
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
File: q9Q1SGWcuydu-NNbghL4OOjOt18.mft (raw, json)
Hash identifier: jr34dzBg5+Caa3QU7cAmXvTLiP9A6+h6EzE9OS3R9/4=
Subject key identifier: A0:FA:1A:3C:87:83:4B:F6:84:7B:0F:72:26:20:CE:77:73:C5:48:AA
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Certificate issuer: /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial: 0B36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
Manifest number: 0AA0
Signing time: Fri 20 Feb 2026 19:17:13 +0000
Manifest this update: Fri 20 Feb 2026 19:17:12 +0000
Manifest next update: Fri 27 Feb 2026 19:17:12 +0000
Files and hashes: 1: q9Q1SGWcuydu-NNbghL4OOjOt18.crl (hash: 8WP94OxgDRGIJjLhncYMwxqI4pjQa2wsgxJAmc7Z0og=)
2: AF2F0B70CA7011F08E39E018C4F9AE02.roa (hash: 6Vgk/FxkYHBSFOkyH08KuRKKx5WE4ccXDRwyAZBcYRk=)
3: C14670EE323811F09C91DE2FC4F9AE02.roa (hash: FB2huuZ/tiCR/IS/ucieD51OLCSYw6eG3ZIKY9r9AjQ=)
4: 2452CF76CA7211F0B02B6A1BC4F9AE02.roa (hash: EhRiET3/O/CAcA8UbfYM10LqOs+ivWwDL8NkdbgVPBE=)
5: AEB63B14CA7011F09EF8E018C4F9AE02.roa (hash: ITTyY5G30Fvas/0S+enf6yUkjS5jiMxLhDJKjGPsvSg=)
6: AE493460CA7011F0B41AE018C4F9AE02.roa (hash: x0tDHZhxlrlqp7ek+TZhxXR8qsGnahQo2H42I0fE5ag=)
7: 6580E03C79E511EC99DA1B51C4F9AE02.roa (hash: gXzfPpJraCI1eMZ7u0kJ3M/+wD9m7V2Y4ANIxMghKvU=)
8: ABF4F248555511F0A341047BC4F9AE02.roa (hash: I1d1RCJ4rw/8orQ3As1NQw/eL62cfyC0BCN7vQ6zw48=)
9: 0B0485A250B811EBA8A3C670C4F9AE02.roa (hash: Ytc9ndn0dlR+m8jI9GCXZzm6gP/TjFiRbPEGnx2/DEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Feb 2026 19:17:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2870 (0xb36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Validity
Not Before: Feb 20 19:17:12 2026 GMT
Not After : Feb 27 19:17:12 2026 GMT
Subject: CN=6998b339-cc41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:46:f5:57:8b:74:d8:27:db:34:90:ea:f0:
47:70:8d:0e:31:c3:dd:83:50:66:fe:37:77:a6:e7:
07:03:cd:d0:40:0b:1a:b1:2b:a7:52:1d:be:9d:a2:
20:6e:ef:cd:ab:6d:91:69:93:a3:78:23:c8:f0:88:
ef:47:c0:a4:4f:a9:6d:11:da:b8:b6:10:51:30:53:
c9:88:9e:8f:f2:2b:77:e3:ce:b2:70:f9:79:87:18:
61:02:d5:79:79:62:e3:94:e4:ff:4f:56:3e:3c:06:
b8:c1:33:76:3a:50:e1:ca:da:64:bc:d9:76:85:40:
26:e6:7e:bc:57:ac:e5:a3:fb:54:f2:f2:b1:8f:05:
6e:86:2c:8d:3a:c9:fb:21:12:cb:85:cb:4c:82:65:
32:fb:de:4e:28:91:39:51:de:da:69:89:f3:99:ef:
0c:05:76:27:52:bd:15:e2:00:74:75:b5:7e:fb:23:
87:94:24:a9:6a:99:51:08:4b:14:95:c7:78:09:72:
83:57:3c:f5:66:0d:86:ba:0f:c8:ca:ee:4d:6a:e6:
f3:60:5d:38:b8:47:7f:8a:60:a8:48:15:b9:93:d3:
c4:d6:9b:f3:6c:f2:79:bd:92:de:78:34:ed:7c:94:
0c:e4:14:68:5a:30:9e:c0:63:76:82:12:a5:8d:d4:
58:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FA:1A:3C:87:83:4B:F6:84:7B:0F:72:26:20:CE:77:73:C5:48:AA
X509v3 Authority Key Identifier:
keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:8b:ab:d2:24:8f:5f:ce:c7:a4:c3:33:3c:b1:84:8e:0a:b4:
f7:25:c0:ab:c6:26:97:35:1f:82:2f:7a:5e:36:97:00:b0:0b:
46:a0:13:56:f2:9e:40:7a:71:23:82:d4:a6:b9:53:d5:1c:68:
2b:7a:88:46:ba:bf:13:d8:c1:b2:c4:ce:40:69:6a:3a:cd:0f:
f4:72:76:93:7a:75:5f:90:2e:6e:96:35:29:4f:38:ea:5e:e2:
44:57:2c:ef:56:29:a5:7c:b8:d0:ac:f9:1b:7b:98:47:97:70:
fc:51:9b:6b:0e:b0:6d:f2:b3:d2:76:79:d8:50:eb:f1:e3:38:
fd:d7:c7:29:b0:a6:c1:74:63:f3:fa:c4:3f:b6:d4:cb:4b:7b:
43:42:b3:fb:89:32:5f:94:fb:cb:de:da:b7:f1:d8:d8:6c:7e:
d7:5e:ca:e9:d6:e1:5a:c5:86:2c:de:ee:33:c3:b4:b6:0b:58:
8b:9a:b8:07:26:f9:16:3c:92:af:7b:9d:5d:ed:af:e9:3e:d6:
7a:55:a0:db:2d:f2:63:4a:d4:fd:ce:91:87:26:01:76:92:d9:
92:7e:d9:c2:34:c2:07:02:ee:d6:0c:75:7a:6e:15:f6:dc:24:
e6:cd:d7:8e:c8:61:50:8e:e2:c9:d1:8a:f9:f5:4e:36:39:64:
26:13:6c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 05:14:12 2026 by rpki-client