
$ rpki-client -vvf rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft
File: 22JQZX_rwWTrghx2UqvjqF-prNQ.mft (raw, json)
Hash identifier: lT0ijB07NkdFoKMYY7dKuoyrMmwjwlzRmlAEqQJ42mc=
Subject key identifier: CF:09:5C:25:F0:D9:32:40:CD:A7:D2:2A:FE:20:3A:6F:88:2D:9C:28
Authority key identifier: DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4
Certificate issuer: /CN=A91197BC/serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4
Certificate serial: 09C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft
Manifest number: 09AA
Signing time: Wed 18 Feb 2026 19:34:41 +0000
Manifest this update: Wed 18 Feb 2026 19:34:41 +0000
Manifest next update: Wed 25 Feb 2026 19:34:41 +0000
Files and hashes: 1: 22JQZX_rwWTrghx2UqvjqF-prNQ.crl (hash: ph+LYauIcS+uo0iUZ1MDbPebQ/M9PYDJinQ1wqHsSYI=)
2: 51408896A3E211EF8DAB713BC4F9AE02.roa (hash: nnJopRuWF4IPI2CoSPvt+TdVM1R3rgDYOUPBMtlzCqI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl
rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2501 (0x9c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91197BC, serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4
Validity
Not Before: Feb 18 19:34:41 2026 GMT
Not After : Feb 25 19:34:41 2026 GMT
Subject: CN=69961451-89e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:57:c0:a2:ae:0f:0f:d0:1e:98:54:25:75:73:
4e:12:9f:0c:a3:e4:9e:fa:83:c0:cf:f8:9c:75:e1:
37:65:a3:19:e9:81:34:b7:39:90:54:3f:28:c3:34:
29:0d:f4:56:26:da:6c:78:76:42:a9:18:6b:df:70:
1b:24:43:f9:4c:26:ce:d0:ac:38:85:a1:c3:06:14:
41:6e:ae:bb:2d:cc:eb:f2:b3:56:a8:14:db:45:4c:
ea:d7:f3:5c:b1:4b:b9:b3:da:87:fd:f0:4d:51:52:
4a:42:b4:97:9c:97:0f:8f:cc:a1:e1:f6:05:b4:7d:
6c:38:5e:57:c3:6b:c5:8f:51:f3:63:81:11:87:70:
fb:0d:4b:4f:8b:f3:5f:7e:47:0e:56:fb:ab:6b:f7:
78:a0:db:cd:f1:e6:d6:79:40:10:ad:e5:17:eb:4d:
b5:eb:be:e6:c3:52:53:e1:8d:00:b4:be:21:dc:b2:
e6:85:8a:ce:93:9d:c7:6c:a7:21:7e:9c:54:a4:e2:
bd:62:33:91:b4:b7:c1:99:ad:d7:5d:46:7e:9a:b3:
81:76:91:93:6c:b1:cc:f3:c1:f5:4a:61:57:fb:a0:
e7:42:90:bb:fc:7f:69:9a:de:ca:fe:71:af:5e:45:
0e:23:81:a0:e3:7a:31:b9:33:af:6c:9e:8b:aa:f7:
ee:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:09:5C:25:F0:D9:32:40:CD:A7:D2:2A:FE:20:3A:6F:88:2D:9C:28
X509v3 Authority Key Identifier:
keyid:DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:3d:47:cc:0d:17:7d:dd:f6:0b:46:9a:2b:b4:62:47:8e:46:
84:d4:17:26:d9:b8:fb:16:f2:2e:ff:a4:c2:37:02:d2:05:9e:
4d:11:5e:c0:6e:f0:97:53:be:5e:09:a2:ac:a1:53:f2:9a:74:
43:e0:9f:a9:dc:e6:b3:8f:ed:4e:d5:83:f2:a9:1d:32:43:7e:
28:10:84:2f:f0:35:e6:60:04:e6:81:bb:0b:25:15:93:58:f9:
e0:55:79:d5:31:10:98:36:b9:39:74:0e:f4:5c:3e:b5:f4:56:
70:a1:c5:f5:ba:d6:66:a5:44:b4:b8:cd:7f:76:80:9e:16:07:
5c:7c:a2:1c:fe:3c:56:ee:79:1a:80:d9:ca:9d:61:4c:0f:cd:
31:f8:c2:81:cb:61:cf:33:57:8d:0b:ef:a9:07:dd:1f:a4:dd:
3e:11:cf:1c:9d:bc:c8:06:df:46:da:5c:75:b8:30:40:83:8f:
9e:d6:61:e9:1d:2d:b9:7e:98:f4:5c:f9:9b:c2:6a:27:e6:cf:
d3:ba:63:0a:9d:3a:c5:7f:98:46:4c:28:76:be:10:43:d9:64:
e7:23:24:8c:b3:3f:58:e0:a0:df:e9:e7:41:7c:65:d8:22:ad:
5e:07:6c:7b:34:6e:c1:ee:9e:0d:0f:a0:e0:b0:44:12:9f:e8:
40:b2:f5:a2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk3QkMxMTAvBgNVBAUTKERCNjI1MDY1N0ZFQkMxNjRFQjgyMUM3NjUyQUJFM0E4
NUZBOUFDRDQwHhcNMjYwMjE4MTkzNDQxWhcNMjYwMjI1MTkzNDQxWjAYMRYwFAYD
VQQDDA02OTk2MTQ1MS04OWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxVfAoq4PD9AemFQldXNOEp8Mo+Se+oPAz/icdeE3ZaMZ6YE0tzmQVD8owzQp
DfRWJtpseHZCqRhr33AbJEP5TCbO0Kw4haHDBhRBbq67Lczr8rNWqBTbRUzq1/Nc
sUu5s9qH/fBNUVJKQrSXnJcPj8yh4fYFtH1sOF5Xw2vFj1HzY4ERh3D7DUtPi/Nf
fkcOVvura/d4oNvN8ebWeUAQreUX6021677mw1JT4Y0AtL4h3LLmhYrOk53HbKch
fpxUpOK9YjORtLfBma3XXUZ+mrOBdpGTbLHM88H1SmFX+6DnQpC7/H9pmt7K/nGv
XkUOI4Gg43oxuTOvbJ6LqvfuJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8JXCXw
2TJAzafSKv4gOm+ILZwoMB8GA1UdIwQYMBaAFNtiUGV/68Fk64IcdlKr46hfqazU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTdCQy9BOENBRkJDMkFB
MjgxMUVBODFCMTk2ODFDNEY5QUUwMi8yMkpRWlhfcndXVHJnaHgyVXF2anFGLXBy
TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzIySlFaWF9yd1dUcmdoeDJVcXZqcUYtcHJOUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTdCQy9BOENBRkJDMkFBMjgxMUVBODFCMTk2ODFDNEY5QUUwMi8yMkpRWlhfcndX
VHJnaHgyVXF2anFGLXByTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAZPUfMDRd93fYLRportGJHjkaE1Bcm2bj7FvIu/6TCNwLSBZ5NEV7A
bvCXU75eCaKsoVPymnRD4J+p3Oazj+1O1YPyqR0yQ34oEIQv8DXmYATmgbsLJRWT
WPngVXnVMRCYNrk5dA70XD619FZwocX1utZmpUS0uM1/doCeFgdcfKIc/jxW7nka
gNnKnWFMD80x+MKBy2HPM1eNC++pB90fpN0+Ec8cnbzIBt9G2lx1uDBAg4+e1mHp
HS25fpj0XPmbwmon5s/TumMKnTrFf5hGTCh2vhBD2WTnIySMsz9Y4KDf6edBfGXY
Iq1eB2x7NG7B7p4ND6DgsEQSn+hAsvWi
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:47 2026 by rpki-client