
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft
File: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft (raw, json)
Hash identifier: lkdEidsNWoLkNFlyj2GcVIJ7Ksyp5azqdMU/nnvX6/Y=
Subject key identifier: 1C:E7:5B:1B:E3:63:80:1C:B2:E1:70:48:F5:62:3E:9D:E4:ED:AC:A1
Authority key identifier: 86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0
Certificate issuer: /CN=A91A1EE0/serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0
Certificate serial: 3572
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft
Manifest number: 3543
Signing time: Wed 18 Feb 2026 14:32:50 +0000
Manifest this update: Wed 18 Feb 2026 14:32:50 +0000
Manifest next update: Wed 25 Feb 2026 14:32:50 +0000
Files and hashes: 1: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl (hash: RKxC+aRExKdlZGgW6eLmUnKWY0dwaSohjxc/jC4nbho=)
2: 4EF85CFEEE4211E9B52B674DC4F9AE02.roa (hash: 9cBRSzqf+beBYSiFhP5CgytCZQdt5uKUFHqt/G05Dqw=)
3: 44E2CCAEBA9811EFBA471E62C4F9AE02.roa (hash: L9XUW5EKcX3N5kGAQjlCulKdYkLxOgguoKHEktNkp/4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl
rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 14:32:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13682 (0x3572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1EE0, serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0
Validity
Not Before: Feb 18 14:32:50 2026 GMT
Not After : Feb 25 14:32:50 2026 GMT
Subject: CN=6995cd92-0a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:06:15:b7:13:8b:e1:e0:94:55:b4:10:db:
ee:68:c8:0c:f6:08:17:6a:c5:60:de:56:65:f1:7d:
be:ab:6b:37:45:ba:14:af:30:d5:ff:1f:15:57:91:
37:63:ca:da:01:14:a3:33:16:c7:de:10:9a:f0:a0:
e7:0b:58:13:2d:85:38:6e:e4:42:4a:69:b5:eb:d9:
ba:02:d6:16:64:66:35:bf:19:fb:4f:78:a7:29:53:
4b:f2:20:ea:b4:0c:3f:a9:2c:af:fc:3a:06:36:d1:
d2:1f:6c:56:a3:df:0a:00:51:6f:e3:9e:e4:ba:38:
49:7a:e7:17:ff:54:ee:4a:27:d7:cc:13:c5:48:0e:
44:9a:e2:7e:fa:0a:35:1d:5c:3e:a2:b2:fe:d1:e9:
a4:87:d1:f0:56:f0:08:d3:5c:8e:ea:7c:6b:7e:5d:
3d:87:2e:32:b8:2a:38:75:dd:77:ab:b0:b1:b5:2d:
df:50:b8:e8:37:b8:d0:64:46:47:02:64:32:0e:a2:
15:17:80:b0:50:92:00:55:a7:d2:af:cb:50:ed:82:
1e:78:be:97:01:91:81:39:ec:78:dd:96:08:49:62:
50:ad:e4:ea:3f:a5:eb:b5:f9:2d:12:bd:3a:9c:ab:
22:ea:b1:91:a0:80:08:44:42:14:4b:49:d9:49:64:
56:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E7:5B:1B:E3:63:80:1C:B2:E1:70:48:F5:62:3E:9D:E4:ED:AC:A1
X509v3 Authority Key Identifier:
keyid:86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ed:0d:ba:cb:6e:a6:b7:3c:72:ff:f1:1e:fa:3a:f8:b2:0c:
cd:18:9d:e9:24:34:72:69:9d:4c:a8:b2:db:0c:ac:7f:69:3e:
cf:8a:af:a2:3e:eb:17:ca:31:2d:fd:c4:74:f1:e7:92:b8:12:
02:cd:74:88:c2:2c:aa:26:37:41:e6:a1:94:0d:b4:1c:32:63:
f7:c2:24:0b:5c:d0:fb:2b:7d:c5:49:6d:35:a4:6e:27:2c:69:
0e:e2:2d:df:25:cb:f7:c0:3e:75:32:4a:c8:ca:5a:c1:ee:ad:
f4:17:ba:34:97:70:7d:47:75:2c:47:5e:43:30:47:a4:27:3c:
75:60:09:2c:11:15:42:18:70:3d:ee:4e:c2:66:6f:d7:15:c8:
cf:49:ef:83:f6:12:90:46:9d:49:5d:30:c1:73:70:fa:44:50:
4b:e7:54:6c:b5:81:4a:30:be:59:73:13:92:4e:0c:01:49:41:
ee:4a:dc:9a:6a:f7:b6:fb:ed:a2:83:05:66:5d:99:59:cd:4f:
23:d4:05:53:71:41:be:65:da:9c:c6:58:bb:37:79:9a:ec:39:
b7:58:c3:47:02:20:a4:b8:7c:4f:12:6e:8b:d3:73:cd:15:98:
36:71:09:f7:dc:95:b9:fd:63:c8:2c:e2:21:87:f0:4d:6a:e4:
29:5f:76:9c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTFFRTAxMTAvBgNVBAUTKDg2MEMwOTA0Q0VEN0JCMEQxRDk3QjI5MkZEQjY2MkU4
QjlBOEFGRjAwHhcNMjYwMjE4MTQzMjUwWhcNMjYwMjI1MTQzMjUwWjAYMRYwFAYD
VQQDDA02OTk1Y2Q5Mi0wYTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsXkGFbcTi+HglFW0ENvuaMgM9ggXasVg3lZl8X2+q2s3RboUrzDV/x8VV5E3
Y8raARSjMxbH3hCa8KDnC1gTLYU4buRCSmm169m6AtYWZGY1vxn7T3inKVNL8iDq
tAw/qSyv/DoGNtHSH2xWo98KAFFv457kujhJeucX/1TuSifXzBPFSA5EmuJ++go1
HVw+orL+0emkh9HwVvAI01yO6nxrfl09hy4yuCo4dd13q7CxtS3fULjoN7jQZEZH
AmQyDqIVF4CwUJIAVafSr8tQ7YIeeL6XAZGBOex43ZYISWJQreTqP6XrtfktEr06
nKsi6rGRoIAIREIUS0nZSWRWmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBznWxvj
Y4AcsuFwSPViPp3k7ayhMB8GA1UdIwQYMBaAFIYMCQTO17sNHZeykv22Yui5qK/w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUVFMC9EMjM2MzQ0NjFE
OEExMUUyODIwRjA0RTUwOEIwMkNEMi9oZ3dKQk03WHV3MGRsN0tTX2JaaTZMbW9y
X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hnd0pCTTdYdXcwZGw3S1NfYlppNkxtb3JfQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MUVFMC9EMjM2MzQ0NjFEOEExMUUyODIwRjA0RTUwOEIwMkNEMi9oZ3dKQk03WHV3
MGRsN0tTX2JaaTZMbW9yX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAc7Q26y26mtzxy//Ee+jr4sgzNGJ3pJDRyaZ1MqLLbDKx/aT7Piq+i
PusXyjEt/cR08eeSuBICzXSIwiyqJjdB5qGUDbQcMmP3wiQLXND7K33FSW01pG4n
LGkO4i3fJcv3wD51MkrIylrB7q30F7o0l3B9R3UsR15DMEekJzx1YAksERVCGHA9
7k7CZm/XFcjPSe+D9hKQRp1JXTDBc3D6RFBL51RstYFKML5ZcxOSTgwBSUHuStya
ave2++2igwVmXZlZzU8j1AVTcUG+Zdqcxli7N3ma7Dm3WMNHAiCkuHxPEm6L03PN
FZg2cQn33JW5/WPILOIhh/BNauQpX3ac
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:23 2026 by rpki-client