:ad:09:fc:9e:47:56:4b:fc:63:03:f4:9f:42:62:
9e:20:1c:09:f7:2c:fc:87:77:9b:33:09:22:5a:7c:
6d:c3:4c:e3:17:38:ae:64:32:5b:de:db:7e:77:54:
69:87:6d:4d:cc:42:39:ba:0a:3b:f4:6f:65:0f:b2:
c9:58:1c:cf:4b:15:2f:0b:e7:c0:69:a0:5c:64:7a:
44:63:2f:55:fc:80:34:c6:14:15:fe:70:0f:73:d4:
b3:19:a1:09:9b:cc:32:9f:f3:e1:e5:ea:c1:68:2d:
e4:70:7a:fa:e5:ad:e3:54:37:90:40:15:c6:07:0a:
d5:d3:2c:0d:e1:38:d2:8f:c5:54:e8:86:ac:98:94:
82:33:1f:3b:d2:ac:00:10:6a:00:80:c6:df:86:57:
93:7b:5a:b8:23:22:12:80:dd:ab:76:3e:4d:7d:ff:
7a:d6:69:84:cd:41:a4:b2:6a:80:eb:b1:a0:b5:0b:
77:d1:02:fe:a1:51:30:fe:f0:57:2c:fc:90:09:8c:
d6:74:ae:a8:c9:54:1e:19:50:51:5b:b6:4a:88:0e:
41:c5:be:95:a1:1a:26:b0:d3:a1:8f:60:92:85:d0:
bd:ad:9b:00:a6:12:c3:45:b0:53:12:9e:29:b0:d0:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E8:AF:01:9C:C1:F6:14:79:20:B9:0F:8F:69:67:F6:0A:0A:CD:B6
X509v3 Authority Key Identifier:
keyid:70:D8:D8:2B:22:1A:71:22:0E:FD:58:3D:92:F7:36:17:5E:5D:02:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f1:ed:1d:ea:c9:53:1d:70:f2:f9:3f:a8:6f:a4:8f:7b:ed:
ab:5c:53:e9:fc:d8:1d:57:7e:83:05:58:92:ab:0d:55:f8:04:
20:7f:bb:ec:50:6b:30:4e:ef:f2:d6:3a:20:ad:a7:ae:e7:7f:
a9:ea:11:5a:f3:cd:26:e1:56:63:de:4e:fc:9c:b9:4d:37:52:
1a:df:82:7a:fb:e1:81:41:9a:35:b9:3c:bd:a1:47:8c:c2:17:
31:9f:bd:8a:b1:14:9a:77:a9:83:3c:d9:7d:84:13:27:4d:74:
7a:f1:76:24:c0:4c:b5:8a:98:47:f4:7d:a7:5e:45:bb:59:10:
0a:f9:f9:f1:99:dd:4f:ed:ea:3f:78:07:6c:8b:4f:de:fb:c1:
a1:b7:49:fa:de:ff:76:5e:7d:46:51:da:cd:db:94:46:e6:e7:
ed:eb:40:35:5c:10:08:22:ef:b6:ac:d6:1d:dd:ff:47:06:75:
a1:22:f6:91:86:8a:a3:a9:d5:77:f3:81:e0:83:5d:1d:b6:50:
df:a5:a4:bf:9b:1f:3c:f1:e5:ee:37:93:be:86:62:92:93:95:
57:1c:9d:ac:a2:5c:89:51:41:1d:e5:e5:07:6d:12:02:3c:71:
3d:32:70:6b:4d:55:2a:8f:e6:a1:25:72:ea:96:8c:78:bd:c7:
8c:8d:c9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:16:02 2026 by rpki-client