
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft
File: hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft (raw, json)
Hash identifier: 4mh+ucHVwezGFLIOLbUF7Rb4OJUnMg07AJLabEMJAz0=
Subject key identifier: 63:4C:DB:72:C1:B5:3E:11:76:10:64:47:41:BC:53:D5:F2:8C:BF:50
Authority key identifier: 85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1
Certificate issuer: /CN=A91A5BCD/serialNumber=859D184F41C34898B7298C991075CCCF51679AF1
Certificate serial: 0A84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft
Manifest number: 0A75
Signing time: Wed 18 Feb 2026 19:10:03 +0000
Manifest this update: Wed 18 Feb 2026 19:10:03 +0000
Manifest next update: Wed 25 Feb 2026 19:10:03 +0000
Files and hashes: 1: hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl (hash: 1zfJ+zjC1UYBcqbjQvLCESKPbCWITJlqkbcUtJTXmR0=)
2: 5A3B7CECDDBC11EC8378E737C4F9AE02.roa (hash: lwmo/gkmzYuWybDmK+FVsOggd5dBx+ce2atYLFTNz2E=)
3: 92A9A67EB40211F09714C855C4F9AE02.roa (hash: B5buB00YWWO2A2xnD3M5vrisGIi+aFvWdlZltMnylng=)
4: 808D8B4AB40211F0AD5B7354C4F9AE02.roa (hash: S+5qUnemcpQGoSOv79wtTvxOi8xqGPx0E74Y3KFGkhU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl
rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2692 (0xa84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5BCD, serialNumber=859D184F41C34898B7298C991075CCCF51679AF1
Validity
Not Before: Feb 18 19:10:03 2026 GMT
Not After : Feb 25 19:10:03 2026 GMT
Subject: CN=69960e8b-9f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:54:ac:0d:ef:69:d1:1b:c6:8a:05:fa:47:c2:
38:23:ff:e8:7f:54:31:7c:1a:e8:7f:5f:e3:3a:9e:
33:42:64:a6:6b:a7:6b:19:89:be:34:89:76:4c:83:
17:c3:2a:30:54:b0:0f:be:5d:9c:8f:04:85:93:9a:
21:ec:19:eb:37:54:9d:ce:33:e7:92:d0:f4:d8:25:
1a:88:3a:e4:65:c4:07:50:fd:a5:56:f8:b3:56:25:
35:54:74:13:d6:de:b1:31:68:31:9e:18:0c:71:b1:
c3:e4:f4:f8:0d:96:83:24:2a:05:94:66:50:b7:92:
db:00:0b:bd:8d:16:58:58:12:ad:55:f8:14:3e:3f:
e7:be:af:c9:4b:77:72:03:94:4e:a3:8b:74:53:91:
e7:54:98:37:4c:c1:31:66:75:32:83:7c:1d:fd:e6:
81:eb:d5:f9:01:10:eb:61:6b:88:4d:ad:26:be:9a:
34:84:b5:61:0f:27:c6:37:66:83:38:f1:d1:68:3a:
25:95:4d:bb:15:b8:72:e0:14:cd:11:22:79:15:bd:
89:5f:19:5f:a9:d2:e0:e9:ab:c1:a2:c2:78:37:fd:
e4:f0:0c:e9:41:d7:a9:f3:df:46:e7:5d:a8:41:05:
79:a1:3d:a0:75:31:92:a0:45:5b:8f:d2:19:55:b3:
31:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4C:DB:72:C1:B5:3E:11:76:10:64:47:41:BC:53:D5:F2:8C:BF:50
X509v3 Authority Key Identifier:
keyid:85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:16:35:12:50:4e:be:73:1a:d0:66:9b:3a:78:1a:ba:36:f3:
a2:85:38:09:b6:3d:9f:87:fa:f6:02:67:c5:51:69:89:f1:05:
bb:55:50:bd:0c:69:db:a6:fd:d2:6a:3c:41:38:c1:63:62:e3:
5f:1b:ea:53:cc:f7:8e:59:e0:0e:53:fc:ca:f5:a4:13:18:89:
44:bb:da:2c:75:6c:9f:44:7a:81:71:90:2e:6f:9b:44:0e:cf:
ef:63:e8:1b:9e:7e:52:5f:c0:0b:e5:d2:ba:65:03:79:e3:44:
20:bd:03:4f:9a:88:a6:e5:94:ef:4d:f4:6e:e5:b4:63:53:e0:
2c:a5:ca:75:19:0c:eb:f6:1b:c1:69:f4:a3:29:5a:03:d7:a1:
81:40:b8:e5:32:1f:3b:af:52:fc:1f:9b:70:81:7c:9b:50:ca:
77:c1:d2:f5:3e:3a:3e:90:75:13:aa:0d:71:20:75:ea:53:a3:
db:6e:ba:a3:c6:2c:e5:72:57:fd:ad:da:aa:7e:b4:60:e7:aa:
52:72:83:51:ff:47:63:f8:78:3e:60:ed:73:14:53:87:72:3b:
ae:a6:ec:4c:5c:1d:5c:49:7d:3a:1b:01:7e:eb:46:05:ea:83:
86:32:58:10:3f:15:64:57:a1:49:48:68:26:da:60:87:bc:ff:
da:12:b7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:45 2026 by rpki-client