
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft
File: gDB5urLx9rO5qsQR30qCw_BqZXE.mft (raw, json)
Hash identifier: mLgn10qDq6/24h15a+kHzw6xIai3uznKqXYNgeaCvyA=
Subject key identifier: 5E:89:06:C9:A3:B3:35:30:7F:92:29:E9:D4:D4:9D:36:9C:98:2F:B5
Authority key identifier: 80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71
Certificate issuer: /CN=A91E5642/serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571
Certificate serial: 0A3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft
Manifest number: 0A2B
Signing time: Wed 18 Feb 2026 19:20:29 +0000
Manifest this update: Wed 18 Feb 2026 19:20:28 +0000
Manifest next update: Wed 25 Feb 2026 19:20:28 +0000
Files and hashes: 1: gDB5urLx9rO5qsQR30qCw_BqZXE.crl (hash: i0MhbVQxEDIQDgZ7zSQcfI9ryl0rMFTLoPHrg/wZ66Y=)
2: 49484A22DDBE11F0A59AB1524A6F56BC.roa (hash: WiGuv2/JSxx57676h5jedUA8T7uDbrDtdsfZtv+usVM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl
rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2621 (0xa3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5642, serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571
Validity
Not Before: Feb 18 19:20:28 2026 GMT
Not After : Feb 25 19:20:28 2026 GMT
Subject: CN=699610fd-462f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:65:a4:5f:44:a1:e1:f4:17:d4:ee:55:3b:13:
5b:c5:8c:ed:06:6a:c6:49:ee:07:7f:76:65:fe:1a:
82:c8:20:6a:48:9a:33:71:2e:6d:a2:00:4a:c8:b9:
4d:84:e9:b7:e6:81:8e:fe:e5:90:c9:5d:91:81:b4:
2d:be:7a:bc:f8:ce:75:93:7f:66:12:f6:ae:f5:53:
82:5c:4e:0f:09:26:c2:2c:8f:e0:90:0e:ed:e6:ab:
e8:ed:c9:c2:52:e6:f8:e7:30:b1:c0:da:ce:28:d6:
f5:ea:75:d1:6e:0d:f3:4c:fb:03:af:27:44:d9:df:
14:b2:0b:fe:57:ae:1e:45:f3:2b:ce:d8:f4:b8:8e:
31:f1:bf:54:41:e9:3e:30:1b:af:f8:79:8e:53:1b:
2b:13:d6:63:cd:28:5f:5d:b6:61:1e:c6:c9:6a:33:
27:e2:0b:c2:38:5f:b4:a4:0c:df:32:22:d5:a8:93:
32:58:96:fa:25:85:37:ad:e9:5a:75:37:42:02:a1:
97:e6:ef:e0:60:3b:f4:ae:64:02:f6:ae:07:32:46:
45:50:d6:6d:fb:03:53:01:7f:cd:f0:d9:6c:51:93:
dc:a5:47:7d:d9:11:10:c4:ad:51:a3:20:4f:92:ed:
c8:f6:63:4e:b4:4a:10:b5:24:e8:25:24:c2:5e:68:
22:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:89:06:C9:A3:B3:35:30:7F:92:29:E9:D4:D4:9D:36:9C:98:2F:B5
X509v3 Authority Key Identifier:
keyid:80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:ab:6e:c7:7f:9e:4c:54:2f:57:24:a1:ec:69:d2:81:5d:fa:
fe:ad:4a:62:ca:38:5c:ca:80:89:74:3a:a4:4b:d7:06:85:4e:
a2:fe:f5:dc:36:b6:d7:63:e5:c0:76:12:7c:5a:f3:d6:ca:51:
21:d1:45:4e:13:ed:63:cc:ac:63:b6:19:0c:70:1e:75:c9:ce:
04:e9:05:7f:d3:97:80:18:98:83:87:ff:50:f1:26:f3:71:c9:
79:e7:18:35:da:e1:07:81:f7:59:a6:71:9f:a4:ec:09:4c:0f:
54:ae:67:99:b8:80:5c:84:2f:15:cb:97:59:93:8f:96:13:d4:
6a:f3:73:80:b6:90:31:43:34:75:a8:8b:c6:30:bd:87:b5:f0:
ac:be:96:43:65:9a:e0:40:71:33:7b:8a:05:1f:8d:97:51:51:
e5:3b:26:d3:d8:f6:6b:61:f4:ec:fb:2d:f5:b6:a7:89:33:5f:
bf:3e:bc:99:bc:a4:3a:7e:05:3c:97:83:5b:7a:6c:1b:e6:12:
b8:ee:d8:30:16:4e:3a:3d:cf:b4:df:ef:e5:cb:77:f9:80:28:
62:60:ff:24:de:bd:00:ab:b6:de:24:94:10:0b:f8:6e:fe:87:
f2:5a:40:68:f8:9c:3f:5f:c8:b5:f5:5d:54:c0:d1:d1:89:20:
cc:6d:10:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RTU2NDIxMTAvBgNVBAUTKDgwMzA3OUJBQjJGMUY2QjNCOUFBQzQxMURGNEE4MkMz
RjA2QTY1NzEwHhcNMjYwMjE4MTkyMDI4WhcNMjYwMjI1MTkyMDI4WjAYMRYwFAYD
VQQDDA02OTk2MTBmZC00NjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2WWkX0Sh4fQX1O5VOxNbxYztBmrGSe4Hf3Zl/hqCyCBqSJozcS5togBKyLlN
hOm35oGO/uWQyV2RgbQtvnq8+M51k39mEvau9VOCXE4PCSbCLI/gkA7t5qvo7cnC
Uub45zCxwNrOKNb16nXRbg3zTPsDrydE2d8Usgv+V64eRfMrztj0uI4x8b9UQek+
MBuv+HmOUxsrE9ZjzShfXbZhHsbJajMn4gvCOF+0pAzfMiLVqJMyWJb6JYU3rela
dTdCAqGX5u/gYDv0rmQC9q4HMkZFUNZt+wNTAX/N8NlsUZPcpUd92REQxK1RoyBP
ku3I9mNOtEoQtSToJSTCXmgiWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6JBsmj
szUwf5Ip6dTUnTacmC+1MB8GA1UdIwQYMBaAFIAwebqy8fazuarEEd9KgsPwamVx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTY0Mi8xMDQwRjMyQzhB
RkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDlyTzVxc1FSMzBxQ3dfQnFa
WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dEQjV1ckx4OXJPNXFzUVIzMHFDd19CcVpYRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTY0Mi8xMDQwRjMyQzhBRkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDly
TzVxc1FSMzBxQ3dfQnFaWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBEq27Hf55MVC9XJKHsadKBXfr+rUpiyjhcyoCJdDqkS9cGhU6i/vXc
NrbXY+XAdhJ8WvPWylEh0UVOE+1jzKxjthkMcB51yc4E6QV/05eAGJiDh/9Q8Sbz
ccl55xg12uEHgfdZpnGfpOwJTA9UrmeZuIBchC8Vy5dZk4+WE9Rq83OAtpAxQzR1
qIvGML2HtfCsvpZDZZrgQHEze4oFH42XUVHlOybT2PZrYfTs+y31tqeJM1+/PryZ
vKQ6fgU8l4Nbemwb5hK47tgwFk46Pc+03+/ly3f5gChiYP8k3r0Aq7beJJQQC/hu
/ofyWkBo+Jw/X8i19V1UwNHRiSDMbRB/
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:58:43 2026 by rpki-client