
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft
File: QxsKSDX89paz7NM1klqOE2EM0Tc.mft (raw, json)
Hash identifier: FTtRpvWFJE8DKsJEdIcor8+dhKujz8rpsci7h6sxUOI=
Subject key identifier: 97:77:34:3F:AA:81:F7:19:60:87:B6:3C:2F:67:2F:2D:61:FB:32:BB
Authority key identifier: 43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37
Certificate issuer: /CN=A91BE89F/serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137
Certificate serial: 0115
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft
Manifest number: 0112
Signing time: Thu 19 Feb 2026 04:20:01 +0000
Manifest this update: Thu 19 Feb 2026 04:20:00 +0000
Manifest next update: Thu 26 Feb 2026 04:20:00 +0000
Files and hashes: 1: QxsKSDX89paz7NM1klqOE2EM0Tc.crl (hash: 75EvJj0BukDptSYKf2oCgSEdgC7obbyB4U+Fo1m0s2Y=)
2: 49ADB44C6DCC11EF8BE2A566C4F9AE02.roa (hash: sFOO+QRhTKxNqDh79VQ8pC5x/JOWeqcP1k3DaqtML8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl
rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277 (0x115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE89F, serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137
Validity
Not Before: Feb 19 04:20:00 2026 GMT
Not After : Feb 26 04:20:00 2026 GMT
Subject: CN=69968f70-34de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:24:20:0d:55:44:03:37:05:ae:32:db:61:17:
11:3a:89:45:00:9a:dd:6d:41:d1:b3:52:cb:ac:f0:
48:21:49:b8:1b:1f:85:2c:1d:ec:3e:de:e8:e4:c3:
50:2f:9f:8b:94:2d:e2:8a:6d:9a:ee:62:5f:23:75:
6e:11:f6:31:24:51:37:c1:61:2c:1c:bb:5d:7e:25:
f3:36:79:14:3f:71:09:77:3c:05:e0:6b:f7:ab:76:
d3:57:79:3a:1f:8a:e5:52:91:d8:f9:3c:5d:e8:f4:
04:28:5c:60:7c:37:40:79:e7:05:c8:1c:45:61:22:
42:16:d9:bf:a3:38:92:07:68:69:90:ec:fc:73:da:
c2:bb:91:23:17:ec:99:83:ec:44:23:9c:de:51:1c:
44:e8:d7:97:f3:3f:88:c6:f1:52:39:36:de:a0:64:
d3:e1:b4:1c:5d:b4:a4:bd:b2:a7:48:66:8a:a9:ba:
d0:67:ca:34:43:f0:88:d1:e4:f2:46:df:73:94:ea:
30:a3:8a:90:2b:6c:3b:f4:18:37:67:be:a8:75:ec:
2c:b3:d6:2a:44:fe:4e:f3:1f:96:65:32:d9:53:eb:
ec:41:ad:69:25:96:85:c9:80:ad:6f:69:ea:02:b8:
b4:b2:00:63:93:ce:59:50:2b:52:ff:ad:1d:ef:55:
30:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:77:34:3F:AA:81:F7:19:60:87:B6:3C:2F:67:2F:2D:61:FB:32:BB
X509v3 Authority Key Identifier:
keyid:43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:36:f2:37:38:33:5d:b8:66:52:41:f7:a3:9c:cb:8c:82:9f:
d7:81:82:68:b0:0a:89:d6:64:e9:b9:c7:4a:95:a1:e9:f8:13:
f8:a7:e1:2d:27:e3:7f:b4:f0:e1:29:d6:54:a9:ad:8d:63:5f:
c4:e9:53:f1:3d:13:3f:c3:8d:91:1e:ee:3b:e1:f0:9f:8c:d3:
77:5f:a7:ab:d3:cc:0a:de:03:f6:81:14:6a:83:33:22:37:27:
1f:cc:52:d5:de:78:2a:53:18:17:d3:42:54:b3:5c:31:9b:c3:
a3:8c:1c:0e:13:24:ba:07:5e:d3:45:01:b0:b7:8f:8b:26:a0:
71:9f:60:5b:fb:05:d5:ee:76:25:7b:2a:e3:57:7f:5b:59:a3:
ea:51:e5:a8:ce:41:3a:4c:32:07:09:6e:2d:2d:54:c0:07:b3:
ae:29:6a:ab:1a:fe:38:2d:82:bf:ac:1e:aa:d0:2f:4c:3e:7c:
f1:b7:ab:bb:97:f8:29:ee:96:53:d4:a4:f6:62:34:ea:92:8f:
13:ed:21:b0:2d:18:99:8a:f3:9f:b6:25:81:9f:2e:19:5d:5c:
27:b0:16:ad:55:3f:9d:45:ba:60:74:a8:59:dc:c5:e0:fe:f4:
73:81:d1:a4:9b:74:36:33:ea:13:f9:ee:a7:ce:aa:c2:c5:ca:
93:00:a4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:54 2026 by rpki-client