
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft
File: hQh9CO2zN-4B6xruuBLL7jStjmM.mft (raw, json)
Hash identifier: 4hFFZSO5pr3FXxbRZSbPUR2Ws7IGbvU7TSwJ/7qGaSA=
Subject key identifier: 73:EF:E6:8D:DC:ED:C9:79:B0:9F:D0:41:DF:7D:F8:FA:1D:EB:67:30
Authority key identifier: 85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63
Certificate issuer: /CN=A91DE01E/serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft
Manifest number: 35
Signing time: Thu 19 Feb 2026 06:47:44 +0000
Manifest this update: Thu 19 Feb 2026 06:47:44 +0000
Manifest next update: Thu 26 Feb 2026 06:47:44 +0000
Files and hashes: 1: hQh9CO2zN-4B6xruuBLL7jStjmM.crl (hash: WLtP8hTXsU3hVttq7ol20kLnX1PmYKPaihsyBPZYAEM=)
2: F7DB315EBEC811F0A266E40FC4F9AE02.roa (hash: 2X/xAt2NpQgJSrpIK+jQKjbm6p9J7Q5z+jWa7ZqFy0g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl
rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE01E, serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63
Validity
Not Before: Feb 19 06:47:44 2026 GMT
Not After : Feb 26 06:47:44 2026 GMT
Subject: CN=6996b210-a18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5d:6a:d1:69:c2:a6:05:c2:c5:f5:4b:89:06:
c0:92:33:cc:45:68:44:23:8d:fc:5a:dc:3c:99:78:
50:f4:a2:99:96:88:6d:e2:48:85:ff:f8:04:b1:d5:
fd:a4:69:8b:67:70:98:01:df:dd:d0:26:16:93:25:
91:20:9a:f7:b7:ba:bc:cf:20:0d:b0:88:b9:b5:c1:
06:3e:aa:73:32:ed:26:fa:ec:c2:ee:63:34:f5:eb:
56:44:4e:b9:c7:5a:63:7b:e5:e8:ce:bf:f9:91:ba:
51:d2:8d:fa:f2:64:8f:b9:c6:d3:67:35:37:6c:1c:
06:68:cf:35:53:33:19:b2:44:04:18:23:17:d1:1c:
92:6f:10:0b:49:6b:f4:7d:2a:14:16:a2:49:c0:77:
b5:16:96:50:0c:c9:46:8c:49:f1:7d:65:6b:dd:33:
fa:a6:5b:cd:7a:d7:6f:22:19:b3:8e:7b:bf:a3:00:
60:6e:f5:d9:01:84:32:79:07:86:28:71:3e:df:69:
72:02:84:ea:57:0a:e4:7e:e4:ff:77:5c:f6:06:dd:
f6:aa:3b:49:44:43:21:de:5a:05:cc:c1:87:f8:38:
40:39:a9:02:93:db:e8:c0:d9:92:6f:db:4f:87:87:
3b:40:60:bc:e1:24:33:4e:18:08:83:c5:56:d0:32:
24:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EF:E6:8D:DC:ED:C9:79:B0:9F:D0:41:DF:7D:F8:FA:1D:EB:67:30
X509v3 Authority Key Identifier:
keyid:85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a7:92:8d:ca:02:21:d7:a1:4b:90:d3:3c:9a:a8:a4:9c:f5:
17:06:89:18:da:6a:d9:72:68:ec:2b:de:ef:ec:c1:47:0d:d7:
84:7c:51:c7:76:9b:66:fc:a1:8c:57:55:4b:e6:20:da:31:9e:
74:46:51:0e:4c:80:4b:f6:31:f7:2e:f4:95:3c:15:d9:02:82:
75:ed:08:6a:42:b6:73:b2:98:64:ab:f1:65:ed:43:27:4f:56:
53:1d:77:9b:76:c6:f1:3a:d2:b6:f7:2e:b0:8b:3a:77:fd:73:
52:05:d6:bd:d8:57:f8:14:22:e9:26:f1:18:2f:48:be:84:be:
b1:35:6a:63:5b:19:1e:da:d7:22:aa:ef:16:53:a3:99:b0:18:
1b:86:9c:d3:45:5d:9a:7f:ea:1e:13:10:16:eb:9b:65:35:ee:
0b:00:f2:1b:c1:a9:44:72:51:53:5c:81:00:e4:ad:b2:13:55:
13:0f:56:87:e0:d3:eb:67:97:7f:67:63:78:88:67:08:fc:d5:
61:28:dd:b1:07:6f:d3:e3:55:e7:e8:bb:63:a5:49:51:db:96:
36:6c:ca:00:f4:e2:d3:af:8e:ab:11:26:95:40:90:74:1f:ad:
e5:90:dc:cf:b8:bb:99:cb:26:d2:25:75:72:4d:5b:ec:47:9c:
da:a7:95:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:36:55 2026 by rpki-client