
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
File: qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft (raw, json)
Hash identifier: JggDI+rVPU1R+mXjuC4Yv3X8qw1ICtXgflsphpXibBQ=
Subject key identifier: 6A:57:08:BB:4A:FF:F9:B2:76:CF:D2:23:17:80:77:C1:EC:05:E5:57
Authority key identifier: AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E
Certificate issuer: /CN=A917E4BA/serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E
Certificate serial: 0B5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
Manifest number: 0B4F
Signing time: Wed 18 Feb 2026 18:51:21 +0000
Manifest this update: Wed 18 Feb 2026 18:51:20 +0000
Manifest next update: Wed 25 Feb 2026 18:51:20 +0000
Files and hashes: 1: qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl (hash: aTnQZYbP6av3LLsiGGTmi5un/aJLzvG1smx6wOfn0Bg=)
2: 2512D04C22BE11EC9240097DC4F9AE02.roa (hash: CrylrybJXUyUqaeayMNhPjaFY6Npk3CjmQ0j2NnHemA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl
rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:51:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2910 (0xb5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E4BA, serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E
Validity
Not Before: Feb 18 18:51:20 2026 GMT
Not After : Feb 25 18:51:20 2026 GMT
Subject: CN=69960a29-c212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:9b:46:4b:42:83:10:5a:08:0e:57:cf:5e:
f3:a6:a3:c9:3b:6d:df:9e:bd:38:e0:8f:01:f8:d9:
89:61:cc:db:21:37:1c:51:ec:7f:dc:f3:47:bb:90:
d6:05:2e:af:78:4c:7b:b6:64:ea:a5:56:12:ac:14:
84:79:a8:5c:e0:ec:07:5e:65:ae:6b:ed:e2:34:14:
2d:34:f4:68:d0:e7:e9:58:57:7f:55:11:82:bc:05:
bb:5e:ec:bb:c0:77:31:15:4b:7e:3c:f1:5a:32:ba:
ac:7a:23:0c:5a:e4:c5:fa:33:5e:78:67:47:3e:4c:
7b:61:39:45:73:d0:b2:dd:50:b4:c6:74:59:78:3a:
ec:0c:1d:aa:86:0b:7a:95:8e:7e:1a:1a:01:3c:e9:
45:b0:fe:bc:d4:cc:a7:42:7d:88:3b:f0:af:b3:6a:
1e:6c:0e:2a:4c:89:75:d6:49:82:f9:2a:77:65:86:
9c:47:ce:7d:01:ec:e6:31:74:74:ec:fd:4b:4d:9f:
d8:be:02:19:82:5a:f8:3f:90:84:d1:06:61:b2:73:
1d:61:79:a5:66:2a:b5:80:6f:0c:b3:d4:ce:47:2b:
b6:70:93:f1:e8:e0:7b:88:4e:cf:b5:59:59:7c:29:
62:01:94:0d:da:34:bd:7b:1d:d8:a3:f5:23:62:c4:
45:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:57:08:BB:4A:FF:F9:B2:76:CF:D2:23:17:80:77:C1:EC:05:E5:57
X509v3 Authority Key Identifier:
keyid:AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:19:d9:a2:0e:6f:05:29:85:04:52:4a:6f:99:3c:aa:23:2e:
01:c7:94:bf:f7:d1:a7:80:0a:b6:d6:31:46:91:72:0b:05:50:
2d:a1:3c:cc:21:5e:07:a6:6c:1b:ff:9a:dc:a5:8f:d6:ae:d5:
ad:a1:e3:40:7a:0a:92:96:03:83:4c:de:71:c8:c5:cd:d4:b9:
8a:a5:98:fc:88:b6:8d:49:5e:58:3a:00:4f:28:52:76:e7:68:
b0:f8:18:46:d6:d6:5a:c5:ea:0e:0c:c8:2b:7a:9e:f2:57:20:
8c:13:58:e2:0e:31:0d:ba:05:e0:ff:fc:ce:15:e5:0b:9b:57:
d2:88:d7:68:89:2d:73:b2:d7:37:87:ba:e5:d9:fa:ed:95:84:
c8:a6:96:eb:b8:ca:7d:c6:d8:ee:9a:47:d3:5c:7d:7a:ef:d2:
86:57:7b:dd:76:d7:32:5e:ca:d1:70:d0:34:a9:78:fb:ea:89:
4f:e4:f8:2f:60:96:f6:22:de:ff:c9:ac:a0:1a:69:5b:cc:c8:
d2:87:49:0a:c2:85:00:56:0a:8c:c5:00:71:99:b9:11:15:b4:
ea:15:01:c9:e4:5e:74:75:0d:8c:27:80:6f:a1:0b:0f:c4:a5:
2f:5f:ae:a0:4a:01:8d:35:59:d2:73:c4:75:c2:83:3d:fa:d7:
e6:99:a2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:50 2026 by rpki-client