
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
File: q-I6igEe0yhhVdpR9a14wbb8yT0.mft (raw, json)
Hash identifier: wEDapOizEUC1BfFNyP136hEkE5VvbWPZ728B9FbZDEA=
Subject key identifier: CC:1F:A6:0E:EA:5A:1B:60:19:BB:F3:DF:81:BB:08:DF:1D:EF:9A:9B
Authority key identifier: AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D
Certificate issuer: /CN=A91DAAAF/serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D
Certificate serial: 0206
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
Manifest number: 0203
Signing time: Thu 19 Feb 2026 01:46:58 +0000
Manifest this update: Thu 19 Feb 2026 01:46:57 +0000
Manifest next update: Thu 26 Feb 2026 01:46:57 +0000
Files and hashes: 1: q-I6igEe0yhhVdpR9a14wbb8yT0.crl (hash: e0150B2xLmNP5qzGFrPu6noYTY9HB5h0iiU7gFMQn78=)
2: 34EEA87C040511EEA466E336C4F9AE02.roa (hash: obDYb1FFvr0mB7iBHTgY83tEv9YylCIEzp5d/KneH78=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl
rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:46:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 518 (0x206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DAAAF, serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D
Validity
Not Before: Feb 19 01:46:57 2026 GMT
Not After : Feb 26 01:46:57 2026 GMT
Subject: CN=69966b92-7a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:3c:86:a5:ce:1a:f0:78:d2:b9:41:e7:f5:
1c:3c:88:cc:61:6a:9b:4d:c9:ce:9d:35:b6:02:02:
f3:20:d4:cb:ac:b4:c8:cc:75:12:d9:af:e5:7e:1a:
02:58:d7:1d:0b:16:46:0d:d4:1b:ad:bf:66:29:23:
17:a4:e3:05:4b:e3:04:0e:d8:7a:53:4d:13:15:90:
66:de:e7:f2:a0:ca:6e:bc:f9:f3:18:7d:67:53:6a:
d9:e4:4c:85:be:75:22:8a:d3:dc:0c:e2:01:0d:f1:
a4:da:99:47:fe:0b:db:2f:3d:99:a6:60:d7:f7:6a:
38:4d:a3:8c:18:51:bd:92:35:e0:d4:70:3e:61:cd:
54:46:6f:22:a1:5d:3a:0c:50:9d:c5:ad:2e:18:0f:
f4:8d:7a:bc:e9:1e:98:29:c4:51:05:3c:44:9b:9c:
8e:c5:b7:3f:ce:38:07:ae:ed:a9:10:a8:e7:6d:3e:
97:6e:85:99:06:55:3f:32:f0:31:fa:6e:ae:b2:b3:
fa:9b:e0:59:50:08:0a:f7:ac:56:69:ef:a0:77:2e:
2c:43:74:ac:e1:94:b7:f4:99:d8:f8:bf:81:d4:d6:
a2:6d:f9:f1:72:69:13:8b:dd:e3:a7:91:20:a2:51:
00:5b:08:51:ca:1c:32:55:41:e8:31:98:79:48:1d:
a5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1F:A6:0E:EA:5A:1B:60:19:BB:F3:DF:81:BB:08:DF:1D:EF:9A:9B
X509v3 Authority Key Identifier:
keyid:AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:5f:1d:5c:ef:a8:f8:38:5f:a5:78:f1:9a:7d:59:be:6f:23:
02:55:64:03:6c:6c:06:91:4e:9f:f5:e3:c9:58:a6:ea:6a:50:
c9:14:47:d2:92:99:df:96:1f:0f:cd:dc:c2:7d:1c:e5:e2:fc:
b1:da:a1:99:e9:b4:10:4d:21:fc:2c:16:9d:83:ed:8f:4b:4b:
96:36:f7:f3:b6:45:59:91:73:55:eb:f5:4e:dc:1b:4d:ce:a9:
6b:f6:98:a3:0d:d6:ad:b9:04:6e:53:34:e1:38:ca:d4:4c:a5:
d5:fd:cd:33:7d:61:0b:4a:28:c0:ac:af:cd:28:b5:87:f3:7d:
de:00:95:8d:ac:fd:fe:fe:08:b7:25:87:00:79:99:b9:76:b8:
7e:03:ec:2a:dd:9a:44:8d:e3:a9:94:68:d3:66:62:90:f7:05:
c7:2b:9e:6f:8a:02:29:87:e6:40:dd:92:08:d1:b1:01:a2:6d:
12:ae:ab:ae:ee:fa:81:35:95:01:a6:8f:0c:9f:43:09:14:c9:
09:16:1c:4d:9e:af:da:d2:be:95:2d:20:5d:be:c8:ff:9a:52:
cf:62:49:df:38:35:39:d0:ad:31:9e:8b:bb:b2:e1:2b:82:e0:
79:6b:a7:18:0e:7c:96:54:7b:90:c4:af:c7:64:1d:8c:80:4e:
9f:a9:5d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:11:38 2026 by rpki-client