
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
File: gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft (raw, json)
Hash identifier: bOHOdcp9bAkeH5mD1i3YQRnyWl0G89sB/G5rnqfztVs=
Subject key identifier: 2B:6B:D7:00:1C:F7:E2:8D:80:64:AB:E4:21:12:8F:70:95:E9:E5:5D
Authority key identifier: 80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54
Certificate issuer: /CN=A9146EB7/serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254
Certificate serial: 9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
Manifest number: 99
Signing time: Thu 19 Feb 2026 05:43:58 +0000
Manifest this update: Thu 19 Feb 2026 05:43:58 +0000
Manifest next update: Thu 26 Feb 2026 05:43:58 +0000
Files and hashes: 1: gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl (hash: UF9aQ41dzX3Fn9l/8z4aKBfm879h6voUicwx8nRwpqU=)
2: 04FD874E1FDF11F094B3136AC4F9AE02.roa (hash: 1VVixJvC9Ao+Yu3/0+4xin/rpRbqJh0O4hx1E0p4fGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl
rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:43:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146EB7, serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254
Validity
Not Before: Feb 19 05:43:58 2026 GMT
Not After : Feb 26 05:43:58 2026 GMT
Subject: CN=6996a31e-3da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9c:2a:59:67:85:5b:41:69:e6:3e:bb:e4:e2:
4b:75:ea:4b:58:b3:da:39:08:f9:08:fb:ee:ff:10:
13:08:d4:32:3e:3b:25:61:3b:69:ee:0b:06:82:71:
25:c2:99:73:0c:29:2b:b5:3f:c8:f0:2b:76:a5:e9:
15:38:3e:d3:92:5e:ae:9d:88:32:fd:5d:a1:e3:e4:
52:5d:ae:48:32:f8:02:f5:9a:50:2f:5d:9d:bc:e1:
05:1a:09:c9:11:41:6e:c2:cb:ef:0d:65:29:1f:dc:
b7:3e:8f:6c:ce:56:df:a7:7f:df:95:05:41:25:a7:
7c:87:4f:f0:dc:0f:d3:c5:3d:3f:72:9b:d1:c1:d0:
9e:8c:b6:06:7d:d3:91:79:86:8d:d9:22:7b:44:ba:
d2:1b:16:95:81:6d:e5:ba:7a:b9:e9:d9:44:ed:96:
ab:99:8c:16:a0:7b:39:2b:21:5f:9a:48:33:c5:a3:
f3:6f:90:5b:9f:4f:bc:96:00:fe:ab:2c:96:63:bc:
6e:03:6a:bf:8e:00:aa:de:83:76:a2:fc:7a:e7:b2:
73:8b:0f:02:09:d8:a8:c9:8f:cc:44:24:88:b6:42:
f1:34:2f:f1:75:6d:cc:82:a2:3d:bb:05:42:73:b0:
83:23:85:51:52:f4:ce:22:30:26:61:ab:e3:97:49:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6B:D7:00:1C:F7:E2:8D:80:64:AB:E4:21:12:8F:70:95:E9:E5:5D
X509v3 Authority Key Identifier:
keyid:80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:03:9e:0c:49:b2:c0:f2:df:92:b6:bf:e3:e0:77:e1:c4:e4:
28:9a:62:3d:a2:14:6d:a4:c8:85:fa:a0:f5:03:cb:cb:96:ea:
dd:ea:67:03:78:bd:b3:46:d5:64:8a:f8:fd:2d:bd:ad:cc:52:
0a:7a:fe:d4:c6:84:5f:04:50:ca:ee:27:67:5f:f0:d9:74:0c:
7f:c3:0c:3d:e9:ec:6a:08:b3:cf:c5:d5:d3:c1:e4:e5:f0:b8:
53:4a:bb:37:f8:80:23:7f:f6:19:a2:d0:16:d3:c9:f7:1a:4c:
27:c0:d0:c1:3f:68:5b:96:04:6a:0e:f9:fd:5a:f9:ee:6c:f1:
98:bc:6e:31:e9:b5:3f:a9:c0:10:07:ab:c1:dc:fe:f7:f1:f2:
23:37:75:e3:b6:2e:fc:db:8c:b3:a1:be:dd:a6:57:43:b2:5b:
0e:23:5e:c7:33:bd:e3:05:12:b3:f5:6f:16:39:f8:e6:fb:fa:
92:98:a9:2f:a7:b0:fd:e0:d0:15:88:5b:5b:90:1c:2c:bc:cc:
0d:a8:65:23:86:fe:9d:f4:23:19:f4:a7:c1:1d:d6:c7:21:2a:
c3:ad:d1:7b:21:9f:af:7c:e8:5d:cc:73:3f:f3:dd:b9:34:9d:
2d:4a:f0:8e:a5:38:b0:01:d1:86:7a:0b:c7:a3:97:b5:e6:7f:
9a:e4:0b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:40:47 2026 by rpki-client