
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft
File: BFm798uEwX7tUbaM6tlBlX14X68.mft (raw, json)
Hash identifier: alw6fKPgXXQAuY11C7mIF8Z0A6EsMi7p0VdwERimlx4=
Subject key identifier: 2E:62:BA:64:B9:96:28:D9:A7:35:FC:93:33:F5:AD:AC:2F:DC:09:62
Authority key identifier: 04:59:BB:F7:CB:84:C1:7E:ED:51:B6:8C:EA:D9:41:95:7D:78:5F:AF
Certificate issuer: /CN=A91CFBA9/serialNumber=0459BBF7CB84C17EED51B68CEAD941957D785FAF
Certificate serial: 49
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft
Manifest number: 47
Signing time: Thu 19 Feb 2026 06:37:27 +0000
Manifest this update: Thu 19 Feb 2026 06:37:27 +0000
Manifest next update: Thu 26 Feb 2026 06:37:27 +0000
Files and hashes: 1: BFm798uEwX7tUbaM6tlBlX14X68.crl (hash: tRwlHszWYknWH1JY26G5+HK/SMf0I/5a/qWGBogMyIo=)
2: 88B9736AA77811F092FD731BC4F9AE02.roa (hash: u+cn9UutTPsBz+rSTM9fD/qL+39w/7zRbkPYbDsgfs4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.crl
rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFBA9, serialNumber=0459BBF7CB84C17EED51B68CEAD941957D785FAF
Validity
Not Before: Feb 19 06:37:27 2026 GMT
Not After : Feb 26 06:37:27 2026 GMT
Subject: CN=6996afa7-eb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e7:ba:47:df:82:4b:ca:dc:51:89:6a:81:c8:
aa:59:21:24:f9:eb:a7:d0:74:30:18:9a:4c:a8:a3:
51:6b:63:a8:cd:41:79:eb:43:e1:0a:c3:3e:b2:82:
43:6c:b0:1a:f5:90:82:86:eb:fc:7d:bc:8d:59:24:
7a:82:40:59:9d:1b:60:31:bd:56:4e:60:51:95:cf:
9d:01:4a:94:a4:b7:0b:7a:30:52:31:63:5f:8a:ce:
f2:6f:62:7f:86:da:ab:de:c2:b0:5c:ae:7d:8b:a9:
38:38:29:f5:1b:33:14:8a:b3:af:fc:bd:cb:7f:73:
c1:c6:9e:e9:21:1e:3f:f5:3c:0d:ab:88:cf:aa:63:
f9:ce:22:3d:f0:38:02:b6:40:42:1b:13:6f:91:94:
62:84:f2:fd:17:6d:54:fe:e4:12:d7:cc:0a:cf:3c:
4a:cc:ec:58:4a:7a:bd:4e:b0:12:8f:05:c7:4f:c9:
75:41:1e:ff:d3:55:b4:5e:92:49:2c:5d:bc:46:6e:
ba:a0:5b:b9:a3:f3:16:f6:42:bb:47:9a:c8:a1:32:
11:e7:d5:09:2d:2f:5d:06:6a:6a:8d:14:30:0d:82:
6d:fe:c9:89:0d:0f:f2:99:37:92:4e:c5:ff:a0:80:
7b:e8:8e:62:5c:f5:42:e6:bb:5b:58:6c:8e:7e:62:
b4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:62:BA:64:B9:96:28:D9:A7:35:FC:93:33:F5:AD:AC:2F:DC:09:62
X509v3 Authority Key Identifier:
keyid:04:59:BB:F7:CB:84:C1:7E:ED:51:B6:8C:EA:D9:41:95:7D:78:5F:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2c:88:71:e9:eb:9c:35:69:10:76:73:b8:c7:5f:69:e5:95:
e1:6d:75:8a:a8:17:6a:4d:90:be:ee:9d:01:3f:89:59:2b:b7:
9b:92:88:0c:ac:be:fb:32:00:bd:62:77:67:9c:09:8e:15:74:
a8:f5:c0:06:81:ee:6c:6d:1f:7d:f6:a9:99:11:78:dc:fe:10:
83:9b:08:b7:6c:0a:4c:09:c5:40:2b:b3:e8:54:bf:31:a1:46:
03:49:de:d2:ec:49:e1:90:b1:d4:61:7d:68:f0:c6:cb:91:e2:
1a:b9:e7:d1:88:ec:c4:d8:2d:9e:73:53:db:44:c0:92:3c:8c:
a3:08:ca:d0:97:c9:a1:c8:05:0b:8e:e4:ea:1d:30:7f:2f:ad:
c7:29:8c:1b:9f:19:15:f0:c1:5a:88:ec:b3:09:6d:a0:2d:55:
eb:89:59:ae:0b:f2:b2:30:4e:50:d9:42:47:d0:ec:54:c7:84:
1c:7d:30:9f:d0:d7:10:5b:30:38:58:6a:b7:dc:3a:9d:15:7b:
f8:b2:b3:af:e0:a5:b7:72:1c:f9:ee:6f:73:58:c1:60:a0:e0:
f3:28:85:f2:41:df:f7:8c:fe:cf:bb:df:80:dc:03:f5:71:c4:
cd:b8:49:24:aa:b8:ad:c8:62:a4:42:0a:86:b2:ce:1d:30:b6:
bb:8f:e9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 06:06:28 2026 by rpki-client