
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft
File: PQaSnY1eH2juI-yj-UjP96LklbM.mft (raw, json)
Hash identifier: CPPdnM9mucSRLBtEJIgM5DV8z5ReMfyW0cz5WO3vmrQ=
Subject key identifier: FC:1A:1F:F1:54:66:E0:1C:88:C4:A9:F0:AD:FB:7A:D5:D5:65:78:B4
Authority key identifier: 3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3
Certificate issuer: /CN=A91DDCD9/serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3
Certificate serial: 46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft
Manifest number: 0BA5
Signing time: Wed 18 Feb 2026 18:48:46 +0000
Manifest this update: Wed 18 Feb 2026 18:48:46 +0000
Manifest next update: Wed 25 Feb 2026 18:48:46 +0000
Files and hashes: 1: PQaSnY1eH2juI-yj-UjP96LklbM.crl (hash: f7FOOd8lPN3zYedQ4fxUlKKHcGeJcRuTb5/KqWDVj+c=)
2: 41D7A1D4AB0511F0AD64C814C4F9AE02.roa (hash: rmQtPBzLnmMnKWqEbpn/ZFyPKybx/x0dYiK1HD1kfdo=)
3: 4140D222AB0511F0AD64C814C4F9AE02.roa (hash: OQA1xcKI/hiAbUi76rdd20yEjY2R6araSSWLUXcKQG8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl
rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCD9, serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3
Validity
Not Before: Feb 18 18:48:46 2026 GMT
Not After : Feb 25 18:48:46 2026 GMT
Subject: CN=6996098e-1cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:b5:86:5b:34:56:7e:10:0e:fe:20:24:2e:
a9:46:6e:b1:21:1b:ac:3b:e2:ac:e2:d4:80:cb:9d:
fe:01:a3:a5:f4:d2:20:b4:dd:f9:31:c9:f2:7a:97:
f9:6f:a8:c0:74:3c:96:c5:65:1c:84:9c:ad:54:a3:
22:21:da:40:77:5a:5c:09:66:43:94:87:cb:56:33:
dd:da:a5:b1:4a:fc:5f:31:88:e6:c3:3b:f8:49:67:
00:d8:ee:ed:9a:c6:7f:1d:a5:fc:f6:c0:39:7d:49:
17:d7:ff:4e:e1:fa:8e:c9:c6:62:de:4f:f0:63:26:
ab:80:b9:ae:3f:de:68:65:06:08:c1:21:e2:88:77:
2c:bb:88:80:15:d2:6c:2d:b0:44:4b:eb:4a:2b:fd:
83:c1:67:99:f3:6c:14:a9:c1:e2:1e:29:2d:48:30:
81:e0:fc:d4:4f:20:5b:37:c8:ab:0b:4a:98:ca:57:
c2:75:fa:97:b7:99:86:45:51:69:de:9e:f6:27:73:
77:e0:a0:50:be:79:ee:a5:37:fe:2f:2c:09:77:37:
ae:ca:f7:7c:cc:e6:06:56:dd:90:3e:da:0c:90:52:
a9:2d:b4:b1:7e:c7:27:71:8e:df:5c:41:7d:91:70:
23:42:28:19:f7:39:3b:f1:b2:e2:f7:4e:bd:d0:59:
88:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1A:1F:F1:54:66:E0:1C:88:C4:A9:F0:AD:FB:7A:D5:D5:65:78:B4
X509v3 Authority Key Identifier:
keyid:3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:56:75:3b:20:d5:1b:13:7f:43:8f:d0:ff:51:e1:53:4a:eb:
01:b0:f5:1d:20:67:c3:af:10:64:a6:af:11:f1:50:b8:67:ba:
f7:3d:ca:98:91:90:72:6b:e0:a7:c4:37:12:95:f1:e9:5b:3c:
ec:c5:6c:9b:8a:a0:dd:5b:81:18:0e:67:f0:e1:8b:27:39:db:
7f:d0:13:94:10:27:ba:9a:f4:48:c6:8f:11:96:8e:a8:4c:33:
27:50:d5:23:4e:87:ea:db:0a:78:c6:19:1a:e5:c5:77:85:d5:
54:59:7b:c5:cd:c3:b9:11:0a:ce:86:09:c1:9f:7b:93:3c:63:
50:bd:aa:5b:86:38:33:17:58:5e:4f:d5:11:73:f2:14:52:45:
9b:e6:c2:55:a7:59:fb:3a:53:ff:a0:65:9a:55:3b:3e:80:45:
ca:7c:13:53:fd:c1:6f:ba:1b:26:c8:38:86:9e:75:26:2c:11:
3e:d4:37:c3:98:dd:d4:f3:f6:c7:7f:60:0d:b2:f5:fa:07:68:
92:57:02:e9:07:62:ad:9c:7b:96:40:4c:74:5b:bf:f1:9e:89:
86:dd:3c:65:db:3f:9d:f9:ba:4b:34:0a:7f:b5:ec:69:ee:a7:
02:5f:1d:ae:32:75:99:31:61:e1:ee:80:b7:5d:c7:61:e9:51:
15:ba:94:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:35:05 2026 by rpki-client