
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft
File: qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft (raw, json)
Hash identifier: vItqAnd3ZYyUGip4Ge1E0iu3boi+klbGCNTyc1Dmh6A=
Subject key identifier: B8:99:E7:72:56:C8:BD:87:66:53:1C:2C:D2:97:52:73:C6:02:F1:85
Authority key identifier: A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2
Certificate issuer: /CN=A914D6FC/serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2
Certificate serial: 028B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft
Manifest number: 0281
Signing time: Thu 19 Feb 2026 00:45:06 +0000
Manifest this update: Thu 19 Feb 2026 00:45:06 +0000
Manifest next update: Thu 26 Feb 2026 00:45:06 +0000
Files and hashes: 1: qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl (hash: 66h3B+vHH/6yhamezZgi0MGb/OLsAC4WZM7CajIPiSk=)
2: 11EC50B48B8F11EF8DE96E60C4F9AE02.roa (hash: H0AJqEiGAywgjMNh/B1Rg0QqAknxodzCmkcexEm/7aU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl
rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 651 (0x28b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D6FC, serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2
Validity
Not Before: Feb 19 00:45:06 2026 GMT
Not After : Feb 26 00:45:06 2026 GMT
Subject: CN=69965d12-032f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:61:65:81:0d:78:81:07:1f:da:b4:26:cf:ab:
0e:98:01:e9:30:cc:92:f8:f8:63:e5:1e:f2:af:c6:
fe:23:4e:b2:d6:4d:87:1b:63:47:ea:95:c1:b4:6d:
c3:03:83:9a:23:db:e8:57:87:cc:27:ca:15:39:e8:
34:f5:ce:c2:37:7a:7b:05:04:b6:21:af:27:67:24:
ad:c4:07:7c:8c:73:4e:c3:2c:f3:5e:eb:ae:75:5f:
8c:88:59:11:22:a2:43:ef:70:62:38:ec:fb:da:ac:
c2:08:c7:db:01:5e:46:c8:f8:1e:a1:72:a0:ef:ae:
93:35:51:23:47:75:c4:1f:6f:4f:6e:50:30:a1:f6:
ec:09:81:5f:fc:ad:c1:24:2f:79:0d:9f:dd:f2:2f:
3a:c4:71:04:0d:37:4c:7f:cb:7c:0a:29:ea:11:24:
88:47:24:6d:47:24:73:e2:58:53:4e:b4:5b:a7:3c:
b4:9b:4a:b4:ae:ac:5a:0d:ae:4e:7d:ec:f5:08:0f:
a8:5b:60:a3:15:58:e0:d9:31:42:38:be:1b:7d:bd:
85:aa:d1:43:49:82:f0:b7:91:3e:84:54:9b:a6:53:
e9:21:cb:f8:57:68:a6:9e:5e:55:0a:ac:61:6f:ce:
6b:46:c6:5a:ed:2d:75:34:0d:28:ce:46:77:65:f3:
b7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:99:E7:72:56:C8:BD:87:66:53:1C:2C:D2:97:52:73:C6:02:F1:85
X509v3 Authority Key Identifier:
keyid:A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:19:cb:11:c3:a5:a6:e6:fb:75:d3:82:b5:14:90:ba:9f:a6:
30:e8:09:13:95:de:1b:9a:25:44:c4:ab:23:ad:16:a4:e3:9a:
79:88:19:b7:d8:e6:23:bb:9b:87:b5:1e:f3:7a:f0:4f:30:85:
78:de:ee:71:16:ac:86:04:4c:ee:9a:c5:d5:d5:17:52:55:7a:
f7:08:c8:2b:27:e2:57:ee:31:6a:1c:36:5e:df:08:d4:a5:17:
83:11:ec:e6:2f:ae:b8:d3:29:e8:57:49:f2:af:20:d9:82:8f:
c8:51:e7:92:84:ad:62:97:80:c2:5b:65:91:31:61:8a:14:55:
42:ee:93:b8:a0:ac:f4:ea:63:95:83:b1:64:29:51:4b:bb:47:
87:f8:a8:83:1f:34:c0:f5:15:71:84:25:af:b2:f5:59:e3:2a:
af:ec:81:d4:67:56:ea:72:8f:7f:f6:b3:1b:54:d2:e7:fa:29:
97:a8:39:16:f2:e8:1f:35:bd:4a:61:9f:39:e1:bb:95:51:d6:
77:a6:75:06:7d:f8:7d:91:01:a9:c6:4f:c5:94:a9:a5:a7:9c:
7e:e0:0d:81:b3:cc:f1:f3:1c:0b:c9:4e:9f:03:8b:ef:99:00:
72:24:e1:6f:93:d3:87:08:e1:62:a9:bb:5b:5c:4f:1e:8c:4a:
7b:04:42:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:42 2026 by rpki-client