
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft
File: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft (raw, json)
Hash identifier: pO7EvNOvyHZiOUhKLyre1EEyWwUfj6mtOPB5uQmY00A=
Subject key identifier: B0:02:71:BF:4F:23:10:D3:37:B7:82:8D:7B:EB:13:83:5D:48:A7:B8
Authority key identifier: F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F
Certificate issuer: /CN=A9159ECD/serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F
Certificate serial: 05B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft
Manifest number: 05AF
Signing time: Wed 18 Feb 2026 22:29:38 +0000
Manifest this update: Wed 18 Feb 2026 22:29:37 +0000
Manifest next update: Wed 25 Feb 2026 22:29:37 +0000
Files and hashes: 1: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl (hash: 9EJEX8o3/DibAupNRNSVNbIfyDAU6Eon33ILUM2ObB8=)
2: C309F5BA017011ECB98B2F33C4F9AE02.roa (hash: qee+KTCUp6bDNFwH36fAFYsE8VZ1yRt+iGxeFmVp9gI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl
rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 22:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1464 (0x5b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159ECD, serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F
Validity
Not Before: Feb 18 22:29:37 2026 GMT
Not After : Feb 25 22:29:37 2026 GMT
Subject: CN=69963d52-fde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c7:c9:bc:a4:73:4d:ca:46:50:f3:3e:0b:a3:
97:02:8f:61:cb:1a:45:1b:c7:6d:79:f3:fb:91:36:
96:23:2d:62:e8:d2:83:8d:7b:e1:1d:b2:a0:2d:43:
ba:02:26:68:44:4b:52:06:dd:76:51:99:b7:3e:1c:
60:d5:ba:f0:ca:53:e0:e1:d3:35:fc:ca:f6:72:65:
21:2d:61:0f:0c:84:bf:c3:1d:8c:1b:01:c3:09:b9:
b1:88:06:bc:08:73:bf:e8:3e:26:cd:5e:82:93:df:
09:84:c0:e8:64:ff:de:74:5b:ff:bd:30:f4:ab:ca:
82:54:15:61:b5:8a:b1:9e:eb:ab:67:f7:ca:c7:d2:
cd:83:cc:4f:ef:65:99:70:32:1b:f6:c6:15:d4:ef:
d0:43:3d:95:3e:fa:95:d2:9f:cb:76:5b:41:98:0a:
64:47:a6:65:f3:79:56:a1:f5:b7:79:88:a2:c7:60:
cb:68:d6:f6:13:55:aa:2d:55:77:f9:60:d4:f9:73:
1c:a7:0a:21:80:fb:f4:3d:46:c6:3d:2b:42:ab:89:
d4:91:3a:be:60:63:a0:0c:4a:0a:de:e8:86:9e:a8:
30:39:72:7e:8d:ee:ca:a3:b1:91:5e:42:56:7e:73:
a9:70:ef:75:e4:e9:80:68:78:41:62:b0:52:8a:59:
33:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:02:71:BF:4F:23:10:D3:37:B7:82:8D:7B:EB:13:83:5D:48:A7:B8
X509v3 Authority Key Identifier:
keyid:F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:1a:60:8e:89:01:24:e6:25:c7:b5:15:86:2f:63:4d:13:0b:
7c:73:d2:48:b7:34:4a:da:de:22:a8:0b:31:04:27:83:b4:d8:
85:fe:78:32:42:73:f2:a4:d9:ec:90:6d:57:ee:b2:da:49:37:
58:a1:a4:5d:61:04:e5:27:4d:14:e6:f1:34:cb:b9:6d:9c:c1:
8b:6c:47:4c:f2:d0:f0:4e:df:83:e9:0d:26:d6:6e:7e:3d:f7:
7a:56:9e:52:95:dc:d1:71:bd:20:5e:28:db:43:7f:65:b8:20:
6c:90:63:bb:7f:5d:b1:03:8f:30:c2:70:d9:b8:cd:fc:93:30:
e3:e2:5c:5c:b8:a4:e0:4f:77:f5:0a:24:bc:51:32:bc:3b:28:
86:7c:77:d7:08:63:9b:dc:f6:7f:2b:eb:03:fc:c0:27:79:6d:
10:0b:35:c6:fc:05:c8:4a:17:f7:3c:9e:17:98:41:40:d1:68:
6f:19:32:aa:5b:c4:f8:3f:2b:36:e5:46:81:37:bc:cb:c1:2f:
f2:94:c3:84:cc:2b:52:16:73:ea:4a:30:08:0e:15:a3:af:cb:
5b:fa:20:96:78:1b:88:20:06:8f:90:79:e7:ec:40:05:6e:f8:
b9:51:8c:cd:fa:fa:9d:c7:07:35:ab:f1:1b:11:79:3e:d7:a0:
02:50:e1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:17:53 2026 by rpki-client