
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
File: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft (raw, json)
Hash identifier: ZmOO4pkXyg5u2KcFE1P+MDBiYMmffY7Hcu/FujRq0Lc=
Subject key identifier: BB:87:C8:D1:6A:8D:E7:2E:63:C5:B6:52:D3:1B:21:0E:21:2F:47:AE
Authority key identifier: 68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A
Certificate issuer: /CN=A91C4750/serialNumber=68763E92A2C17853167576651103F81F59ACDC1A
Certificate serial: 08A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
Manifest number: 089A
Signing time: Wed 18 Feb 2026 20:00:09 +0000
Manifest this update: Wed 18 Feb 2026 20:00:08 +0000
Manifest next update: Wed 25 Feb 2026 20:00:08 +0000
Files and hashes: 1: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl (hash: xGAnBJrbHwAHtkMVwgVJFoEJ8k9z3GbKd/k2BMT4BKU=)
2: DA1A98C4DABE11EAB12A5209C4F9AE02.roa (hash: 6yzV6dzQorpidqad88j0wSoiJND60Dw/RhEDKbVQJ3o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl
rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2211 (0x8a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4750, serialNumber=68763E92A2C17853167576651103F81F59ACDC1A
Validity
Not Before: Feb 18 20:00:08 2026 GMT
Not After : Feb 25 20:00:08 2026 GMT
Subject: CN=69961a49-fda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:49:c8:f4:6b:32:cc:19:7b:a7:f1:4d:27:
b6:98:ec:1c:ae:35:42:10:17:a4:7e:c2:0e:a9:15:
06:9e:7a:40:81:07:98:3f:14:2e:1c:84:20:79:64:
97:0c:b1:6e:ce:b5:a3:3e:a2:f2:c9:b3:68:9e:b4:
cb:c3:ef:37:05:77:57:08:5c:36:76:47:52:33:8e:
7b:7b:5d:be:30:79:d9:44:db:6a:91:66:b0:aa:32:
5e:ea:25:69:e4:9e:d3:57:90:47:67:c9:87:af:a5:
69:68:df:8d:f9:12:cd:e9:fe:3a:ed:2c:86:d8:6a:
92:3b:d0:06:2b:c6:01:2f:50:81:97:96:8a:c9:93:
9b:5a:99:ff:18:4f:be:0b:fb:10:90:e8:6d:f5:3b:
01:66:42:2f:5a:23:a7:3a:04:b5:2f:99:56:0c:c4:
77:48:dd:a7:e4:59:f1:e2:ae:9b:12:95:ca:12:fa:
9b:ca:9c:78:07:9f:88:ac:31:da:e6:e7:81:c7:96:
fc:be:f3:1c:c8:fe:3a:da:f7:01:21:f7:df:8a:29:
93:7a:67:01:f3:e2:5c:40:3b:e1:48:d2:63:04:31:
97:59:4b:cc:2f:a2:bf:6a:df:58:b6:28:dd:d2:44:
50:ed:41:8b:93:13:01:55:1c:a6:c1:d2:de:4f:a9:
c3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:87:C8:D1:6A:8D:E7:2E:63:C5:B6:52:D3:1B:21:0E:21:2F:47:AE
X509v3 Authority Key Identifier:
keyid:68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:e7:4c:40:b1:d3:17:9a:0b:27:08:d2:9e:4a:27:50:14:20:
1c:5d:ea:c6:66:14:c6:32:a9:a8:02:5b:ae:2e:78:bb:8f:0d:
82:ec:93:65:ee:c3:32:74:05:97:ee:c1:4e:c6:06:47:8c:78:
48:3a:12:8c:3c:9c:1d:84:2a:e7:db:f1:f4:b4:8b:fb:03:ce:
a5:20:57:a0:81:99:9e:a2:49:18:03:a8:35:8f:2e:11:b0:4f:
42:51:80:46:5c:41:0f:15:b7:46:fc:42:12:95:c3:8b:8e:9e:
c9:92:54:2c:92:91:12:8a:2b:3f:c3:ae:1b:33:3e:eb:b0:7a:
fc:6c:ff:36:07:12:df:93:6c:61:93:1c:8f:ba:66:b9:c8:be:
14:55:70:0f:a9:4e:a7:0a:de:ea:16:f4:fe:84:07:0b:4c:47:
b6:01:a1:50:6c:5a:ea:30:0d:a3:41:fb:a9:0a:5c:f8:fd:1d:
66:f5:3b:e9:a9:7a:af:ae:23:c4:75:b6:56:84:77:13:ce:fb:
50:85:42:e6:74:04:35:db:b8:1f:c9:23:46:72:87:5c:ff:8e:
3f:28:19:71:85:d0:46:ef:a2:38:04:3c:86:95:d4:c9:0b:4d:
3e:10:47:98:4f:61:16:7b:f9:33:75:fd:2c:09:06:92:92:1e:
7a:a8:c3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:51:35 2026 by rpki-client