
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
File: rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft (raw, json)
Hash identifier: c/aXEBlmHBeNpTlxmWdikmgIIEs8+AzZi8ALXiDLI98=
Subject key identifier: 43:00:68:49:04:4E:CD:1A:02:EE:C8:7C:4C:89:00:99:60:D8:F1:E2
Authority key identifier: AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8
Certificate issuer: /CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
Certificate serial: 02B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
Manifest number: 02AC
Signing time: Thu 19 Feb 2026 00:39:05 +0000
Manifest this update: Thu 19 Feb 2026 00:39:05 +0000
Manifest next update: Thu 26 Feb 2026 00:39:05 +0000
Files and hashes: 1: rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl (hash: g1j/WyLN1NHCrjf1jT/e+GYc5uqJd/wmXwQGrA0qcTE=)
2: C31A6BFA717D11EE90B95137C4F9AE02.roa (hash: 7cBmRSUB3GK5yJL7yaxAGg0XDgWGErxNw0g36JGOJzQ=)
3: 28BD1EFC3B4311EDAB5E6382C4F9AE02.roa (hash: uhIrsP1ipJFX3Ct1IhnIwZmCjEIkpTywt0iwOfj/NzQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl
rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696 (0x2b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A97D0, serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
Validity
Not Before: Feb 19 00:39:05 2026 GMT
Not After : Feb 26 00:39:05 2026 GMT
Subject: CN=69965ba9-5bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a9:76:c7:b5:17:96:1d:25:8e:38:7c:fe:23:
08:98:f4:ff:44:3a:09:77:f1:8b:22:08:27:2d:93:
48:90:15:33:15:c8:1d:44:d3:6a:af:62:e9:0a:aa:
7d:a8:42:1d:db:c8:a2:66:7d:6b:cb:9f:ec:5d:73:
d7:b0:69:36:3c:ef:7a:91:2c:e5:3f:77:98:7d:8d:
f5:8a:fe:f0:80:e2:b7:99:70:b2:c0:df:ff:db:bd:
a1:00:9a:50:8c:a4:1d:74:a2:24:dd:f4:a2:73:1e:
96:0e:b0:3e:c0:f4:e4:2a:a2:37:80:0a:22:0d:11:
52:27:c8:39:4f:fe:e0:9f:e0:0f:b3:63:c2:83:59:
b9:ce:1f:d5:62:59:71:59:36:21:e3:fb:4c:cd:21:
ea:d5:82:35:27:9f:38:a3:fb:6c:8c:5d:c5:14:f5:
96:44:60:29:ba:6e:1c:4d:b4:e9:08:ee:b2:3e:4e:
60:0b:97:e4:76:41:f7:01:e2:b6:a8:0f:6a:6d:25:
95:a1:37:85:7a:68:b0:18:6d:0f:c5:f3:69:76:e0:
83:3c:bc:e5:93:2f:7a:7a:84:16:33:b9:6a:ab:06:
0d:a1:90:e0:0e:25:b0:8a:87:b3:a9:7b:c9:0a:3c:
1a:90:5b:27:7d:bf:30:0e:85:80:dd:4a:2f:d2:f3:
7c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:00:68:49:04:4E:CD:1A:02:EE:C8:7C:4C:89:00:99:60:D8:F1:E2
X509v3 Authority Key Identifier:
keyid:AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:e8:27:74:54:f9:64:6d:d1:5e:38:6f:a9:42:5c:c2:82:08:
42:3a:6c:26:2f:69:17:5d:02:44:0d:f1:b8:b6:d3:b7:6b:3a:
a0:00:99:64:1e:a6:cf:4e:ee:fb:d5:fa:f3:8b:6e:b3:e7:5d:
d6:86:89:a2:57:3e:a5:c6:71:5b:7d:fe:25:52:f6:33:eb:7d:
b0:70:15:6a:86:8d:51:c4:af:d2:55:2f:2a:15:70:12:44:b7:
bc:f1:72:1a:f5:28:86:76:d7:b8:05:04:fd:0c:d8:f0:fa:11:
91:eb:9b:70:ca:ee:05:bf:4e:23:86:27:d1:86:ba:19:68:da:
8d:49:2b:11:02:9e:63:76:c2:b2:dc:65:81:ed:69:d7:4b:a7:
6f:c3:9f:02:a4:63:6a:6e:40:34:8f:5e:ae:ee:fd:f8:34:f4:
6f:de:cc:23:83:94:3d:a7:b4:62:3a:15:83:3c:be:24:f5:1c:
35:75:6d:38:c5:92:c7:7c:a2:22:ca:20:77:14:c0:5e:42:34:
72:e9:80:1d:93:ec:e2:b6:1e:fd:b1:b6:36:8a:98:8d:3a:ff:
c3:ad:73:47:81:c8:d9:93:15:f7:7f:9e:d7:95:1d:10:79:55:
8a:61:33:56:2a:45:cc:ae:53:26:94:d5:ac:71:90:72:22:a6:
97:01:d9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:16:26 2026 by rpki-client