
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft
File: hs2LQhipuaG84vrF7m3HhbAKkx0.mft (raw, json)
Hash identifier: RECFVBc13ziWopW00ZzLUXR5koOmCNq88TzqB4cTqhg=
Subject key identifier: 4E:6C:1F:C9:69:F5:4B:3B:AB:F4:52:EB:EB:F5:1A:06:E9:63:F5:85
Authority key identifier: 86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D
Certificate issuer: /CN=A91BF28F/serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D
Certificate serial: 02BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft
Manifest number: 0298
Signing time: Thu 19 Feb 2026 00:51:06 +0000
Manifest this update: Thu 19 Feb 2026 00:51:06 +0000
Manifest next update: Thu 26 Feb 2026 00:51:06 +0000
Files and hashes: 1: hs2LQhipuaG84vrF7m3HhbAKkx0.crl (hash: xwfwfnfWCGQXvmtgklQ5YdDfwAX2IbTZOsJBO6/QoTU=)
2: FB9DB0B8778011EFA197A558C4F9AE02.roa (hash: Gu/kywKpuic7wgF2QL39qaRHTk8r7+a6HC5vsZOxOeg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl
rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699 (0x2bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF28F, serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D
Validity
Not Before: Feb 19 00:51:06 2026 GMT
Not After : Feb 26 00:51:06 2026 GMT
Subject: CN=69965e7a-be87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:11:75:1b:ed:dc:8e:5f:f0:9b:f2:56:d8:
f6:cb:32:67:50:6f:72:ec:8e:02:53:a1:30:a9:d5:
c9:63:6f:18:33:86:b7:57:ad:4f:1e:ef:c4:db:8f:
b3:f2:4f:94:65:6e:c6:7e:fa:5a:67:29:be:19:64:
d7:7a:bf:95:de:bc:3f:18:f7:76:b2:db:d8:05:6f:
51:04:06:5b:ad:d5:8c:21:3e:84:4d:c3:c6:2b:44:
69:bb:5b:b3:f3:de:59:7d:5a:73:fa:4b:03:cc:ab:
a6:c3:29:92:54:6a:2d:7a:d4:62:17:24:b4:c0:a9:
d5:bb:bd:93:56:c2:57:89:31:a4:1d:7d:5e:9e:5b:
b4:29:a7:eb:d7:e2:2d:8f:f6:51:26:de:07:66:ed:
42:69:34:9b:55:16:da:39:6b:cb:29:a5:59:55:15:
39:29:72:c9:99:5a:cc:20:b3:9d:70:75:99:2f:0a:
ef:53:b9:04:03:5c:35:bf:ce:26:c1:5e:fa:53:79:
ff:fb:ac:64:81:ab:53:a3:79:d5:cd:f5:ac:72:0a:
a9:75:f4:04:14:75:7b:c8:88:81:11:a0:da:a9:0c:
49:7c:28:16:13:7f:cb:a5:13:8d:12:dc:f4:0a:ec:
72:35:a7:ab:c4:ce:11:e4:d2:31:47:af:9a:17:08:
ed:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6C:1F:C9:69:F5:4B:3B:AB:F4:52:EB:EB:F5:1A:06:E9:63:F5:85
X509v3 Authority Key Identifier:
keyid:86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:13:cf:32:74:d9:9c:a9:55:4c:59:24:55:27:c2:30:6b:ca:
d3:a0:ca:87:b2:9c:f5:d8:50:dd:4b:df:6c:8d:84:10:16:3f:
8d:ac:0a:45:a9:18:f8:a7:9b:48:6b:64:4c:44:8d:c6:2e:b9:
e7:65:62:d5:fe:4c:de:76:1a:4e:ac:df:c9:c6:c1:8f:67:93:
7e:dd:b8:46:10:e4:f5:ee:5c:fc:8f:5a:94:75:23:2c:52:8f:
95:6d:8a:6b:db:7a:0f:48:39:f0:3c:40:bb:b9:e4:7c:e5:c8:
12:57:ea:9f:df:ba:19:b7:4e:74:dd:42:a3:5e:35:48:2e:07:
0e:46:5d:85:37:7d:0c:52:45:f7:0e:ed:30:f1:50:39:52:3b:
fd:33:3c:4b:c0:a8:50:73:54:62:1d:50:03:39:c8:ab:e2:d2:
54:c6:5d:2e:dd:20:da:00:45:5d:30:4c:53:76:db:ac:41:c4:
90:7c:e5:ff:eb:a2:b3:70:d3:6e:b3:87:2a:3a:c8:db:08:76:
56:46:3c:49:cd:e7:4c:7f:83:44:18:7f:55:7f:66:b7:b9:a1:
43:54:06:9f:77:00:ad:5c:0b:0f:25:92:b4:2a:3a:96:40:27:
e0:7c:ad:a0:48:1b:56:ac:55:99:5b:8b:3d:f3:82:19:d8:2f:
68:41:db:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:48:37 2026 by rpki-client