
$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
File: aq89m8Pfo6ElCCll2P8zuBKPKR8.mft (raw, json)
Hash identifier: yzNyaMfv/0r8IldK4rm3JLwJNWujH+Aoj93WbAaZ3nI=
Subject key identifier: BA:FF:55:00:1C:C0:6A:C4:2B:E1:B5:3B:DC:D5:A5:9A:05:84:BA:A2
Authority key identifier: 6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F
Certificate issuer: /CN=A91476E2/serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F
Certificate serial: DF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
Manifest number: D9
Signing time: Thu 19 Feb 2026 05:04:23 +0000
Manifest this update: Thu 19 Feb 2026 05:04:22 +0000
Manifest next update: Thu 26 Feb 2026 05:04:22 +0000
Files and hashes: 1: aq89m8Pfo6ElCCll2P8zuBKPKR8.crl (hash: 650C2s7lklpzpEdWfiHf3jKzFyehX6TAJ5opvZWgjWA=)
2: 79E40530CB5A11EFA1C64B62C4F9AE02.roa (hash: drd+idSshs98eOD0pXc/+ttH+udrA5TRp96UQZXHfUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl
rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91476E2, serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F
Validity
Not Before: Feb 19 05:04:22 2026 GMT
Not After : Feb 26 05:04:22 2026 GMT
Subject: CN=699699d6-039b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:85:14:ae:83:2f:d2:28:cb:c0:79:8a:a2:cb:
b8:75:6a:f7:cd:f8:b3:50:a0:b5:85:3b:40:c8:ca:
87:97:6c:5f:6a:4b:5a:1d:28:83:89:d1:5f:4a:d4:
11:99:5a:2b:8f:93:76:d6:ef:97:06:48:66:bf:db:
96:57:ea:14:b8:20:bf:58:98:cf:40:c9:24:03:48:
46:7c:06:a2:aa:45:f2:18:67:0a:40:3c:26:87:1b:
e5:57:82:ca:f5:10:62:b9:5f:b6:65:b8:8f:c5:a1:
0d:00:f7:fe:cd:ba:e5:10:f0:e2:b5:ab:b5:2c:7c:
8b:63:2f:32:09:6b:18:70:73:16:bf:2d:19:4a:16:
94:92:83:30:4d:e8:b0:79:4e:07:1f:85:98:ed:3c:
95:e7:b7:81:e2:54:b2:91:19:01:6a:e5:66:65:19:
c6:c0:cc:d4:83:2b:5c:6c:a0:0b:fc:84:b5:06:86:
1d:09:3d:a2:6b:ed:1f:0d:6a:cd:22:3a:a2:05:17:
3d:59:3f:25:9b:e6:0d:44:95:c4:b4:cf:0b:0a:af:
d4:da:21:96:08:ac:dd:6b:4c:c9:1e:2a:e3:25:fc:
57:3e:05:25:8e:09:35:3a:1b:bc:0e:77:65:1b:ff:
69:cd:ba:43:65:55:9d:65:7c:c7:36:eb:cf:94:1f:
6f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FF:55:00:1C:C0:6A:C4:2B:E1:B5:3B:DC:D5:A5:9A:05:84:BA:A2
X509v3 Authority Key Identifier:
keyid:6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:4f:b0:04:65:3b:b0:7a:2c:79:8c:4b:8f:ff:da:25:1f:69:
16:77:be:1b:7c:30:37:e0:82:71:0f:ea:0a:d3:8c:79:ab:09:
bc:ef:3a:3c:7c:cf:1e:7e:72:dd:ba:2f:99:77:93:47:f0:70:
4e:54:23:c4:a6:43:5e:f5:70:49:3c:e8:07:ee:4f:ae:5b:65:
da:8c:95:93:fa:67:30:32:79:24:0d:6c:6d:70:18:85:06:92:
b4:e2:c3:d2:1e:03:dc:55:0f:09:bb:4b:d4:3b:23:56:6a:9d:
65:35:1a:15:18:77:57:f9:df:ba:ce:18:ca:80:0c:9b:32:df:
44:69:35:9a:7a:5d:9a:ac:2d:50:d4:4d:7a:f9:8a:91:62:81:
45:21:18:f9:c9:12:c3:da:f7:cf:8f:ab:9f:68:01:75:e5:43:
47:7e:48:bd:96:02:3a:8c:94:2d:ac:84:74:d7:ab:75:9d:91:
89:78:77:46:70:52:2e:14:33:ef:ab:05:fe:a8:e0:60:bf:9f:
4d:de:e9:26:48:e1:c9:00:e6:80:97:15:3c:fc:f1:b5:da:71:
55:b8:ba:7b:ec:89:a0:a7:6e:e4:13:22:e4:73:fa:b8:f7:e5:
14:cb:f7:f6:db:07:db:ab:f4:6e:20:d7:d8:7c:40:f5:35:02:
4c:97:80:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:44:11 2026 by rpki-client