
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
File: QIWuE0tjOKEnZXKD67wWwS8guGI.mft (raw, json)
Hash identifier: MNmMcAF9P1z40h4wqVPLJbZbJNJE0CA3RVNx4GIUODo=
Subject key identifier: CF:D9:8F:F5:28:A7:E1:77:B7:0D:E7:4F:3F:C2:47:FB:2B:51:B8:6D
Authority key identifier: 40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62
Certificate issuer: /CN=A91E80FB/serialNumber=4085AE134B6338A127657283EBBC16C12F20B862
Certificate serial: 0457
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
Manifest number: 044B
Signing time: Wed 18 Feb 2026 23:30:10 +0000
Manifest this update: Wed 18 Feb 2026 23:30:10 +0000
Manifest next update: Wed 25 Feb 2026 23:30:10 +0000
Files and hashes: 1: QIWuE0tjOKEnZXKD67wWwS8guGI.crl (hash: FAaY+Ol9g6GexcjvnYchVclTnWcpsKujz6CZtJ1wKjk=)
2: 9FBFD358C0F911EFA63F3E64C4F9AE02.roa (hash: 1vUm+HSPcjO44W30S3kDbWVlGgGflvMqGpX08Pck3S0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl
rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1111 (0x457)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E80FB, serialNumber=4085AE134B6338A127657283EBBC16C12F20B862
Validity
Not Before: Feb 18 23:30:10 2026 GMT
Not After : Feb 25 23:30:10 2026 GMT
Subject: CN=69964b82-978e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:f6:e8:5c:ee:31:b6:0e:ab:a2:c9:88:47:
03:25:f4:62:e0:f4:f4:5e:2a:6b:a6:dc:18:fd:11:
42:3a:b8:f8:3b:1d:08:86:ce:2b:76:b4:de:24:7c:
19:a8:fd:d3:9b:a9:ac:86:27:bf:4a:70:6d:de:c3:
75:c6:da:08:ab:81:6b:e9:58:f6:d0:fb:81:7d:ae:
ff:29:76:ce:8f:83:a3:dc:65:f5:62:19:28:a1:94:
77:a8:64:0f:29:08:4d:ef:d8:0b:9e:b5:a8:d9:3c:
ff:33:46:95:17:d8:00:e6:07:22:f8:54:14:8c:67:
81:e8:bf:31:5a:16:c6:cc:8c:bc:19:c7:fe:da:4f:
6b:4f:ac:bb:32:54:3a:b6:a9:fa:b8:04:a6:21:94:
0c:ab:f8:c7:0c:9b:16:28:01:73:cd:3d:92:fa:0f:
1e:e7:60:51:19:0d:20:6e:52:25:21:0e:ea:ad:8a:
41:aa:d2:1e:53:e5:e1:3f:c0:8b:b8:f0:b4:d1:ae:
12:7d:d5:26:68:0a:4d:5f:31:9e:46:78:8a:c4:15:
17:15:d5:a7:e5:81:2f:b4:3f:1c:6f:0f:d9:71:bb:
a0:0f:23:99:74:95:61:7d:ce:79:54:e9:88:1e:93:
df:df:f4:65:7f:bf:7c:9d:6f:5c:dd:a3:52:a1:16:
53:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D9:8F:F5:28:A7:E1:77:B7:0D:E7:4F:3F:C2:47:FB:2B:51:B8:6D
X509v3 Authority Key Identifier:
keyid:40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:87:4a:47:0c:3d:b9:3c:2c:3c:e7:2e:1d:6d:f6:b2:4f:73:
c4:43:04:b7:cc:13:71:62:28:24:34:35:c6:4a:64:32:99:45:
15:49:46:6c:43:56:d0:35:3e:22:de:73:4d:93:d9:57:df:3a:
a9:81:1f:13:a9:c2:21:19:85:b4:2e:ab:d6:ec:e8:a3:3a:af:
42:b3:c2:44:18:94:79:73:c2:ca:b8:85:00:35:77:6e:b1:b6:
65:27:03:1d:bf:d4:ac:d9:64:e2:02:ed:d4:38:a5:16:bd:b2:
4f:d8:c0:04:b1:07:17:8a:06:97:92:52:f1:62:1d:2c:91:f0:
d5:6a:e3:3d:6a:7d:4f:f7:94:02:25:c7:5e:a3:04:ed:ce:61:
a9:17:02:a5:0a:eb:18:dd:a9:31:70:43:75:41:6d:df:bd:82:
d1:21:51:24:7e:77:18:57:bd:c5:32:0b:de:ac:26:18:fc:97:
48:dd:13:0d:a9:b9:da:13:4c:02:cd:8b:b0:dd:5b:c6:91:2f:
e8:dd:f0:68:68:9f:76:b1:9e:9b:8a:ba:8f:d2:4e:87:c1:bf:
3c:f0:19:59:5c:3f:88:71:16:aa:8a:3d:45:10:4e:8b:bb:35:
c7:0b:c2:86:c8:4c:a8:36:5f:89:f4:4e:6e:6c:df:bf:44:e9:
07:d5:b1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:35 2026 by rpki-client