
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
File: BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft (raw, json)
Hash identifier: 2+DvsQaamyhqzMZTaR/YgFs9tBnsmtdQA0pVlDScGSQ=
Subject key identifier: 61:10:7E:B1:B9:75:7F:F3:7C:EF:09:EE:EB:C8:43:EC:25:78:7F:4D
Authority key identifier: 06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C
Certificate issuer: /CN=A91E0CE8/serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
Certificate serial: 171D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
Manifest number: 1703
Signing time: Wed 18 Feb 2026 16:25:30 +0000
Manifest this update: Wed 18 Feb 2026 16:25:30 +0000
Manifest next update: Wed 25 Feb 2026 16:25:30 +0000
Files and hashes: 1: BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl (hash: ONa1W0tY02Sa65VFcx3e5bXyePZwGvT+wLDMt8Qkif4=)
2: 091435C84FA911EFB86F4D40C4F9AE02.roa (hash: UDYOsBhZuGxPbiC3JStIpRl29abp1z9bfR4dnN93V5Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl
rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:25:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5917 (0x171d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0CE8, serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
Validity
Not Before: Feb 18 16:25:30 2026 GMT
Not After : Feb 25 16:25:30 2026 GMT
Subject: CN=6995e7fa-f8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:22:f4:16:e0:b6:0a:da:51:eb:d5:a2:a8:
0c:83:e4:72:7f:4f:50:e6:85:ae:48:1f:60:62:5c:
77:9b:a9:ee:69:f7:76:b7:2e:ff:d0:98:35:1b:e4:
b7:88:4d:4c:13:3e:0e:9f:02:95:02:d9:f2:e5:55:
b0:c5:86:e3:bf:63:04:2a:c8:a2:0d:84:a9:62:b1:
28:6d:b8:a9:bc:8b:59:32:b5:1e:bf:5a:ac:c0:46:
b8:2a:45:86:9c:a2:db:c0:ff:cb:a8:b6:88:71:e1:
ef:f1:e3:fe:2a:bb:7d:cb:e9:36:10:4e:c1:41:89:
b3:3a:19:8e:af:da:b8:f1:ec:01:ab:b3:59:87:f6:
2b:d2:64:14:43:d7:bd:60:f8:ad:cc:05:cf:79:ab:
09:94:ab:68:fe:b4:09:a8:ac:0c:0f:ec:95:fc:cd:
af:4e:8d:45:01:e9:67:9b:ea:2e:01:ce:16:aa:bb:
8d:8c:7c:ac:af:e0:87:6a:e0:39:86:d8:b0:02:3b:
e7:aa:24:81:01:c6:4e:5f:ad:79:86:26:3e:9c:d4:
e5:2e:c7:1e:18:ef:72:14:35:34:27:a6:0d:47:c2:
42:52:fa:ec:21:b3:a8:ec:39:7a:a5:f0:03:d7:5c:
d9:54:e8:5e:a6:90:c9:db:11:8d:32:bd:a7:d5:72:
cb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:10:7E:B1:B9:75:7F:F3:7C:EF:09:EE:EB:C8:43:EC:25:78:7F:4D
X509v3 Authority Key Identifier:
keyid:06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:1f:ba:b9:4c:3e:83:41:2f:a7:5b:b2:10:05:33:b9:98:c5:
c0:f5:24:c0:de:93:87:54:f3:b9:ff:07:c3:4d:58:37:6d:63:
8e:6d:99:50:f9:96:fc:2d:03:23:f1:b7:81:5d:1b:60:54:de:
63:d1:74:6c:4c:25:0c:95:2e:cf:67:8c:6b:bf:b3:d1:da:ae:
88:b6:3f:aa:7a:19:6e:b1:da:4f:ce:20:b9:50:5d:03:ce:c1:
e5:bc:4a:57:4a:79:85:6f:40:51:fa:d2:11:98:da:7e:cc:4b:
d9:48:a7:df:c2:ea:c8:0c:9a:02:5d:29:ca:d3:a7:23:0a:7e:
0e:f0:73:f6:e2:94:32:f9:fd:26:14:56:22:93:b3:f7:1f:8a:
93:08:84:de:62:b6:4f:4d:4b:2b:5b:69:7e:83:64:dd:db:df:
94:49:7b:e3:cb:24:38:47:5f:7a:3f:80:ff:7a:ea:c1:8a:5e:
ad:73:0d:b5:f1:d8:80:a5:a2:b8:67:a9:82:5d:15:e8:80:2f:
87:db:8c:9a:3e:3a:d4:c1:5c:79:d0:97:83:c4:6b:c9:a9:5c:
45:c6:17:9a:23:a1:f1:67:f8:3a:5f:53:7e:16:4f:09:03:ec:
de:91:1d:79:62:74:d3:93:f9:20:87:57:47:c6:f6:ae:fd:d5:
c0:91:7c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:43:08 2026 by rpki-client