
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
File: 509GTECGWe0lidtmTOjvamxgDEc.mft (raw, json)
Hash identifier: VcmtF5N2t3PMHmhmcPFwdtpZyc19GX3pKwuenPjNL1o=
Subject key identifier: 8B:45:E7:BA:FC:43:12:73:10:71:F9:91:5C:9B:5A:12:90:B9:11:0D
Authority key identifier: E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47
Certificate issuer: /CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47
Certificate serial: 0BB4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
Manifest number: 0BA7
Signing time: Wed 18 Feb 2026 18:36:45 +0000
Manifest this update: Wed 18 Feb 2026 18:36:45 +0000
Manifest next update: Wed 25 Feb 2026 18:36:45 +0000
Files and hashes: 1: 509GTECGWe0lidtmTOjvamxgDEc.crl (hash: 0Lirjwkf3bnuLiA4M3WbYbrtgkokWQjXCY3nTVAcvLo=)
2: 8B37D2C40D2511EFA2E4D985C4F9AE02.roa (hash: a+Zi9iESugqvqoTYb4WkQmUuVNUV8p+uqNbSEtnaZ8o=)
3: 3BFE8CEC3F4911EAA91D9A7FC4F9AE02.roa (hash: PAA4OxtlazOKwYLjk6aLytCy9NItnRL8j4f8o3mJBHg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl
rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:36:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2996 (0xbb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A06F2, serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47
Validity
Not Before: Feb 18 18:36:45 2026 GMT
Not After : Feb 25 18:36:45 2026 GMT
Subject: CN=699606bd-dcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:81:40:ba:1c:51:16:4f:5e:ce:0d:88:0a:
51:cd:cb:c5:f4:9f:91:c5:bd:e2:24:c5:59:58:bd:
18:aa:0f:35:f4:bf:9d:2b:89:65:97:42:dc:26:30:
c0:75:1b:98:c2:bc:9a:43:17:4e:6e:38:80:9c:02:
cf:98:50:83:5e:bf:a0:93:52:72:23:1d:d3:2d:bb:
b3:65:9d:43:42:85:51:a1:ed:b5:dd:f4:ee:a5:9e:
9a:b6:a9:4d:6a:e9:8a:3c:ba:92:95:da:69:1c:3d:
ab:a7:d2:94:98:dd:f1:bb:06:d9:6a:39:53:77:84:
b4:3b:ba:ac:5d:64:16:75:b9:e2:20:ff:12:d6:30:
fd:b0:5f:7a:57:22:cc:d2:09:98:88:70:e1:66:27:
c8:a3:b9:36:c4:66:ff:59:3d:55:1f:ca:41:a9:f7:
06:43:7b:50:18:1b:3e:fb:27:50:93:66:0f:ac:8e:
45:71:47:dc:a3:5a:43:92:5b:52:db:b3:c7:4a:27:
2a:55:a0:4e:ad:26:dd:08:87:e7:0a:c2:b1:ae:c4:
ef:09:b4:80:d9:44:bc:95:70:14:50:19:84:7e:4b:
3d:78:a2:66:91:e8:3e:91:92:ee:73:3f:e4:7b:2b:
67:38:93:b1:f6:db:81:91:80:ac:fb:12:27:b4:5a:
99:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:45:E7:BA:FC:43:12:73:10:71:F9:91:5C:9B:5A:12:90:B9:11:0D
X509v3 Authority Key Identifier:
keyid:E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:de:81:c3:44:2a:51:0f:57:c0:81:5e:09:36:95:28:ed:d8:
ff:08:e9:84:20:af:11:1a:ba:c6:6c:68:01:35:10:d1:5d:5d:
e1:01:05:b6:2c:ff:36:33:49:07:a7:41:6b:eb:98:05:9c:e4:
2f:8f:8d:06:1b:65:a0:b3:38:c6:04:e6:3d:0f:1a:dc:36:52:
54:15:56:7d:48:35:53:ae:25:0e:76:ff:3e:d8:2b:34:8d:dc:
85:83:0b:cc:2e:49:d3:95:3e:89:da:d5:91:12:35:d2:49:41:
86:12:5c:64:f3:d5:89:60:ad:2e:dd:d8:e6:46:35:64:62:41:
64:60:26:18:9a:a8:88:ec:be:e7:fd:4d:dc:8b:40:ca:74:ef:
6e:1b:59:ea:08:a2:2d:0d:26:ad:57:d6:70:71:ae:ec:2e:af:
dd:3a:cb:f3:6e:47:89:aa:5b:4a:67:aa:e5:bc:72:c9:7a:8f:
71:43:99:2b:82:c4:74:d1:28:9c:de:88:9d:43:a7:67:ad:60:
ce:e0:c9:e0:94:a5:e1:5e:ea:1d:af:81:7c:94:fe:4a:94:65:
89:43:0a:90:b5:ad:d5:3c:e1:79:06:36:9b:0c:06:c7:59:fb:
7e:4a:da:14:91:fb:56:c2:b7:17:41:7c:7a:fc:f6:c2:98:10:
b9:c4:64:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:01:37 2026 by rpki-client