
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft
File: ciYIDnxlJSNDlihmsxOfAjhyxAI.mft (raw, json)
Hash identifier: CHrNq1TECRuVSRGSIPhQoM824UMyBPtW5hTGPZcLBoE=
Subject key identifier: 00:01:FE:E3:84:09:16:57:5F:2A:99:87:8E:30:F8:4B:AB:16:EF:4A
Authority key identifier: 72:26:08:0E:7C:65:25:23:43:96:28:66:B3:13:9F:02:38:72:C4:02
Certificate issuer: /CN=A91ED596/serialNumber=7226080E7C65252343962866B3139F023872C402
Certificate serial: 011E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft
Manifest number: 011C
Signing time: Thu 19 Feb 2026 04:08:43 +0000
Manifest this update: Thu 19 Feb 2026 04:08:43 +0000
Manifest next update: Thu 26 Feb 2026 04:08:43 +0000
Files and hashes: 1: ciYIDnxlJSNDlihmsxOfAjhyxAI.crl (hash: HBfBSgHmXEtIH4qhkR7+oYW0fiUknDiTKW+QH55kW0Q=)
2: C0C401905AE311EF90924C30C4F9AE02.roa (hash: YxY/TXb7ZV7RLnxJEIm3XTlQ67ELpalTGoTZTqConuI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.crl
rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED596, serialNumber=7226080E7C65252343962866B3139F023872C402
Validity
Not Before: Feb 19 04:08:43 2026 GMT
Not After : Feb 26 04:08:43 2026 GMT
Subject: CN=69968ccb-e763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3d:63:c0:e5:c7:8f:1a:9d:dd:f7:87:d8:48:
d3:65:9e:8d:9e:39:37:be:4d:e7:89:f8:05:37:87:
88:ea:6a:57:7f:29:9b:54:ab:ed:c4:2b:3a:53:78:
04:f3:20:a2:f5:ef:08:7b:77:b0:44:19:ac:59:56:
ec:46:91:c9:dd:be:ef:31:9e:15:d9:2b:01:1e:06:
e8:9b:5e:d5:f6:fc:c9:7d:4e:5d:d8:95:f4:9a:87:
61:4e:b2:6a:8e:79:52:f6:f5:23:18:e8:d2:70:c2:
17:f1:ac:19:cd:84:5e:07:f2:84:5f:24:4c:e1:dc:
39:a6:51:7d:2d:1f:13:27:51:d6:41:f9:0c:1f:52:
88:31:62:14:99:ae:eb:ae:ad:63:be:4f:ab:65:1b:
3a:08:dc:d9:cc:9e:19:5c:8e:8c:59:27:0a:02:e3:
16:18:66:78:f1:af:6b:72:74:36:04:73:2a:59:a5:
85:f3:63:25:30:54:90:1e:fd:b8:8c:f9:dd:f6:01:
03:44:43:3b:43:e1:fd:92:db:97:bb:23:85:4c:85:
ff:e0:de:5d:ec:cc:72:e3:aa:c4:10:f3:2a:f2:3b:
dd:57:b2:7d:5d:3f:78:64:1b:54:be:a4:83:21:27:
c9:93:0d:bd:e1:3c:d6:55:00:9f:d3:ab:57:be:c4:
22:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:01:FE:E3:84:09:16:57:5F:2A:99:87:8E:30:F8:4B:AB:16:EF:4A
X509v3 Authority Key Identifier:
keyid:72:26:08:0E:7C:65:25:23:43:96:28:66:B3:13:9F:02:38:72:C4:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:02:97:ba:a0:46:5a:37:33:6a:fb:9c:eb:e4:cf:48:09:45:
2e:6d:23:5b:56:d6:13:4e:73:02:8a:bd:5d:ab:33:55:67:52:
a1:08:b2:6c:1d:ba:aa:d3:dd:d5:db:01:55:d9:61:b7:e9:e5:
88:45:ee:ee:54:e1:69:fa:b4:31:30:72:ab:fc:69:1c:08:89:
2a:71:4f:5b:bb:67:62:2b:42:b8:0b:33:e9:d4:4a:84:14:17:
c7:e4:00:7b:0d:32:1a:04:b6:a3:97:2d:32:96:a1:61:7c:f2:
b1:ee:18:12:bd:dd:64:62:b0:12:8b:21:03:ac:5e:79:50:25:
74:63:36:a0:12:fc:42:3f:ae:88:33:65:81:42:90:86:ad:1c:
22:bb:32:21:b1:30:15:56:c4:8f:33:5c:7e:09:a7:3b:f1:b4:
d6:24:84:b8:16:93:6e:cd:b4:f9:75:fb:55:2c:7c:4a:e2:53:
b9:f4:1b:9b:0e:c8:7b:aa:36:1a:4d:bf:90:6f:ee:c9:6d:2e:
a4:7a:d9:26:08:cf:41:3c:30:a8:2d:71:32:3f:1c:27:3a:88:
ab:53:11:3a:8b:e1:48:3b:25:5d:de:e0:05:35:ca:84:92:86:
b0:28:ad:2c:61:74:d5:73:e8:8d:47:36:d1:04:d2:f6:d9:3a:
e8:f7:1b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:13:21 2026 by rpki-client