
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft
File: QOlPucJEwgzdpE57Dop6cZqXdA8.mft (raw, json)
Hash identifier: I+nTW6Cb4b6tcISeB/uYX635XAfVGIbEBSWwtflrjjw=
Subject key identifier: 08:F2:52:3A:A9:2C:E5:38:88:26:34:06:A4:DB:E6:7E:90:B9:2C:CF
Authority key identifier: 40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F
Certificate issuer: /CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F
Certificate serial: 01F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft
Manifest number: 01F7
Signing time: Thu 19 Feb 2026 01:53:08 +0000
Manifest this update: Thu 19 Feb 2026 01:53:08 +0000
Manifest next update: Thu 26 Feb 2026 01:53:08 +0000
Files and hashes: 1: QOlPucJEwgzdpE57Dop6cZqXdA8.crl (hash: ordfcVnBVKZJs9T/OMHpLvvIcqkIUqsbjxmu5y56kzU=)
2: 7A8706087CA011EF8491607DC4F9AE02.roa (hash: EAsHcyPYziRKahL54/4beVq18nLBLDrzExkB1EWt7iQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl
rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505 (0x1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA2AB, serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F
Validity
Not Before: Feb 19 01:53:08 2026 GMT
Not After : Feb 26 01:53:08 2026 GMT
Subject: CN=69966d04-f07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:75:6b:ad:4d:27:3d:5e:f2:9b:80:31:6b:42:
7a:e0:f1:b3:cc:f4:3e:9e:d1:b7:dd:f2:bd:c2:58:
ba:dc:29:0c:40:ec:cb:01:fe:10:e8:b8:55:41:a1:
de:c6:d4:28:9e:a6:7f:19:31:81:41:a3:2f:37:57:
f4:86:c2:fa:7b:0d:d1:92:f4:93:7d:ab:ad:db:c8:
2b:d4:40:d4:03:ca:0a:c1:4d:1b:3c:29:14:c5:04:
aa:56:45:21:31:7e:63:fa:bb:21:a2:69:d3:3c:21:
f6:6d:38:3e:e6:b6:82:41:3f:57:b8:5b:c1:dd:22:
f7:f8:13:77:11:80:a1:75:6b:db:f6:cb:f8:1f:a0:
1c:f4:c3:3e:09:6d:17:bd:c6:34:9b:31:97:cb:63:
9f:ae:7b:6e:7a:25:9a:09:e5:04:82:6d:6e:fa:86:
47:2a:41:55:71:0d:ed:16:0f:0c:19:85:ce:73:35:
35:fa:bb:ec:fc:a0:ef:e2:41:1e:4c:92:39:5a:4a:
b3:ae:28:da:52:76:f9:da:64:25:5b:67:62:8d:cf:
91:de:27:9f:cd:3b:47:82:74:45:e4:8f:95:2e:6c:
f2:b6:02:a5:45:49:f2:70:61:11:95:1c:6c:20:0b:
d6:74:87:3f:60:1d:59:51:ac:72:d3:5c:ce:0e:6b:
db:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F2:52:3A:A9:2C:E5:38:88:26:34:06:A4:DB:E6:7E:90:B9:2C:CF
X509v3 Authority Key Identifier:
keyid:40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:40:80:97:73:6c:93:a7:bd:ba:8d:69:99:89:a4:32:c3:d3:
e1:9d:66:02:f5:03:02:cb:29:4e:5a:6c:c1:e0:95:2a:9b:9f:
62:72:73:fb:73:c2:0b:9e:8f:1e:05:e8:93:40:21:1a:04:00:
77:90:ed:07:d3:13:26:44:0f:59:e0:29:3e:98:0c:34:39:12:
e3:40:e0:03:af:b9:ac:23:52:b5:69:d7:d4:4d:b6:16:31:64:
69:ed:51:af:42:3a:76:be:99:6b:45:f2:66:dd:3e:2e:db:ca:
c4:ff:a6:86:07:66:6b:13:72:93:00:33:42:16:9b:80:1d:88:
3e:99:90:e5:3e:b4:6a:28:8f:3a:1d:74:d5:cb:a7:6e:5a:8a:
c4:ee:46:6f:f7:c8:6e:ca:13:96:cc:59:f7:8c:db:13:97:de:
48:76:e3:f5:84:a9:54:9a:21:35:f6:60:bd:59:ee:29:60:95:
79:ca:8c:0e:b6:72:f8:81:e0:42:cf:01:fe:d7:d0:79:73:3e:
36:f0:2d:e6:c2:8e:12:8d:5f:25:cf:10:8a:15:9f:13:b6:b1:
0b:d1:a0:da:d1:f7:a3:a4:42:bb:9d:ec:45:53:87:fa:f5:e2:
62:9a:8d:33:7f:89:ce:8e:1a:c1:f0:23:3b:24:ad:40:d0:df:
e2:62:87:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:11:46 2026 by rpki-client