
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft
File: Q7wDqZcxeefuI0ayjnTeET9jNWw.mft (raw, json)
Hash identifier: Uu/eCiAY8AgJUaCwxYt/lSKvCCs6yveIUj8gIaMhQ5s=
Subject key identifier: 64:30:65:B0:05:21:98:84:03:A1:04:19:A1:30:61:8A:C6:18:66:32
Authority key identifier: 43:BC:03:A9:97:31:79:E7:EE:23:46:B2:8E:74:DE:11:3F:63:35:6C
Certificate issuer: /CN=A91A15B3/serialNumber=43BC03A9973179E7EE2346B28E74DE113F63356C
Certificate serial: 5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft
Manifest number: 59
Signing time: Thu 19 Feb 2026 06:24:40 +0000
Manifest this update: Thu 19 Feb 2026 06:24:39 +0000
Manifest next update: Thu 26 Feb 2026 06:24:39 +0000
Files and hashes: 1: Q7wDqZcxeefuI0ayjnTeET9jNWw.crl (hash: +wT/tunrdoHMu3Af/+LgIuqWyETFRkgApInDGoqkECc=)
2: A95853C684AE11F0BC9BFE85C4F9AE02.roa (hash: Crg6eEA+ImfPHspcxe55nFPiMJ47NKQMZB7ytChE440=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.crl
rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:24:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A15B3, serialNumber=43BC03A9973179E7EE2346B28E74DE113F63356C
Validity
Not Before: Feb 19 06:24:39 2026 GMT
Not After : Feb 26 06:24:39 2026 GMT
Subject: CN=6996aca8-341d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:7c:a9:d8:27:43:51:ae:52:2c:4a:8c:0f:
44:f5:34:15:94:0f:95:8a:b7:a9:d4:f5:0c:cf:ca:
67:dc:b7:b0:64:3c:ab:80:03:34:05:d1:b6:52:4c:
0e:5c:0f:4e:3c:80:d1:ce:c0:b7:7f:c1:29:e5:41:
90:de:de:8c:fe:7a:b4:6d:81:d2:71:33:f6:4f:f5:
16:4a:30:f0:f9:ca:00:20:a8:18:a9:e5:c9:59:cb:
ab:99:7c:3b:fd:68:80:3b:14:21:b2:b7:76:af:f7:
55:6f:61:c3:4c:77:d1:74:6b:8c:f1:d9:7f:0c:d9:
23:33:ab:c6:61:49:96:8b:8f:a9:55:5b:72:84:98:
ab:c7:ca:ce:8d:9c:3f:26:38:71:ed:b6:ae:dd:23:
0c:ca:77:0f:e8:61:58:76:ca:58:06:f7:57:d4:d9:
2c:60:db:9f:5e:53:38:82:5f:69:f8:e4:7d:3e:45:
c1:bb:c8:83:18:af:b2:e8:2b:74:cf:ce:ea:05:38:
a4:04:31:1d:d3:d4:16:a0:8a:f5:7c:e2:7e:58:0e:
74:b3:03:90:a4:3e:bf:53:4a:b5:f2:b4:0e:ad:24:
0f:c2:d3:09:b8:82:41:2a:be:97:fc:72:ef:70:13:
51:1a:b0:b6:84:48:2f:a3:e3:9d:02:e7:81:bd:03:
ef:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:30:65:B0:05:21:98:84:03:A1:04:19:A1:30:61:8A:C6:18:66:32
X509v3 Authority Key Identifier:
keyid:43:BC:03:A9:97:31:79:E7:EE:23:46:B2:8E:74:DE:11:3F:63:35:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:39:0a:d6:42:f1:32:b2:e3:7d:6a:f4:6b:06:c7:39:db:c3:
d5:9b:6e:60:82:78:93:fd:ed:72:d7:b3:65:80:e8:48:16:97:
e2:e8:99:bf:19:c5:0a:c3:2a:c9:fc:2a:62:8f:2d:43:a7:48:
a7:79:0e:25:da:1d:a9:84:7f:a0:24:75:ea:90:54:ca:be:74:
4b:4d:98:e4:c5:92:b4:96:70:8b:3d:4e:d5:4e:93:97:5d:06:
c6:0e:b5:9d:56:ef:11:d7:9a:7f:09:dd:f3:84:f1:b1:9a:a8:
d3:e1:6f:be:bc:fd:3a:c7:cc:bd:c3:87:88:92:68:72:d9:9d:
f7:e5:7a:34:52:5f:49:e4:ad:4d:73:7e:e7:be:9e:fe:c9:3b:
c8:5f:13:4e:66:a7:68:b1:cc:98:44:c6:14:41:9c:d1:c0:08:
36:13:b2:35:fe:5f:48:50:8d:7d:52:73:83:56:27:bb:4e:f2:
16:d0:37:e6:ef:7b:38:84:21:5c:d9:ec:58:fe:1e:1c:61:49:
76:e9:5a:6d:c3:60:82:bc:7d:b0:14:2e:34:25:7e:aa:70:36:
40:16:79:58:ba:b3:73:c8:1b:bf:07:39:1b:b3:65:f0:0a:9b:
2e:e0:b1:e6:11:05:31:87:79:c6:eb:4f:6c:2f:17:0d:4c:b8:
68:cd:91:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:39 2026 by rpki-client