
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft
File: _thOn-AVmpk3ohk6C326I7bCZbg.mft (raw, json)
Hash identifier: KLp82za5mF8BS0uOUQnpHQ5F2dRtVYpQqp34x6a4BV8=
Subject key identifier: 17:2C:AB:99:9A:EB:6F:C4:61:BC:39:17:03:31:C8:83:BD:47:F7:06
Authority key identifier: FE:D8:4E:9F:E0:15:9A:99:37:A2:19:3A:0B:7D:BA:23:B6:C2:65:B8
Certificate issuer: /CN=A91EDBB0/serialNumber=FED84E9FE0159A9937A2193A0B7DBA23B6C265B8
Certificate serial: AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_thOn-AVmpk3ohk6C326I7bCZbg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft
Manifest number: AC
Signing time: Thu 19 Feb 2026 05:34:06 +0000
Manifest this update: Thu 19 Feb 2026 05:34:06 +0000
Manifest next update: Thu 26 Feb 2026 05:34:06 +0000
Files and hashes: 1: _thOn-AVmpk3ohk6C326I7bCZbg.crl (hash: njjQdPj3hzz2pZvMZkMfMJ/VFweb0NOwI/kNnTx7bxY=)
2: 18317928083911F0A2909A72C4F9AE02.roa (hash: fPnd9TCItmXimGuCENGl/4MsqPzHHL+sjFkQjjF93Kg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.crl
rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_thOn-AVmpk3ohk6C326I7bCZbg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:34:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDBB0, serialNumber=FED84E9FE0159A9937A2193A0B7DBA23B6C265B8
Validity
Not Before: Feb 19 05:34:06 2026 GMT
Not After : Feb 26 05:34:06 2026 GMT
Subject: CN=6996a0ce-20ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:32:3a:38:1c:ae:48:a7:f6:76:22:94:d9:52:
86:9e:30:3e:b3:ec:e3:70:08:bc:5b:cc:65:d5:8a:
b0:96:2d:f2:5f:a0:2d:a0:57:79:b3:91:26:6e:ae:
65:d5:fe:98:c4:fa:f2:32:59:f1:a1:e4:21:99:94:
39:94:63:eb:c5:75:f9:96:f2:d8:f9:05:4e:d4:eb:
45:ee:43:a9:58:82:78:6d:29:50:47:1b:2c:4b:70:
e1:1e:5a:be:94:f4:98:fc:23:1d:0e:b0:e7:12:26:
46:22:38:14:e8:14:5b:07:50:94:21:5e:9d:7b:d9:
14:d8:de:3c:1c:6c:e7:d8:d6:cc:54:5c:1f:fe:a1:
58:b9:c5:6a:64:e2:51:f2:4b:e5:f7:f2:c8:33:9f:
b3:7e:b1:8f:ae:76:c5:8e:38:f5:2e:a3:54:fe:af:
53:0f:fc:15:3f:3e:3b:87:ed:2c:89:d4:64:d6:d3:
09:ea:94:51:c2:b6:fd:aa:94:19:52:ba:7e:f7:91:
68:71:91:3a:fe:8b:0c:d4:84:fd:78:dc:f5:5f:b0:
79:6b:39:fe:b5:e1:0a:e4:fe:8b:b3:ed:7b:90:ac:
6f:8a:8e:2c:69:6c:22:f3:dd:2c:ba:46:4f:81:30:
e3:cb:45:db:bd:b5:10:e3:98:46:cc:e4:38:be:b6:
01:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2C:AB:99:9A:EB:6F:C4:61:BC:39:17:03:31:C8:83:BD:47:F7:06
X509v3 Authority Key Identifier:
keyid:FE:D8:4E:9F:E0:15:9A:99:37:A2:19:3A:0B:7D:BA:23:B6:C2:65:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_thOn-AVmpk3ohk6C326I7bCZbg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f9:eb:40:b2:1f:92:b5:86:8f:35:11:51:53:07:08:21:5e:
ad:ab:37:9d:e7:56:60:d2:aa:9b:83:90:54:13:77:18:eb:ec:
57:7a:29:09:5e:0e:b1:db:9e:92:69:4b:69:8c:fe:d9:92:bc:
dc:20:54:87:fc:d3:15:2c:80:4c:f7:48:58:f5:65:17:69:3d:
0f:42:81:ac:48:9e:6c:70:5d:7f:fa:fa:a3:a3:2e:ef:ba:41:
96:a0:25:d3:8b:ec:d1:8f:56:c9:d9:c4:c0:00:88:92:ca:c2:
ff:09:f2:75:f3:e7:c6:24:dc:fa:ed:9b:39:e8:54:70:d6:a4:
82:f0:70:5a:cf:a0:be:68:8a:cc:83:a7:18:94:3a:9d:18:65:
42:23:15:4e:a4:92:39:60:8a:ad:87:66:ef:89:84:77:ea:ab:
80:93:4f:2f:e5:23:bc:cf:d0:18:c3:61:d2:38:f9:e2:29:50:
e1:4e:74:fd:14:6c:c0:89:1e:ce:6a:36:7f:0a:db:ea:99:48:
c9:72:03:01:74:2a:02:ac:bb:b2:9e:73:55:b9:7a:9b:3f:bd:
76:bc:f8:68:82:8c:f8:d1:0c:8b:59:d5:a3:70:b8:80:6a:74:
99:1d:bf:db:79:9c:ac:59:13:cf:f9:d6:fe:b8:83:46:fa:28:
35:ac:b8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:54:36 2026 by rpki-client