
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
File: HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft (raw, json)
Hash identifier: kk5bwFKPqQWw+1l2D1DazpUE7ogJmUxZIRzG4YePO8k=
Subject key identifier: 93:B0:40:5D:7D:C2:D0:9D:36:13:6C:D9:18:B9:F0:B3:78:6F:A5:CB
Authority key identifier: 1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4
Certificate issuer: /CN=A919EF2B/serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4
Certificate serial: 0359
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
Manifest number: 0355
Signing time: Thu 19 Feb 2026 00:08:15 +0000
Manifest this update: Thu 19 Feb 2026 00:08:14 +0000
Manifest next update: Thu 26 Feb 2026 00:08:14 +0000
Files and hashes: 1: HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl (hash: Ym5LSvSGkPb1ukq8RA66uLxjAzfUeMLXTkWaGXb7doc=)
2: 830C9F90EBCA11ECA2A1747EC4F9AE02.roa (hash: i5bEFhc7shjBgj4Fert4VleTijIxiv1ZRXXWoyNF05s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl
rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:08:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 857 (0x359)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EF2B, serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4
Validity
Not Before: Feb 19 00:08:14 2026 GMT
Not After : Feb 26 00:08:14 2026 GMT
Subject: CN=6996546f-4850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:52:34:3a:23:a6:6f:d7:ef:99:bc:99:7c:
eb:0b:c8:14:70:9a:1e:8d:b2:26:a9:6c:35:d3:f6:
30:b5:49:64:9d:5c:16:a4:91:ac:1c:a5:63:de:88:
4f:90:8c:e1:bd:d9:d0:5f:d0:55:86:90:64:03:a0:
d4:be:5a:ac:6d:40:aa:43:49:bd:67:24:f0:f6:df:
2d:21:78:9f:5b:7f:40:34:0b:71:82:d6:2d:d2:1f:
16:eb:1c:38:31:52:ab:b2:41:8c:18:eb:98:84:27:
14:7a:3c:e1:7d:b1:4a:cc:76:dc:53:56:fe:91:2c:
32:b2:8e:f0:15:c1:e7:ed:ed:f9:ed:aa:2a:10:dc:
cc:0a:28:de:e5:79:9c:28:05:53:5a:16:23:eb:81:
3a:a3:8d:ea:24:eb:58:e6:cd:ce:e3:8c:e0:7e:3d:
c7:72:fe:04:16:5d:e5:c8:42:db:7c:f7:ea:92:a1:
90:d1:1a:3d:a8:a8:e4:05:a5:d8:b8:36:d5:aa:c4:
aa:ed:89:3f:a1:87:46:0f:a6:f5:1c:8f:cb:53:00:
75:e0:85:2d:22:69:34:8f:be:8f:b1:5a:3a:ae:61:
b7:db:bb:eb:06:15:a4:89:fc:36:66:9b:05:d2:87:
42:12:2f:51:42:2c:3b:ce:7c:be:22:74:0d:bc:c6:
41:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B0:40:5D:7D:C2:D0:9D:36:13:6C:D9:18:B9:F0:B3:78:6F:A5:CB
X509v3 Authority Key Identifier:
keyid:1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:bb:93:9e:81:de:c0:91:1c:8e:ab:e8:0b:ec:0b:19:5d:e5:
b6:9b:1b:ff:84:d2:10:ff:ef:11:d5:b4:6d:37:6b:55:5c:63:
ce:f2:d4:d2:43:18:01:6f:91:92:8f:18:76:d5:3d:05:3a:c0:
8e:04:11:2e:43:24:b2:3f:15:9e:ab:db:50:f3:83:e8:70:12:
1c:16:5b:22:5f:e9:d4:ac:fe:1f:bd:bc:4f:c4:e1:a6:77:8f:
5a:80:eb:96:48:47:da:7d:23:0a:f7:3f:ef:30:68:fa:a5:e0:
47:e0:b5:b5:98:f0:cd:03:0b:d8:fc:ab:2a:94:25:9b:11:05:
74:10:c1:0a:59:f6:fa:36:ae:56:11:9b:93:62:c1:81:d1:ee:
ec:79:fa:23:1a:ff:24:c4:96:98:92:6a:31:00:35:cc:ce:aa:
d6:ef:f9:b8:62:83:d1:fc:b6:07:1c:28:6c:b8:b4:74:25:d1:
69:bb:88:e4:0a:26:25:24:b1:b9:23:f7:92:7f:36:01:12:4b:
fd:f6:a6:96:39:2b:8a:0f:fe:08:a8:02:a4:f6:fa:74:2a:d2:
eb:86:aa:eb:e6:e4:8d:4b:d0:d6:32:0c:f1:9b:e4:c0:10:47:
ca:29:e1:c0:0c:07:06:a4:a2:52:4f:61:56:0e:5a:e9:73:d7:
61:75:5d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:46:11 2026 by rpki-client