
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft
File: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft (raw, json)
Hash identifier: nEHpz+efZo4hBk1N9HupkJ6V9z20QSuDrmg//StOtJg=
Subject key identifier: E2:F9:D9:D3:BC:B7:AA:82:57:36:8E:18:72:59:F4:F4:B1:62:3D:B4
Authority key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64
Certificate issuer: /CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64
Certificate serial: 0902
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft
Manifest number: 08E8
Signing time: Wed 18 Feb 2026 17:40:20 +0000
Manifest this update: Wed 18 Feb 2026 17:40:20 +0000
Manifest next update: Wed 25 Feb 2026 17:40:20 +0000
Files and hashes: 1: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl (hash: XG7RQXt5alyXCdZ/i7X+nPsFcmeHsXWyc17LjvezpKg=)
2: D385E420314711EBA579873DC4F9AE02.roa (hash: CnYLh4BUAxrR2NuZuYhJl2t7I2W898doVAQxEO1yi00=)
3: 18B1B5361CE611EBB543881CC4F9AE02.roa (hash: KeAs7Gj0a8YzbbytS20guI+ZWtP16JsyUZNhndCzV6Q=)
4: 19B0BAAE1CE611EBB543881CC4F9AE02.roa (hash: O4ifFOc81fDMLSySd7Uu6xiGT3cNLLcxIESYfvptWZs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl
rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:40:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2306 (0x902)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F59A6, serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64
Validity
Not Before: Feb 18 17:40:20 2026 GMT
Not After : Feb 25 17:40:20 2026 GMT
Subject: CN=6995f984-33dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:f9:70:2f:e2:ef:f7:d7:ff:26:b3:7a:01:
1f:e1:9b:10:8b:a1:b6:88:c9:0a:7b:61:17:7b:5d:
be:fb:9a:bd:44:8c:5e:c7:db:18:b0:20:e2:e1:6a:
53:6a:4f:a6:44:5d:4a:11:6e:83:a0:84:45:16:7d:
9f:3c:f2:06:3d:43:1a:e7:36:56:04:44:66:50:a1:
1a:d0:ee:61:9a:7c:3e:59:84:a5:5d:fe:1a:c0:5c:
60:91:a9:ca:82:52:42:c5:2e:b8:38:fa:00:ba:b1:
44:99:ad:5f:f2:75:7b:ce:1b:5a:24:ec:9e:a4:53:
79:a3:7b:a6:ea:83:c1:9c:c1:a3:62:df:e8:58:b2:
69:e7:cc:60:64:57:2c:51:74:04:5c:2a:e3:19:a8:
9d:c2:ac:10:b4:0e:a2:a6:28:b5:62:ea:ec:cc:43:
ed:ce:2c:3f:e9:23:9c:88:3e:13:3b:98:69:bd:8a:
0e:58:b7:a4:37:06:41:50:4d:48:a8:00:37:df:92:
36:45:11:80:9b:b8:88:82:0a:b5:bf:29:8f:c0:bc:
9a:fb:20:e2:66:7a:be:b4:ab:df:ea:b4:19:c4:40:
17:ee:4a:45:f0:75:4c:4f:5b:c5:1f:3a:0d:b0:5d:
10:d5:43:22:97:79:45:1a:cb:55:de:c2:6a:20:1d:
11:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F9:D9:D3:BC:B7:AA:82:57:36:8E:18:72:59:F4:F4:B1:62:3D:B4
X509v3 Authority Key Identifier:
keyid:E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:fe:77:0c:36:41:e3:d6:a5:2a:94:a4:98:dc:d2:ba:02:f7:
b7:7d:87:f7:a0:fb:fe:6a:63:0f:5a:ac:a2:5f:95:f2:b6:00:
23:a2:25:68:70:5b:a4:2e:f5:a6:55:30:2a:2a:ce:0f:eb:68:
d2:f4:61:85:77:89:20:10:e1:74:a0:42:23:83:6d:80:08:21:
f9:b7:f2:ed:8b:8f:32:39:95:34:ea:b7:bf:2d:0e:4b:a8:70:
28:83:c9:f3:84:19:ab:06:42:61:bd:55:d9:9b:f6:64:a5:96:
a1:45:ad:01:3e:28:17:91:2d:c8:36:b0:7d:65:12:6c:2b:af:
7b:fa:19:d5:73:af:7a:6a:93:cd:36:85:de:b6:05:e7:43:48:
e0:eb:76:f8:6b:31:81:61:d0:9e:15:1e:64:c6:7f:78:e3:33:
ea:93:8a:de:e2:de:d4:42:d9:f4:1a:e9:23:50:ff:d5:87:05:
bd:6d:e7:ae:f8:17:06:09:a8:b9:0e:7a:27:f9:03:11:6d:7b:
9c:93:df:a3:cf:9b:17:23:13:2e:63:04:f1:41:30:93:8f:3e:
0e:8b:a0:83:f1:52:cc:6c:8b:ff:48:22:f9:cc:3d:cc:d4:be:
f0:85:0e:43:5e:b4:f8:e1:89:6d:09:ac:33:25:5b:cd:93:6c:
5f:62:d8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:44:16 2026 by rpki-client