
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft
File: q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft (raw, json)
Hash identifier: BfM9bHO4JSMOgiav81MV/dMLVrn91GrOlkajNvw3Dzg=
Subject key identifier: 92:17:DE:AD:20:89:FB:21:50:7E:0D:93:07:86:34:BE:CC:14:EE:09
Authority key identifier: AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4
Certificate issuer: /CN=A9172989/serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4
Certificate serial: 28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft
Manifest number: 26
Signing time: Thu 19 Feb 2026 07:01:50 +0000
Manifest this update: Thu 19 Feb 2026 07:01:49 +0000
Manifest next update: Thu 26 Feb 2026 07:01:49 +0000
Files and hashes: 1: q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl (hash: latOX1WT+GpHKucq5H7ZyMul0NaJtB04vOd8Jp8PZII=)
2: 0FB60AEED6D711F085B1D0E884D3641D.roa (hash: OQ9vc68P9a8kEML8WxvcO6y/ABGhLAWink2psJnWsk4=)
3: 3CBCF5BED6D911F0B064CD5C85D3641D.roa (hash: dyqXFCcUaP0MyJCMf/CgPJbAs32ejMPFahUoO/mRaLE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl
rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172989, serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4
Validity
Not Before: Feb 19 07:01:49 2026 GMT
Not After : Feb 26 07:01:49 2026 GMT
Subject: CN=6996b55e-a58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:ea:e6:29:a8:98:b5:d4:b4:8a:8e:6e:3a:
2a:0e:a3:70:1b:ff:45:da:dc:92:1f:66:c4:ed:df:
30:71:ef:d6:ae:f5:bf:cb:95:b7:42:12:69:8b:fb:
29:b9:c3:1a:d4:d0:86:44:59:b9:e7:77:3e:77:f5:
a6:c9:38:92:00:c7:ba:5d:40:33:75:17:02:4b:b9:
83:67:1a:cb:01:fa:26:cf:55:22:bb:8c:8c:a1:ab:
77:ea:bd:af:11:65:03:ea:bd:cd:2c:83:9b:3f:46:
22:96:95:72:b0:92:95:cb:67:c2:db:45:79:f5:5b:
23:03:fd:e4:be:ae:99:4c:d1:23:74:5f:d5:b2:ca:
f5:8c:f0:67:70:28:a7:53:d9:70:d9:2b:90:a2:42:
c7:05:4d:7c:56:61:f9:a1:f8:ed:be:df:7b:d8:97:
17:ec:9d:fb:3f:4a:ad:5c:b3:56:a6:76:7c:c9:fd:
5d:23:02:3c:b6:cd:dd:9b:42:ef:61:28:26:e7:12:
ec:29:d5:4d:fd:97:21:4d:ca:52:1f:2e:17:f3:04:
87:e0:ac:4c:4d:e2:d1:ee:0f:71:32:64:fa:b7:b9:
d9:97:f7:52:66:58:c1:26:32:84:ca:18:84:8e:a0:
e4:bf:d7:aa:69:27:c6:4f:27:95:94:6b:c5:14:ce:
ed:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:17:DE:AD:20:89:FB:21:50:7E:0D:93:07:86:34:BE:CC:14:EE:09
X509v3 Authority Key Identifier:
keyid:AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:f5:a9:7c:f8:f7:9b:65:0d:3f:1d:2b:cb:05:7c:16:04:7c:
a2:83:5d:bc:84:f0:eb:af:92:6c:7f:45:60:3a:89:fd:b6:4d:
35:67:9f:cc:a6:31:c3:ff:a0:1b:94:51:f5:8c:63:ac:76:36:
ab:f3:12:ce:f3:1b:62:e1:7a:fd:82:44:59:0c:1c:2b:ac:5f:
71:c2:9b:c6:35:f8:d9:3a:48:73:20:3e:6e:eb:59:a6:17:7f:
b3:e2:71:fe:fe:bd:36:d0:63:ea:a0:4f:55:76:51:1c:9d:a0:
d6:bb:ec:fb:7d:23:30:25:1e:33:f4:57:bf:da:b7:b9:14:d2:
cf:01:e8:9a:86:ff:80:8d:26:29:eb:5c:1f:ec:56:80:b8:37:
9a:51:62:89:fa:80:2f:3e:5a:bb:94:8b:3f:45:8b:e2:a8:e4:
48:d8:6e:1d:75:20:b4:50:1f:e6:65:17:36:24:d4:8f:8a:e6:
50:77:1e:b3:a8:96:ca:f3:4f:e2:4c:94:02:92:fe:76:ba:ff:
f5:db:29:3b:74:d6:aa:a5:95:e4:b1:56:40:2c:f4:ea:14:44:
f6:e1:29:45:6a:49:96:ea:43:55:1b:cd:99:68:5a:40:00:17:
80:b4:45:86:ca:39:d9:f4:ea:80:51:d7:ae:7c:a6:9c:b0:30:
99:53:19:65
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
Mjk4OTExMC8GA1UEBRMoQUI2OUM3NDAyNTQ4OUFGRDYxNzQ3RkY5MzM1QjE0N0Uy
MEJCMjVENDAeFw0yNjAyMTkwNzAxNDlaFw0yNjAyMjYwNzAxNDlaMBgxFjAUBgNV
BAMMDTY5OTZiNTVlLWE1OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0uurmKaiYtdS0io5uOioOo3Ab/0Xa3JIfZsTt3zBx79au9b/LlbdCEmmL+ym5
wxrU0IZEWbnndz539abJOJIAx7pdQDN1FwJLuYNnGssB+ibPVSK7jIyhq3fqva8R
ZQPqvc0sg5s/RiKWlXKwkpXLZ8LbRXn1WyMD/eS+rplM0SN0X9WyyvWM8GdwKKdT
2XDZK5CiQscFTXxWYfmh+O2+33vYlxfsnfs/Sq1cs1amdnzJ/V0jAjy2zd2bQu9h
KCbnEuwp1U39lyFNylIfLhfzBIfgrExN4tHuD3EyZPq3udmX91JmWMEmMoTKGISO
oOS/16ppJ8ZPJ5WUa8UUzu2XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkhferSCJ
+yFQfg2TB4Y0vswU7gkwHwYDVR0jBBgwFoAUq2nHQCVImv1hdH/5M1sUfiC7JdQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyOTg5L0VGRkRENzE0RDZE
NTExRjBCMDYzODRCNTgxRDM2NDFEL3EybkhRQ1ZJbXYxaGRIXzVNMXNVZmlDN0pk
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcTJuSFFDVkltdjFoZEhfNU0xc1VmaUM3SmRRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy
OTg5L0VGRkRENzE0RDZENTExRjBCMDYzODRCNTgxRDM2NDFEL3EybkhRQ1ZJbXYx
aGRIXzVNMXNVZmlDN0pkUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADP1qXz495tlDT8dK8sFfBYEfKKDXbyE8Ouvkmx/RWA6if22TTVnn8ym
McP/oBuUUfWMY6x2NqvzEs7zG2Lhev2CRFkMHCusX3HCm8Y1+Nk6SHMgPm7rWaYX
f7Picf7+vTbQY+qgT1V2URydoNa77Pt9IzAlHjP0V7/at7kU0s8B6JqG/4CNJinr
XB/sVoC4N5pRYon6gC8+WruUiz9Fi+Ko5EjYbh11ILRQH+ZlFzYk1I+K5lB3HrOo
lsrzT+JMlAKS/na6//XbKTt01qqlleSxVkAs9OoURPbhKUVqSZbqQ1UbzZloWkAA
F4C0RYbKOdn06oBR1658ppywMJlTGWU=
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:03 2026 by rpki-client