
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft
File: HSQuN7enRsN-RUFFarAJiztXPPw.mft (raw, json)
Hash identifier: AHPadSSrJD5AvhcTq8Q4v+fbCV7Tg7AwdiUEkhfhISQ=
Subject key identifier: 42:30:5F:42:44:A4:4C:FA:D2:90:0D:91:C9:52:5E:FE:01:AA:BC:62
Authority key identifier: 1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC
Certificate issuer: /CN=A9142EA4/serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC
Certificate serial: 72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft
Manifest number: 71
Signing time: Thu 19 Feb 2026 06:13:40 +0000
Manifest this update: Thu 19 Feb 2026 06:13:40 +0000
Manifest next update: Thu 26 Feb 2026 06:13:40 +0000
Files and hashes: 1: HSQuN7enRsN-RUFFarAJiztXPPw.crl (hash: AGrb4T6KqL5167k1UKiF2kqJqeO6IczpLOzTrpzzElM=)
2: 96E040E063B211F09B18DA38C4F9AE02.roa (hash: RBJCVf8Vhn27huQa1u7FR3jz192DVTd/ur20Jj+Crn8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl
rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:13:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142EA4, serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC
Validity
Not Before: Feb 19 06:13:40 2026 GMT
Not After : Feb 26 06:13:40 2026 GMT
Subject: CN=6996aa14-31ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dc:f4:ac:fa:10:d6:b6:d4:ee:32:2d:41:00:
5a:d9:26:6c:b9:00:41:c0:fc:27:7f:2e:c2:f3:e2:
97:14:a7:ff:d1:c4:fe:60:b9:2a:de:6c:26:a4:21:
68:c6:fa:df:fc:cf:6f:27:5f:04:c1:b8:1c:e6:42:
44:45:74:93:aa:0c:da:8c:cb:a2:d9:02:5f:ee:3d:
f0:81:7d:2f:43:72:84:0e:d7:03:11:fe:1f:9d:78:
ff:09:47:52:d2:e8:de:e7:0a:20:2f:59:33:a5:16:
b1:c1:56:f8:04:bb:49:0c:0a:b7:32:7d:d5:33:5c:
0b:d2:76:0a:e8:f0:2f:01:c3:42:f2:a8:05:93:fe:
a6:f4:5a:a5:a1:d3:6c:6b:e6:a5:8c:74:e4:f6:ff:
8d:32:19:c6:eb:76:1a:ab:4a:12:f4:ff:71:21:06:
a1:d0:1f:8c:12:95:16:f1:1f:88:39:24:f7:2b:20:
60:cc:f3:86:06:f8:3a:aa:48:68:4f:bf:cf:58:1b:
92:b8:49:ec:0f:22:cf:6b:d0:21:ff:c0:8a:19:56:
99:3e:57:69:f2:3a:f2:62:21:f3:d3:1e:2a:9e:8a:
fc:ac:3d:d0:5a:c5:d7:9d:c1:1a:6a:e6:22:64:a1:
e2:44:39:b6:ec:f5:17:b7:d2:de:83:e2:e2:f5:ec:
39:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:30:5F:42:44:A4:4C:FA:D2:90:0D:91:C9:52:5E:FE:01:AA:BC:62
X509v3 Authority Key Identifier:
keyid:1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:3f:bc:13:ba:52:83:a4:c0:6c:78:fb:75:ec:14:33:ed:71:
b6:c1:76:be:2c:9e:e0:f1:13:4d:e8:f2:10:49:d1:93:d6:2b:
4a:c0:18:d9:e0:4a:28:e6:2f:b9:56:34:e7:6a:7b:38:5b:47:
01:07:31:a3:e8:76:df:97:3d:4b:1a:6a:1b:d3:1b:5c:46:c8:
86:7f:22:a9:78:11:68:e8:41:7c:3e:06:e3:be:43:70:86:e1:
f5:5c:77:70:29:71:1c:48:f6:82:83:66:a0:f7:61:8f:66:17:
46:9b:41:8f:ba:de:0e:71:c6:85:84:53:e7:ad:a8:81:6f:22:
48:a0:74:b3:21:42:38:3f:a8:19:bd:2d:bf:d2:da:3a:3b:13:
89:04:dd:d0:bd:7f:27:26:c8:8b:e5:73:7f:3e:50:dd:2d:b5:
ab:75:9c:0b:32:f3:70:7e:10:1a:ea:70:12:60:74:46:30:fa:
3b:74:f8:5c:fb:f0:2b:5a:7e:cd:27:30:cd:96:55:bd:fd:e2:
fa:d0:0f:19:69:0e:ae:a8:24:8e:90:f5:e0:d1:bf:98:50:de:
8c:7d:ae:33:bc:ad:6c:87:76:90:66:c0:df:fa:88:bd:d8:c4:
a0:05:14:b0:ef:56:35:52:5b:94:78:78:ba:54:1f:bb:25:39:
7d:e3:f7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:27:05 2026 by rpki-client