
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft
File: K7fm9k6JPZEwSosliGA1DWdQVK0.mft (raw, json)
Hash identifier: l8DiuxH9j8dlSMRxDHygM65h6Ov12LnXaGc+LbRXlIo=
Subject key identifier: F8:9D:8B:6F:0A:E2:10:C9:12:21:F3:D4:1D:68:18:96:5D:B5:1D:55
Authority key identifier: 2B:B7:E6:F6:4E:89:3D:91:30:4A:8B:25:88:60:35:0D:67:50:54:AD
Certificate issuer: /CN=A91F08D9/serialNumber=2BB7E6F64E893D91304A8B258860350D675054AD
Certificate serial: 63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft
Manifest number: 5F
Signing time: Thu 19 Feb 2026 06:23:20 +0000
Manifest this update: Thu 19 Feb 2026 06:23:20 +0000
Manifest next update: Thu 26 Feb 2026 06:23:20 +0000
Files and hashes: 1: K7fm9k6JPZEwSosliGA1DWdQVK0.crl (hash: qZS4rRdRufQzsguyMeAbHnSx83YEGk/5+pP9CtDLuX0=)
2: 87B1CF3484AB11F08EC73477C4F9AE02.roa (hash: RjgLOuF0n1X6yMn5QtVrfn7LMHid0aUgc2sd0x2KRqg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.crl
rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:23:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F08D9, serialNumber=2BB7E6F64E893D91304A8B258860350D675054AD
Validity
Not Before: Feb 19 06:23:20 2026 GMT
Not After : Feb 26 06:23:20 2026 GMT
Subject: CN=6996ac58-dd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1d:5b:dd:31:d9:4f:63:b9:0f:f9:35:48:7c:
0e:a2:aa:db:2e:11:5f:bf:9a:b8:61:3f:4f:5a:e3:
dd:5e:7c:a1:c5:93:95:27:83:9f:df:1d:e3:01:68:
87:1c:5d:48:fd:2e:45:72:bb:09:d9:df:7e:9b:22:
31:0e:1d:4e:64:49:2b:53:46:77:84:05:1f:a2:18:
ab:5e:7c:5b:6d:f5:67:06:ef:81:f7:8a:3e:5b:54:
cd:b2:c7:91:ad:82:d6:ac:14:1b:60:de:70:2c:e6:
07:d6:24:ec:f4:70:9d:45:7b:bc:a1:ed:b1:62:3d:
54:0b:6f:d7:a8:2e:f6:69:62:01:9e:15:b0:e8:a4:
e4:9c:e9:92:83:f5:e0:85:08:eb:2b:3d:ab:9b:1a:
85:df:09:b1:ca:a3:25:91:d1:9a:1b:61:50:2d:16:
4d:d1:10:ff:1b:f3:a6:90:df:48:e5:90:79:79:39:
ab:31:ee:7f:0d:52:98:23:f2:c8:de:53:71:f4:35:
39:93:4f:7b:13:e4:1e:f3:82:b1:c7:30:fb:7f:18:
9d:9b:7b:57:83:a2:34:af:90:48:ab:1a:a6:24:e1:
e9:02:d9:de:0e:8f:a3:1c:b5:63:80:ba:74:1b:86:
f1:72:b8:6b:17:23:8b:c1:52:e4:37:19:72:48:7e:
e8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9D:8B:6F:0A:E2:10:C9:12:21:F3:D4:1D:68:18:96:5D:B5:1D:55
X509v3 Authority Key Identifier:
keyid:2B:B7:E6:F6:4E:89:3D:91:30:4A:8B:25:88:60:35:0D:67:50:54:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:4e:c0:b9:33:45:fc:28:74:46:4f:b0:fa:20:dc:c3:d3:3e:
04:bd:1b:18:e3:6f:c9:dd:c6:9d:7e:86:da:4b:85:b8:c1:e1:
1b:b1:25:33:3a:cc:8c:6e:2d:9f:42:ae:50:d8:82:6b:cb:17:
35:cd:de:32:6a:e4:a1:e0:39:2c:99:79:fb:50:fc:30:30:1e:
ce:22:cb:dc:2e:9c:df:71:b0:43:b3:f7:e2:64:c5:b4:91:7c:
bc:3c:da:a6:53:04:00:2f:d0:60:60:8f:d6:00:6c:ef:e0:3c:
1d:70:30:08:44:2f:cf:c1:6b:40:60:24:dc:7f:a2:34:b4:f0:
e1:b7:86:b4:79:2c:2d:ba:dd:7f:87:d0:6f:4b:46:19:78:2d:
0c:f0:e5:5f:2c:4a:49:56:9e:3d:44:a9:81:36:8d:30:74:6c:
0a:22:c1:db:c1:ef:8a:d9:55:2d:19:70:fb:40:99:ea:fb:43:
16:da:26:2a:17:c2:25:22:8c:d6:4b:fe:c9:37:c9:4d:62:5f:
9c:b2:e5:7f:d2:b8:06:47:2b:55:9f:1e:94:e8:ca:0e:1b:76:
a4:52:df:a4:9a:16:ec:fe:07:43:a8:90:0b:fc:45:aa:23:f9:
2f:bf:95:95:ce:c0:58:a9:46:18:12:a7:67:82:01:7f:74:1f:
27:86:b1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:41:26 2026 by rpki-client