
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
File: BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft (raw, json)
Hash identifier: qzvgCK+MPfC+Kj1jq4WgOOrpN2A5pzu9NUVHbVLhxt8=
Subject key identifier: C5:3C:5B:4B:C2:84:24:8F:40:2A:4C:55:4B:CF:C0:4D:23:64:3B:A2
Authority key identifier: 05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC
Certificate issuer: /CN=A91AB8D7/serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC
Certificate serial: 024D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
Manifest number: 0248
Signing time: Thu 19 Feb 2026 01:15:23 +0000
Manifest this update: Thu 19 Feb 2026 01:15:22 +0000
Manifest next update: Thu 26 Feb 2026 01:15:22 +0000
Files and hashes: 1: BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl (hash: o5/8o6CExjTIYMdNFmXiajkq/9PXGGefN0dvY4J00YE=)
2: 1ED3BAF898A011ED9D31B05CC4F9AE02.roa (hash: GynF0Ay+F7v6ZNuRVcxpGuP9OQi3GMJtHrKy3/D7ZPM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl
rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 589 (0x24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB8D7, serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC
Validity
Not Before: Feb 19 01:15:22 2026 GMT
Not After : Feb 26 01:15:22 2026 GMT
Subject: CN=6996642b-4bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:46:9c:a4:1f:fe:b2:ca:8e:51:9b:69:d8:14:
0e:f5:9c:e3:27:35:c1:c1:bd:fa:fa:68:f2:d0:76:
99:8e:68:43:84:bd:fe:94:c2:4d:50:78:83:58:61:
87:d8:89:ba:09:a7:9f:3a:57:74:fc:5c:a0:bb:63:
b8:a7:cf:d4:40:98:ae:02:dc:50:d0:80:a8:76:4c:
f8:f4:70:28:57:6e:26:3c:ab:73:b1:04:f7:b6:f4:
a3:b0:8c:78:de:6c:eb:5f:a8:98:a2:a8:93:41:0a:
20:cd:e9:40:42:b1:95:99:08:86:88:46:81:4c:5d:
13:a1:3a:7a:3a:15:bc:19:fb:df:5d:48:7c:13:5f:
23:89:79:6c:ac:d9:a3:a6:ea:39:fe:a0:50:9a:f4:
68:b3:0d:84:96:60:88:c9:f0:f6:01:82:71:8b:a5:
de:de:43:8e:62:48:3b:7c:54:58:4e:ee:af:e2:d0:
10:fe:4f:32:7c:4a:9f:c3:a7:05:90:06:e7:61:43:
1d:83:4a:c6:b1:4f:e9:45:78:ed:5b:0f:50:55:c3:
d5:81:b8:77:7a:e1:c1:b7:19:fa:59:11:20:fc:cf:
88:30:bb:2e:bc:a4:76:55:84:e3:4f:11:79:ec:56:
69:c5:a1:44:d6:b4:61:43:ce:fa:6d:a5:0d:31:e4:
ea:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3C:5B:4B:C2:84:24:8F:40:2A:4C:55:4B:CF:C0:4D:23:64:3B:A2
X509v3 Authority Key Identifier:
keyid:05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:79:8f:5a:ab:2a:fd:c8:06:61:4b:cc:1d:f1:4c:df:6e:82:
db:45:c6:2a:39:82:8b:f5:c2:14:88:40:2b:e4:d0:9d:7b:66:
41:33:9f:54:31:b0:a4:21:90:78:59:f5:ee:cc:01:e8:bf:a5:
ea:4d:c9:01:a1:7e:2c:cc:6c:95:5e:7a:64:f8:b8:3f:7f:15:
5f:ff:ae:48:be:2e:fa:d4:02:aa:87:ea:ea:c4:46:b3:b3:8f:
b4:c1:c7:25:42:2f:7a:30:01:e4:ac:69:a9:42:c1:a2:8c:a8:
88:59:d4:b8:85:94:00:87:37:9c:57:aa:f2:17:f1:b7:cf:79:
34:9f:ac:75:89:1a:06:b8:b6:ce:7b:67:83:bd:7e:01:ec:3f:
c7:b2:00:14:3b:5f:66:0a:22:82:9c:68:2a:a8:b8:cf:52:55:
95:7a:45:3d:e9:28:c8:a5:89:e9:a2:85:4c:1e:61:78:f7:57:
c2:19:96:d6:69:aa:74:d9:6c:6d:9d:30:4d:69:3e:2c:e9:4f:
d2:db:5f:28:18:9d:19:d6:31:bf:1a:d4:28:f6:3d:66:86:fc:
77:7f:fa:2e:1b:95:00:19:1f:6c:96:2b:46:c0:ad:7f:b2:7e:
91:94:36:c1:49:09:a8:2c:e9:d6:73:28:94:aa:68:26:ef:aa:
24:58:f2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:50 2026 by rpki-client