
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
File: BQ5HmwmNZLazhlsr5GiFdeotTVE.mft (raw, json)
Hash identifier: dF5vN2BPAi1y6dgWzAbV+It8IHnYgYeZ9DAm0OqVfu8=
Subject key identifier: 3D:75:DE:AE:95:AE:6F:18:8B:B2:6F:9C:E1:B5:EE:34:43:78:F0:7E
Authority key identifier: 05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51
Certificate issuer: /CN=A91AB457/serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51
Certificate serial: 0C4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
Manifest number: 0C4D
Signing time: Wed 18 Feb 2026 18:18:35 +0000
Manifest this update: Wed 18 Feb 2026 18:18:35 +0000
Manifest next update: Wed 25 Feb 2026 18:18:35 +0000
Files and hashes: 1: BQ5HmwmNZLazhlsr5GiFdeotTVE.crl (hash: evF8QnsF3U4CpRBZAC0ennnhsVCbilxHQQoodLB/4r8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl
rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:18:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3149 (0xc4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB457, serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51
Validity
Not Before: Feb 18 18:18:35 2026 GMT
Not After : Feb 25 18:18:35 2026 GMT
Subject: CN=6996027b-77d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:46:27:3c:ec:28:b5:da:cd:87:41:a2:6b:
85:35:8b:bd:ad:ef:2f:e6:09:00:0e:4b:47:4d:3c:
66:87:7b:e4:54:82:e7:d6:c7:78:02:11:4e:0e:9d:
50:de:21:45:73:b9:95:8a:c4:01:99:db:66:7e:63:
56:7f:54:54:6d:85:a3:e6:12:d2:03:68:49:09:e2:
ff:e4:a4:f5:1c:ae:1a:b0:b5:9d:35:14:48:f7:23:
62:45:08:f6:87:ae:21:ea:d6:7b:f1:ca:62:5c:a2:
89:f0:d2:b5:47:dc:54:a8:b8:38:91:26:0c:72:d4:
a5:2c:a2:ad:2f:95:17:d1:9c:a8:f3:a6:79:db:ef:
2c:d4:52:65:17:1e:42:68:f7:3a:c3:87:1d:4b:7b:
85:66:01:0c:5d:b5:d7:e1:88:80:d2:00:24:76:6c:
0a:12:2b:d5:41:60:29:ac:aa:23:b1:90:dd:3f:63:
be:e0:5b:8b:42:51:8a:69:3b:90:e0:9e:65:5f:33:
bf:62:5a:27:3d:9c:2d:68:39:25:4e:a5:3b:66:a4:
9f:04:56:e7:50:f9:4d:e5:08:e1:4c:78:da:6b:4c:
9d:29:92:28:46:85:71:a8:97:ba:e4:67:8a:68:0b:
2c:da:3b:5d:37:5a:66:1f:ff:35:13:46:be:4c:b5:
44:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:75:DE:AE:95:AE:6F:18:8B:B2:6F:9C:E1:B5:EE:34:43:78:F0:7E
X509v3 Authority Key Identifier:
keyid:05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:26:b3:8c:b4:d3:cd:49:4f:11:1c:99:fd:48:9c:7c:45:0e:
a4:2f:29:60:0a:d9:a6:14:1a:6f:9b:e4:c3:ef:77:f9:5c:3c:
0d:5a:0c:43:99:69:59:00:c1:d0:7a:75:f3:43:fe:ae:b8:ec:
c1:3f:bc:31:75:5f:ab:94:db:0d:a5:8c:f0:ab:0a:6e:c9:64:
38:be:52:de:f8:9e:c9:a2:5d:66:16:ff:72:76:ba:8c:57:a5:
81:21:58:09:08:bc:56:ce:72:48:19:58:35:67:b4:14:05:9c:
f8:7f:c0:cd:e3:b4:a4:6a:79:f7:c5:c8:29:9e:d6:03:58:f1:
32:93:b4:6e:ba:a3:4c:da:23:ea:f5:d9:7f:05:13:c7:e3:d2:
56:ab:45:f8:d2:6c:34:03:26:ba:62:45:f1:ce:e6:0e:0f:a8:
27:93:89:fd:d5:c9:27:b2:97:1d:e4:05:2e:70:5c:5d:d1:b1:
6a:54:5f:d5:19:33:3c:39:86:29:df:f7:f4:00:93:4f:d1:b5:
47:2a:f4:cb:c9:bc:02:cd:c3:3a:88:31:50:20:76:e8:df:c1:
71:bd:c0:82:fd:51:01:2e:8a:0b:90:e5:5f:51:64:77:e2:64:
ed:d4:63:e9:6a:d2:fc:7a:f6:7f:d6:ea:bc:5e:d5:c7:e5:bb:
b4:f2:84:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:44 2026 by rpki-client