
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
File: PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft (raw, json)
Hash identifier: 5a/Mahyj68OQO5xjz4uJP+GfCuZRXaNbZVqYX39Dy3s=
Subject key identifier: 0D:39:C2:A0:60:93:7B:6F:76:63:EE:66:49:45:06:E0:19:B2:A1:DA
Authority key identifier: 3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6
Certificate issuer: /CN=A91E4668/serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6
Certificate serial: 0F09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
Manifest number: 0EFD
Signing time: Wed 18 Feb 2026 17:19:52 +0000
Manifest this update: Wed 18 Feb 2026 17:19:52 +0000
Manifest next update: Wed 25 Feb 2026 17:19:52 +0000
Files and hashes: 1: PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl (hash: zEEOT2k6ObvFEvCXXBd6ksQ2wnezaIhwhXq1+b9/61I=)
2: A5B7D874091F11EFA6EDE141C4F9AE02.roa (hash: vN4eTkgE+NqzrGCF55MmLQiQ1U4uCoJcvi6VZO9X/KY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl
rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3849 (0xf09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4668, serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6
Validity
Not Before: Feb 18 17:19:52 2026 GMT
Not After : Feb 25 17:19:52 2026 GMT
Subject: CN=6995f4b8-1fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:59:1a:85:7f:5d:d0:cf:8c:ca:93:ca:db:
79:b0:f9:6f:0d:3d:be:60:45:85:a8:20:99:fc:d7:
28:7d:40:cf:d7:70:b8:fb:02:27:ae:11:e9:90:98:
3a:57:54:95:90:93:29:68:ab:61:45:c2:1d:7a:ae:
f0:9c:9c:d7:79:de:07:6c:e6:5f:79:0a:bf:ae:45:
07:98:0a:2a:f4:1e:5d:19:bc:10:de:93:f0:4a:de:
5d:23:47:54:f5:bd:b4:29:32:79:38:6f:2f:df:91:
02:c4:9c:d0:29:d9:07:dd:17:46:29:ae:72:67:e8:
d4:cc:1b:2d:c0:50:ae:3f:1d:08:47:37:7d:f2:0c:
7b:90:3d:a0:65:ac:16:d8:8a:33:31:69:7b:44:02:
81:e9:2a:6b:c1:5c:d7:61:c9:f7:0f:04:32:b7:2d:
c6:2e:9a:9f:bd:75:a0:ba:60:d3:d0:7d:02:84:00:
ab:b9:8c:5a:18:a5:a6:3d:e4:f3:80:b4:da:03:9b:
f2:68:a6:8c:c6:26:4a:c7:b3:b3:3b:b0:1f:ee:c9:
b2:fb:d8:d6:d1:81:da:9c:7b:35:e9:d7:15:1b:09:
07:8d:b2:d0:5d:24:0f:48:48:14:b9:04:41:34:a4:
fa:27:7e:c0:15:30:23:16:09:2b:7b:6a:9e:9a:1b:
54:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:39:C2:A0:60:93:7B:6F:76:63:EE:66:49:45:06:E0:19:B2:A1:DA
X509v3 Authority Key Identifier:
keyid:3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8b:8b:ee:79:25:c8:3a:3a:8a:d8:ff:94:3e:2c:ec:43:db:
6c:7a:19:8d:79:87:7c:b5:58:e6:fb:38:71:52:c6:89:92:b9:
93:0f:87:84:e1:5d:ae:2a:c4:d4:28:04:29:9a:12:75:5b:68:
64:32:d7:1f:3a:62:ad:45:9f:68:de:fd:dc:32:6b:15:93:4e:
01:60:40:3b:f7:9e:16:53:e1:62:3f:51:55:d4:68:11:2c:35:
24:71:b8:1b:2f:e2:0c:4e:77:06:0d:bc:92:f1:27:be:21:c3:
6e:f4:40:5f:8d:ce:21:e9:0a:a9:6a:1e:5d:16:8f:be:33:f9:
57:95:b9:7d:fd:e8:55:49:c7:73:52:2f:f5:90:72:45:0f:98:
13:fa:c7:19:db:a1:56:3e:8c:44:16:c4:92:6d:aa:d7:4d:ab:
74:7a:47:41:c7:be:49:93:83:f7:7b:83:69:ef:53:13:55:88:
ec:91:d8:a5:c1:f1:8a:1d:e0:c1:d9:f3:31:c5:ba:a7:32:bb:
ca:e4:bf:fd:ab:3e:ba:f4:9e:86:74:09:6c:93:b2:5c:a8:f8:
30:7e:20:49:b6:88:e1:25:1b:eb:cb:6b:6c:7d:1c:77:54:f4:
7e:c5:8b:06:c0:3c:6f:10:b1:1d:85:7f:75:d1:ae:28:e6:81:
81:23:65:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:45:48 2026 by rpki-client