
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
File: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft (raw, json)
Hash identifier: iD1MkmjJkmwNQbGL3GWGDlkLTOW2ZyKob9eq5PtOVZA=
Subject key identifier: A2:01:7F:B3:8A:3F:08:1D:00:AA:7C:BF:C1:D8:10:C5:BC:03:B1:96
Authority key identifier: 04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7
Certificate issuer: /CN=A91D425A/serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7
Certificate serial: 0B9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
Manifest number: 0B97
Signing time: Wed 18 Feb 2026 18:38:02 +0000
Manifest this update: Wed 18 Feb 2026 18:38:01 +0000
Manifest next update: Wed 25 Feb 2026 18:38:01 +0000
Files and hashes: 1: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl (hash: RmBG52kzL/hAPaJQpc/sGazhhiL27VJAo3Z5SJ5V77E=)
2: 494B4070419C11EAAE836772C4F9AE02.roa (hash: s/Qf3teWs9SS/DCi/xOfu/I4d6ZStbuevPSNgqcOBv0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl
rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2975 (0xb9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D425A, serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7
Validity
Not Before: Feb 18 18:38:01 2026 GMT
Not After : Feb 25 18:38:01 2026 GMT
Subject: CN=69960709-a1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fc:8a:0e:07:34:2b:53:66:d9:c8:2f:32:f1:
1f:4d:f2:35:25:d4:8f:82:83:df:e3:9d:a7:11:ab:
3b:37:9f:27:1d:04:f6:32:00:4b:1f:c9:c8:2f:ec:
77:3a:80:bd:7c:da:8b:85:f7:23:aa:d5:ca:98:29:
c7:79:4f:ca:4f:94:1f:b8:61:6d:7e:13:1a:7a:7f:
00:9d:02:1c:e4:bc:dc:fb:30:21:e5:ef:db:21:ff:
2a:b0:aa:f1:fc:9f:12:b8:af:77:81:14:3d:09:58:
44:af:64:42:3e:1b:96:f1:45:34:64:18:1d:89:27:
26:ef:e0:95:a9:21:2a:6f:ea:67:94:be:8d:5d:81:
94:ab:51:7b:70:a6:4d:1a:f1:f5:8f:49:29:40:bf:
be:76:3a:45:86:30:0c:c0:88:58:50:9e:7f:2e:7e:
11:e5:30:e2:96:05:3d:b5:68:c1:a2:39:06:c4:71:
5e:3b:b6:9b:97:91:83:f5:6a:55:64:f2:cc:3c:8a:
24:cd:d0:b2:cd:12:ec:d1:51:d9:05:c9:a3:88:57:
9f:22:de:5a:05:d9:14:44:26:6f:77:00:53:f1:e3:
16:40:c2:60:20:06:d4:d3:dc:59:fa:50:09:5f:84:
a4:f4:7d:a5:a0:f8:18:90:b4:15:71:5f:75:54:2d:
c1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:01:7F:B3:8A:3F:08:1D:00:AA:7C:BF:C1:D8:10:C5:BC:03:B1:96
X509v3 Authority Key Identifier:
keyid:04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:2b:ba:4b:e7:e3:f6:69:23:52:07:6f:29:d7:93:25:c6:45:
78:1d:04:67:ce:d1:51:32:6d:36:df:9c:e2:c2:0f:1e:b9:6f:
59:89:02:52:3a:c3:a1:8b:5f:f1:5b:e4:f9:05:78:68:6c:bd:
df:4e:36:09:26:21:b5:af:13:18:20:02:e5:d2:32:36:4e:c3:
e0:7b:8e:81:d1:b3:db:47:b8:0e:25:98:b1:56:a7:c1:8e:ae:
84:5f:a1:87:5e:17:4e:30:4b:f6:06:fd:c1:31:97:7d:81:d7:
93:c7:21:ef:ba:12:cb:93:8b:a4:11:5f:f6:c3:81:58:a5:0f:
16:ac:43:e8:3b:60:36:f3:ea:d8:ae:03:4a:d1:2b:c0:10:af:
da:48:31:d3:b0:5b:25:e6:b4:bf:f7:e3:60:f4:53:03:06:d7:
a0:d3:1d:2e:03:06:9d:50:91:bf:b0:45:ce:0f:f8:e8:88:41:
d0:2a:27:ed:02:6b:55:d9:f3:45:00:b1:82:30:3a:f2:e3:2c:
4a:01:47:c6:64:1d:bc:ec:08:f6:b3:70:e3:75:0d:d9:9c:6b:
fa:14:08:3a:23:cf:24:32:a1:22:25:64:6d:75:9c:b0:96:8e:
e8:ba:1c:1a:0b:3c:c9:48:92:ad:99:3c:ac:98:15:e9:8c:83:
da:e4:d9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:58 2026 by rpki-client