
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
File: u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft (raw, json)
Hash identifier: 4cLvye47jSs5u2DG/6ErPKDGsXASwMq5bYovOuCTnZQ=
Subject key identifier: CD:CA:D3:49:A5:A9:15:60:29:DA:3E:3B:6C:5B:4A:4E:96:03:ED:8E
Authority key identifier: BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31
Certificate issuer: /CN=A91F75E9/serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931
Certificate serial: 0860
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
Manifest number: 0851
Signing time: Wed 18 Feb 2026 20:17:16 +0000
Manifest this update: Wed 18 Feb 2026 20:17:16 +0000
Manifest next update: Wed 25 Feb 2026 20:17:16 +0000
Files and hashes: 1: u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl (hash: mYx4Zd74uEgaHRfeApXFEks2To1ywSpJjKwEP7VQ1AU=)
2: B3A2D41A071211F0B9531F0DC4F9AE02.roa (hash: I43la8Jg6nTXmIQnP62meA4bUFJBXemPB0O6WT7Y9jk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl
rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:17:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2144 (0x860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F75E9, serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931
Validity
Not Before: Feb 18 20:17:16 2026 GMT
Not After : Feb 25 20:17:16 2026 GMT
Subject: CN=69961e4c-2958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:a7:6d:f0:f3:79:56:a7:c5:d0:1c:9d:03:
41:2c:46:dd:f6:ee:ec:0d:c8:9f:06:7d:a5:33:37:
4d:67:c6:cc:8f:f2:ab:91:f3:99:61:1e:7a:7b:07:
c4:79:13:72:bb:de:9e:35:06:fe:a6:78:43:10:a1:
af:99:cf:1d:8e:d5:85:26:76:1f:33:5f:58:db:6a:
d7:fb:06:e2:82:71:e6:66:3e:92:91:e6:ac:ff:73:
16:a7:42:40:ac:e5:52:b2:5f:82:39:be:c5:ef:45:
0c:9c:76:9c:74:ca:a2:13:44:19:68:7b:b8:df:5b:
9a:4f:66:dd:43:09:27:e5:fe:72:e1:9f:6c:82:dc:
d2:32:ac:2e:c9:4b:02:4e:7b:81:c1:e5:d5:44:5b:
26:be:56:ee:a3:43:e0:28:a4:36:5d:a8:37:15:d4:
df:04:19:af:57:b0:db:7f:14:57:2a:fd:ad:2f:fb:
00:17:c1:70:ac:70:d0:99:5c:66:ca:91:9e:58:12:
d8:c7:2b:c0:87:f4:50:1c:a9:37:1b:30:43:52:d3:
04:15:4c:c7:aa:5f:d1:a7:3e:21:0c:fc:3b:e0:92:
24:2a:fd:a8:17:7e:b4:fb:38:ef:06:0c:66:dd:4f:
ee:39:37:79:4b:72:8b:bd:a1:2d:00:e7:07:3f:e9:
b7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CA:D3:49:A5:A9:15:60:29:DA:3E:3B:6C:5B:4A:4E:96:03:ED:8E
X509v3 Authority Key Identifier:
keyid:BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:21:ac:a4:76:1d:5f:a4:e4:06:02:59:24:83:d1:e7:7c:d3:
04:25:2d:26:78:9d:fd:ef:32:2d:48:61:95:ca:86:1a:de:98:
63:08:a0:a0:14:97:20:ac:ae:49:3f:cf:b1:b1:f5:89:c0:9b:
d2:6b:64:9c:02:83:34:35:84:db:80:c7:46:72:47:04:d2:0b:
da:3d:22:87:97:48:91:6b:61:f7:02:80:27:df:74:9d:24:1c:
8a:40:45:74:8c:01:c2:8e:c6:7f:31:32:20:79:64:d8:7f:bc:
4c:f7:3d:6b:c2:e2:c4:c0:17:99:06:dc:f0:5b:83:06:c9:62:
3c:2b:9f:f2:ed:16:24:3f:1a:03:9c:33:58:a8:ac:52:cd:98:
aa:af:7b:0d:87:01:14:2f:bf:1b:af:c6:85:e3:32:58:27:d4:
42:53:df:5e:9d:a0:5d:3c:c2:39:bf:b2:78:59:b7:b1:6f:94:
9a:4b:66:54:f0:ad:3b:83:41:8e:47:05:43:9f:6e:06:e6:0c:
26:69:9c:94:b0:1c:fd:78:9c:5a:67:b5:6d:31:aa:ae:93:f4:
d2:22:4e:a5:f0:cb:6a:a2:f1:e9:c0:94:9f:fa:d4:7b:4c:e8:
f6:c2:ba:a1:60:c5:d0:33:e8:69:db:a5:d7:2e:43:9a:4c:7d:
a5:4e:db:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:56:59 2026 by rpki-client