
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft
File: Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft (raw, json)
Hash identifier: k8DG22jtZwYBSLyFXPMBxdrwP+5IPFYIX516kLJ9Bd0=
Subject key identifier: E7:66:0F:89:0E:EB:2E:8A:C3:4A:27:9F:98:D1:42:ED:AC:8D:3A:E9
Authority key identifier: 3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7
Certificate issuer: /CN=A91F1303/serialNumber=3F17790989172F409267E0FFE744EE48B01791E7
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft
Manifest number: 83
Signing time: Thu 19 Feb 2026 05:59:31 +0000
Manifest this update: Thu 19 Feb 2026 05:59:31 +0000
Manifest next update: Thu 26 Feb 2026 05:59:31 +0000
Files and hashes: 1: Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl (hash: 42tKgagAwEY6NhYDDCJ74+LiK+vrNerbqW+qvHSPT/E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl
rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:59:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1303, serialNumber=3F17790989172F409267E0FFE744EE48B01791E7
Validity
Not Before: Feb 19 05:59:31 2026 GMT
Not After : Feb 26 05:59:31 2026 GMT
Subject: CN=6996a6c3-a39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:37:d0:5d:44:07:cd:3e:58:ad:8b:3c:e9:
7a:f5:32:97:c5:ff:7c:d9:e2:95:36:04:ff:99:91:
51:51:fe:95:d2:ec:ca:c9:9d:59:1e:e6:36:c0:d2:
d5:de:0e:c4:34:a3:41:1d:0d:e1:72:e5:52:dc:18:
27:59:1d:9f:8d:f5:3d:98:09:b5:a1:8f:c6:70:94:
a2:da:98:35:04:7d:c2:07:7b:8e:38:67:54:57:c0:
fa:3f:79:72:2e:a7:48:a7:38:33:15:7f:ab:9a:c9:
cd:19:19:1b:9d:ce:aa:fb:c0:1e:11:a0:1c:b2:60:
60:d1:d6:97:0f:cd:6e:89:3c:78:50:d5:54:4f:d3:
5c:65:04:c1:56:ca:c6:d7:1d:df:ea:a0:6e:f8:e8:
a0:a1:87:6e:b8:e6:c3:43:f3:67:b7:41:66:33:dc:
7c:d1:0c:fd:57:c8:2f:36:f1:0d:75:81:c2:8e:0f:
96:e4:3b:ad:9a:56:6f:59:f2:da:c5:72:9f:36:bb:
5b:92:bf:ea:ad:aa:70:c2:55:60:6c:e7:cb:d8:84:
15:72:b2:4a:3e:ce:94:b9:cb:9d:13:37:ce:54:7a:
0e:21:17:2c:62:bc:c9:4a:2c:52:3b:a6:7f:69:1e:
b9:b4:12:96:d8:ef:2d:40:bc:a8:98:1d:99:45:56:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:66:0F:89:0E:EB:2E:8A:C3:4A:27:9F:98:D1:42:ED:AC:8D:3A:E9
X509v3 Authority Key Identifier:
keyid:3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:b7:77:de:db:f5:71:02:45:c5:35:8c:10:e1:3f:5c:e0:11:
7e:26:cc:6f:45:f4:83:b0:e5:ba:c0:45:68:2f:ed:1f:6c:f4:
8f:2a:e2:4d:46:9b:5c:a2:33:e8:1a:25:19:fe:d1:fd:93:1a:
82:e9:b3:6d:42:15:0b:b6:9b:85:a9:28:1d:d8:23:be:fc:76:
87:d9:d0:80:4e:8d:03:98:16:18:31:ce:7d:d7:1c:39:27:f3:
a2:fc:a4:c5:0d:0f:68:a8:3f:ad:86:72:8c:b3:18:e8:8c:b6:
c6:4e:2a:24:32:b8:0f:cd:b4:53:9b:ed:ab:ae:3b:5f:a1:27:
7d:0b:dd:24:e8:24:01:24:ed:f4:41:e7:f3:25:2d:37:ca:c5:
36:8e:77:d5:dc:d0:a1:be:f7:23:01:77:67:26:dd:5f:aa:c2:
1b:6f:9b:0e:c4:9a:b5:15:6c:a7:32:f1:9b:45:4f:23:4e:2a:
a4:ac:db:58:e1:6e:32:57:e0:d2:a1:a4:c3:fa:fd:75:c9:71:
23:f2:30:11:7d:d5:a6:28:9a:5c:cc:1e:1f:c1:4f:b7:8e:85:
1e:7c:da:78:c1:84:a0:42:db:d8:ed:a2:87:4b:47:a2:a2:79:
f7:8f:0a:da:fe:df:7d:5a:4f:ca:db:51:31:b8:cc:68:28:a1:
4c:60:f5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:39:42 2026 by rpki-client