
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft
File: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft (raw, json)
Hash identifier: gvC6sfmFvHBZsXpxQ/pn39+uz5B5XLVGFD4Fa7WshNM=
Subject key identifier: DF:B8:BB:87:F1:F2:8C:E0:73:70:DB:9A:C4:39:1C:4B:E3:DB:92:41
Authority key identifier: F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD
Certificate issuer: /CN=A91B0F3F/serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD
Certificate serial: 0ABF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft
Manifest number: 0A9E
Signing time: Wed 18 Feb 2026 19:09:01 +0000
Manifest this update: Wed 18 Feb 2026 19:09:01 +0000
Manifest next update: Wed 25 Feb 2026 19:09:01 +0000
Files and hashes: 1: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl (hash: ChBgDvaorlTIkj0DLI/GQDN0sre2NCTtXy4EBfgTg9Q=)
2: FE84EF96F16211F08FA76A8B5F6F56BC.roa (hash: ZPxY3+2edzPvKz+TL3qfzFG7MVyIXSRM4erhnEG41xI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl
rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2751 (0xabf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0F3F, serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD
Validity
Not Before: Feb 18 19:09:01 2026 GMT
Not After : Feb 25 19:09:01 2026 GMT
Subject: CN=69960e4d-5a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:25:64:86:4e:42:37:e9:6c:28:3d:09:18:
97:cd:dd:1f:f5:f5:d6:07:16:9a:b1:3e:ed:8f:06:
17:3e:5d:fd:d2:4a:cd:5a:91:60:21:e5:b2:a3:71:
7b:e3:9e:f7:15:54:52:e5:b8:d1:60:36:15:c4:88:
d6:92:c2:d0:ff:29:1f:8a:00:8c:b2:a1:cd:a8:2d:
76:b0:88:21:00:c0:4b:7b:84:7c:ea:67:bf:21:7b:
8f:67:50:18:46:5e:88:51:47:a6:7f:01:12:e4:6d:
4e:0d:31:7b:00:f7:a7:97:f0:39:1c:97:44:43:27:
d1:3a:5e:c4:71:06:4f:95:a6:5d:b1:f9:18:ad:9d:
fd:c8:97:27:aa:a5:d9:a3:d2:77:fe:23:a8:a8:2c:
cc:ec:a2:f1:cf:74:c6:74:46:a6:a1:9e:52:ed:c9:
22:ff:c6:d6:fd:9d:1c:28:59:05:8b:93:da:02:73:
be:39:bf:d1:b8:9d:5e:4c:e6:dc:d9:2e:fc:62:1a:
3a:aa:f3:ec:15:ca:d3:b5:60:95:cc:88:3d:e4:53:
41:0a:b3:13:63:99:f8:a5:aa:2e:fa:0a:2c:73:e2:
31:e7:09:19:fb:31:b8:2a:ee:70:af:3a:d7:7f:11:
7c:30:7d:e5:b7:0a:c9:f7:60:25:30:12:e7:e3:12:
fb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B8:BB:87:F1:F2:8C:E0:73:70:DB:9A:C4:39:1C:4B:E3:DB:92:41
X509v3 Authority Key Identifier:
keyid:F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:ae:5a:65:16:1a:51:16:cb:3a:2d:f6:38:02:56:df:29:cd:
1f:8b:df:30:e1:bf:6a:5f:20:17:f9:b9:79:3e:2d:93:a7:df:
dc:fb:03:63:4e:33:e4:cb:d8:f1:50:14:53:fb:27:8c:23:e6:
95:0d:9d:4d:ae:ab:48:49:2c:ce:8f:fa:76:24:d2:5f:76:ec:
33:b8:e2:03:24:3c:31:60:3b:15:b2:13:5a:9f:a3:02:54:df:
3c:18:b8:92:11:57:41:eb:93:78:58:54:c0:85:85:ff:85:3c:
e3:0b:b8:92:24:84:10:1b:d5:af:51:8d:80:57:56:49:0f:9b:
c3:a0:af:98:6d:17:20:53:11:d0:11:5c:94:92:db:ed:08:90:
ad:7c:43:56:5e:c9:bf:f8:6f:3d:41:25:1e:c4:0c:9d:aa:62:
5f:bf:2c:d3:93:fc:aa:56:6b:65:81:cf:25:0c:0b:e9:41:68:
c7:03:46:0d:94:87:65:1d:35:c1:9e:41:c4:2a:bf:ef:83:bb:
65:2c:ac:35:eb:83:31:fd:57:d5:43:ac:ee:85:23:b0:2a:f4:
72:04:2c:c8:41:80:ec:14:86:1f:5a:a3:2e:01:1b:25:07:eb:
2c:0b:e6:90:40:9d:45:91:9a:e4:27:ee:7d:fd:ec:d7:3b:94:
11:5f:da:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:14:15 2026 by rpki-client