
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft
File: h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft (raw, json)
Hash identifier: 8r0e3hqM1QVcZkPpx35wDDznS7gqDEKt14RlPw4SqqU=
Subject key identifier: CE:8B:DD:C9:3F:69:A6:10:A5:2D:E4:E1:7F:CF:FA:54:66:79:A1:B7
Authority key identifier: 87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34
Certificate issuer: /CN=A91D226F/serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234
Certificate serial: 0221
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft
Manifest number: 0212
Signing time: Thu 19 Feb 2026 01:48:34 +0000
Manifest this update: Thu 19 Feb 2026 01:48:34 +0000
Manifest next update: Thu 26 Feb 2026 01:48:34 +0000
Files and hashes: 1: h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl (hash: FoiYWl0EewN5IZaNTfGaHvzgkDrTYZgoX3AbiJKyyxc=)
2: 3681B720B2D611EF9B481340C4F9AE02.roa (hash: Aaq+TCQ/KTzVoqOiGqBuyk59qeKatX9nZx11XR64nYI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl
rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D226F, serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234
Validity
Not Before: Feb 19 01:48:34 2026 GMT
Not After : Feb 26 01:48:34 2026 GMT
Subject: CN=69966bf2-d838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:58:af:a9:c8:dc:69:27:8a:9a:b5:1a:9f:
dc:9b:ac:62:ea:b4:1c:69:88:a0:3c:5b:1c:1d:37:
ef:34:05:1d:75:d4:31:16:2e:7d:ee:8e:12:23:59:
9b:f0:c9:b7:e1:e8:ac:a7:02:a8:56:13:47:ed:31:
a5:e6:5a:bb:74:0e:59:8a:45:32:d3:b0:e1:00:13:
01:7b:45:88:6a:a7:48:9c:be:9e:e8:4a:4d:e0:5d:
40:fe:b0:76:30:f8:d2:2b:c5:24:ab:a8:59:58:65:
47:c8:3b:67:c8:fa:5f:17:97:3b:16:57:e3:f3:82:
82:6d:27:0f:c7:27:fa:fc:ce:07:74:fe:1f:32:97:
e4:20:e3:7e:f7:68:91:aa:0f:6e:e6:06:38:6c:9a:
e8:7e:d0:30:48:ae:7f:85:60:0e:8a:49:4d:0a:e9:
50:f5:34:fa:5c:21:12:88:ad:ca:e0:34:96:b2:de:
cc:79:0f:3f:09:55:b6:4b:0b:a5:19:18:99:4f:8c:
eb:99:20:de:d2:92:55:7d:4f:d3:72:ba:4a:08:8e:
cf:22:9f:9a:f6:cd:81:24:db:96:38:d7:a9:88:a7:
97:5e:6f:07:f5:f9:b0:82:3f:98:67:c2:e1:2f:8b:
ae:6c:e6:99:ca:a1:2c:8b:77:ad:8a:b3:9b:8e:4d:
ff:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8B:DD:C9:3F:69:A6:10:A5:2D:E4:E1:7F:CF:FA:54:66:79:A1:B7
X509v3 Authority Key Identifier:
keyid:87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:91:57:a4:08:27:79:8b:86:b6:e1:92:62:04:97:83:53:ce:
f2:2d:df:55:73:32:5a:be:f0:9c:ab:54:4f:17:89:99:ea:3d:
74:fc:c5:5f:22:2b:7f:80:54:02:7d:14:26:a3:2f:9c:46:eb:
06:e9:aa:17:20:f0:a8:94:bd:98:80:d9:a4:61:0c:21:35:03:
41:73:ce:fd:b2:ac:f1:36:3e:14:1c:12:d4:68:06:d6:68:38:
11:2a:3a:20:09:a6:6b:e4:57:10:cc:34:61:96:ba:cd:1e:06:
f5:ce:52:cd:38:3f:6d:85:df:b8:dc:c9:79:ba:ae:48:9f:be:
1c:4a:77:45:9f:8f:f0:dc:0c:a3:d6:01:17:8b:22:67:f6:6e:
12:9a:a8:43:4a:45:f8:d5:36:22:18:09:4f:bf:1e:a3:07:5c:
1a:d2:fa:18:2b:f8:ec:2a:82:7f:9d:dd:25:fd:39:a3:64:7b:
24:35:19:96:ad:0e:2a:70:8a:4f:8a:a2:3b:b8:51:1f:1a:ea:
94:0e:60:97:6e:47:bb:97:e0:da:d8:7d:f9:4d:ba:b6:87:ea:
2d:8d:f4:0d:e9:d8:88:24:16:f5:4d:f5:4c:ca:55:39:bb:da:
4a:e7:4a:59:18:7c:94:6e:3e:71:d3:24:05:f8:a0:57:a7:a1:
32:5d:75:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:39:20 2026 by rpki-client