
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft
File: CcNrxl3nKgQUf51yIL26jVJdFWQ.mft (raw, json)
Hash identifier: XuE8nSgWgwcyUuJ58OtOa+PHaNgx17O//f45yUI1aW8=
Subject key identifier: 00:86:CD:85:E8:82:6C:C1:78:1E:4B:4F:19:2C:45:7F:F0:9C:8C:76
Authority key identifier: 09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64
Certificate issuer: /CN=A91F83DC/serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564
Certificate serial: 0142
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft
Manifest number: 013F
Signing time: Thu 19 Feb 2026 03:46:58 +0000
Manifest this update: Thu 19 Feb 2026 03:46:57 +0000
Manifest next update: Thu 26 Feb 2026 03:46:57 +0000
Files and hashes: 1: CcNrxl3nKgQUf51yIL26jVJdFWQ.crl (hash: CYoJEKEpfvPpL5jMgbMKpp73Zdxv2IurmZf6ZRWNybU=)
2: 24AB7D08271F11EF81086430C4F9AE02.roa (hash: 2wSZlJkEVODTCB+anJmD5JlJEQTA220xHKcLvDnH+18=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl
rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:46:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F83DC, serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564
Validity
Not Before: Feb 19 03:46:57 2026 GMT
Not After : Feb 26 03:46:57 2026 GMT
Subject: CN=699687b2-2ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:21:fe:d6:2d:31:f7:7e:5f:90:08:7a:5b:ad:
f2:a6:43:9e:7f:de:e4:74:30:e5:5c:5e:40:b2:4f:
23:83:85:5b:b1:a5:e7:4d:a7:79:06:da:31:f9:61:
4b:a4:63:47:80:6f:02:29:89:f2:dd:0b:0a:8d:cd:
35:14:77:86:9b:b1:b2:df:e2:b4:6f:e5:73:e2:aa:
32:c9:84:8c:c3:c3:ee:99:ed:dd:8e:fe:03:68:f2:
53:6b:77:70:0d:0f:f4:ec:96:1a:8c:6a:4a:a2:c3:
ad:94:89:ea:8a:78:ae:4b:88:43:d3:17:71:4b:24:
e3:01:c5:f8:2d:5d:96:92:1f:4d:41:10:47:07:ec:
b0:a9:04:2d:a5:d6:4f:25:b7:31:14:08:e6:98:3a:
11:d6:ef:2c:8f:d4:a1:c4:e4:a7:42:31:ea:83:29:
20:4d:e0:dc:d1:5d:08:cd:0e:a6:80:26:b9:8c:7c:
cb:ba:88:25:71:78:d3:19:82:7d:cd:70:80:5c:e5:
7d:f2:5b:9a:4c:a8:ae:54:47:e4:0a:0d:84:3e:1c:
a2:84:04:59:4e:87:84:0f:c6:64:e8:30:39:6d:0f:
30:c2:50:d1:ed:dc:77:5f:30:6f:23:97:23:dd:e4:
c0:61:2a:c3:d1:24:60:c6:53:6c:64:d2:ac:46:74:
22:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:86:CD:85:E8:82:6C:C1:78:1E:4B:4F:19:2C:45:7F:F0:9C:8C:76
X509v3 Authority Key Identifier:
keyid:09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9c:ef:05:bc:fa:85:86:d2:98:21:fd:29:aa:e1:94:0d:68:
b8:cc:9a:28:07:c0:6e:30:80:bb:f3:55:3e:17:61:b3:85:f4:
71:5b:56:80:5b:e1:26:da:e8:12:9d:39:8b:72:7b:0a:54:1e:
59:b3:8a:39:60:16:de:dd:cd:87:a0:0e:7e:51:aa:37:21:78:
3f:a9:51:6e:65:7c:8e:47:59:cb:c0:6b:8b:34:5f:a9:f0:66:
eb:e4:5c:cb:dc:43:84:ac:b3:48:89:7a:38:b2:d9:19:98:aa:
f6:fd:ca:a6:d3:be:93:c7:86:f1:a2:12:c6:14:bf:0c:c7:58:
39:91:f8:82:f2:13:aa:7c:d7:0f:fa:f6:70:d0:68:97:4e:d4:
29:a6:45:55:38:c7:e9:09:35:1f:ee:9c:21:61:6e:2c:91:7d:
ea:60:2c:2c:e2:9b:fe:e8:ae:ab:00:31:5b:87:93:a9:f6:37:
fa:d0:e4:c8:dc:4a:26:64:b5:3f:3e:ae:5e:f7:fa:e5:22:2b:
8d:6c:c2:c8:6f:b4:50:a8:76:ec:ad:53:6f:1c:3c:74:ac:c3:
4f:75:55:88:4e:4a:4a:36:70:6f:1f:ce:25:6b:27:4a:f6:25:
e6:e5:85:d9:59:16:9c:07:d6:d3:13:1c:14:54:11:0a:32:72:
7d:7a:23:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:42:29 2026 by rpki-client