
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft
File: BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft (raw, json)
Hash identifier: NWDpMXbSqi7oMW+y92+wTXjHg9OStklU6wCYoB6jC80=
Subject key identifier: FB:39:EB:25:13:5F:D6:73:13:FB:04:A9:E2:61:C3:4D:BC:C9:1B:A1
Authority key identifier: 04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9
Certificate issuer: /CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9
Certificate serial: 0898
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft
Manifest number: 088C
Signing time: Wed 18 Feb 2026 20:04:58 +0000
Manifest this update: Wed 18 Feb 2026 20:04:58 +0000
Manifest next update: Wed 25 Feb 2026 20:04:58 +0000
Files and hashes: 1: BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl (hash: VS9TBG2LjBQeWgfVzFRnmh/effzwKGJtuRbmW7mM+MM=)
2: 02F863F6C09211EC8950E57AC4F9AE02.roa (hash: CW8cYbzHOyc7H5WlbPNiikLuHtC0kPX2gHGH/bCo7qc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl
rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:04:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2200 (0x898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4AA0, serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9
Validity
Not Before: Feb 18 20:04:58 2026 GMT
Not After : Feb 25 20:04:58 2026 GMT
Subject: CN=69961b6a-5150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:30:33:ec:03:ed:fa:b5:5b:38:57:77:19:
c6:5d:01:63:fb:77:b3:d9:94:49:29:fc:91:eb:d9:
78:36:15:6e:ae:c4:54:a9:b7:8c:25:a9:bb:03:4f:
bd:35:52:33:41:56:15:9a:24:31:bc:74:54:73:00:
e9:c7:ae:dd:2d:85:91:c8:02:bb:c9:f5:3d:6f:dd:
34:11:e3:62:5a:77:5d:f9:f5:72:ff:77:31:6c:a5:
3c:8c:20:6c:f7:23:f1:f3:ea:cf:a6:cc:30:de:7e:
6b:de:51:1c:92:da:88:fe:0a:b4:3f:c7:1f:1c:99:
57:20:dd:f3:0f:89:34:f7:49:a1:a6:ac:28:39:7b:
2c:4d:fb:0b:81:fb:81:62:fb:4d:80:36:79:cf:30:
51:38:7c:81:f8:9c:e1:5a:3d:cd:b8:55:2e:62:66:
b2:bc:c7:21:a4:50:5f:95:c9:5e:8e:7e:48:45:99:
95:c1:58:fd:48:1f:52:dd:c2:1c:b5:ee:c0:70:56:
f7:6a:84:ce:84:04:f8:9a:4a:e1:d7:76:d4:e6:57:
5f:80:e4:38:27:79:39:55:b0:32:86:e7:78:0d:2f:
b7:78:b8:e3:24:dc:ca:e8:10:26:91:f9:51:c2:0b:
f6:78:17:71:b8:c2:fc:d0:1d:82:b9:c8:7c:ee:8e:
02:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:39:EB:25:13:5F:D6:73:13:FB:04:A9:E2:61:C3:4D:BC:C9:1B:A1
X509v3 Authority Key Identifier:
keyid:04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9f:10:4f:97:4e:95:2b:de:a0:f5:68:e3:5b:ca:c7:5c:c8:
12:8a:43:dc:aa:90:08:ef:f6:dc:29:f1:2e:9b:23:38:19:92:
fe:a1:7d:85:d9:42:d5:f3:84:c2:fa:d0:49:cc:76:4d:5e:7e:
f8:3d:ea:52:f8:b2:a0:7d:49:cb:07:3c:42:b6:79:7c:1d:bb:
72:bd:c7:c9:8f:2b:0b:74:aa:84:a3:18:e3:e4:12:8e:87:6a:
04:ee:c7:14:f2:3c:e4:11:8b:88:38:75:d6:1a:2b:64:2c:d8:
c7:dc:16:5b:08:ea:44:56:0a:d8:a1:32:be:e1:1c:5c:b6:f8:
56:d9:a2:66:c8:50:49:97:21:69:e2:8c:a2:e1:36:c6:07:42:
73:83:2d:11:94:56:3b:9d:0e:bf:13:7e:8f:e5:e5:91:33:f5:
fd:ad:e0:47:ce:69:ec:ad:25:1b:b0:aa:bc:8b:05:9a:b4:cc:
ba:74:41:f3:44:1b:f9:3b:11:a0:af:a3:24:dd:df:83:92:7a:
1c:ec:5f:5f:18:35:be:28:97:85:e1:b8:4d:b6:d1:6d:58:c9:
95:50:50:18:06:2d:f8:75:97:40:f0:6c:b7:8b:a3:94:34:5f:
1f:e9:39:91:42:5f:d7:3e:04:04:61:66:7e:35:53:7e:6d:d8:
da:af:cf:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:35:59 2026 by rpki-client