
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
File: BKfrBJqTf9nyuG4Vnd310sma1B4.mft (raw, json)
Hash identifier: nI1lJp1vwAZAWvGwJoteDT4uaTJ+kJGUO6EGpCyW5kM=
Subject key identifier: 04:FE:A6:D7:17:B9:CC:6F:42:E9:DE:F4:D7:44:80:07:6B:A7:98:00
Authority key identifier: 04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E
Certificate issuer: /CN=A91E87AB/serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E
Certificate serial: 0584
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
Manifest number: 057D
Signing time: Wed 18 Feb 2026 22:36:42 +0000
Manifest this update: Wed 18 Feb 2026 22:36:41 +0000
Manifest next update: Wed 25 Feb 2026 22:36:41 +0000
Files and hashes: 1: BKfrBJqTf9nyuG4Vnd310sma1B4.crl (hash: gKYZgx42fUm7ZhoW/6Dv9EwejIONzl3OBcYpz8NFGlc=)
2: 709F3B2E145C11EC9A902165C4F9AE02.roa (hash: M6yv5fOW6rdXU2ZAH2K4BETuh9vZsuidxSebVax3mOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl
rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 22:36:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1412 (0x584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E87AB, serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E
Validity
Not Before: Feb 18 22:36:41 2026 GMT
Not After : Feb 25 22:36:41 2026 GMT
Subject: CN=69963ef9-163d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d3:0a:63:9f:3e:5f:8a:d4:cc:ed:e4:17:23:
56:ef:29:fd:b8:14:eb:be:29:f5:73:de:d0:e9:23:
a2:3e:15:b1:00:98:bd:37:6e:95:2e:0c:fe:9e:0d:
d9:89:d5:95:f0:7d:0d:f9:38:5c:82:eb:be:86:d4:
db:43:15:28:ce:7c:71:5b:70:fd:5f:8b:ff:42:cc:
f2:25:22:ed:c6:eb:f9:f3:5c:f8:08:8a:eb:1a:07:
0a:17:f8:c8:2e:ff:98:57:8d:17:80:98:7f:3f:3b:
66:04:83:7d:e7:e0:0f:6f:04:f0:96:18:9d:27:d6:
89:f7:1e:85:f9:b2:2f:95:18:20:77:7e:ca:47:67:
4a:32:f1:ee:60:44:60:3f:06:68:64:ea:f9:b4:bf:
59:f6:7a:ab:d9:87:03:54:24:a9:27:5f:05:67:9a:
75:8e:b7:c1:00:2c:e9:15:5c:f0:d2:23:b9:41:52:
f5:01:48:19:4a:a5:07:4f:17:c9:fd:c8:8a:51:ac:
af:81:85:3f:cf:10:b3:4f:a2:63:20:2e:f7:05:35:
46:31:ab:35:2e:c2:42:8b:f8:d2:c6:ba:d2:a5:64:
e1:58:bc:58:a8:eb:7b:9f:d6:94:f9:e5:56:4f:7d:
a4:fd:45:68:67:78:fd:e7:64:f3:d6:d4:4d:90:f3:
df:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FE:A6:D7:17:B9:CC:6F:42:E9:DE:F4:D7:44:80:07:6B:A7:98:00
X509v3 Authority Key Identifier:
keyid:04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:b6:38:e6:0d:91:66:59:0f:72:af:dc:c2:47:25:da:16:3e:
07:80:47:67:02:68:a9:22:ce:07:f4:53:70:c5:da:4e:30:42:
a4:f9:02:12:bf:d6:46:1a:a1:80:21:1c:48:f3:85:b0:fc:78:
a9:54:4d:d5:b9:f1:f0:b9:f2:e6:ee:c0:19:52:8f:ec:7f:8f:
50:46:92:60:92:32:f6:a5:b2:c2:59:da:70:70:86:88:84:fb:
f1:29:1b:9c:0f:36:79:06:ea:38:5d:dc:68:1b:1a:0c:b4:2e:
d4:fa:ce:a5:85:fc:d0:f0:c0:52:0d:b7:47:33:37:76:b5:47:
e8:39:b6:76:f9:de:a6:ee:54:2f:cb:6a:b7:51:f2:16:57:aa:
92:b0:d0:05:d6:60:62:f9:51:76:c5:c9:ad:66:00:64:77:60:
61:0a:02:31:52:bd:05:75:33:e8:ec:61:06:44:67:ed:65:80:
1b:d4:1f:1c:48:5b:89:cc:b6:f1:e0:5f:c2:70:6f:a0:05:2a:
cd:46:c6:61:87:a3:7c:8b:c0:0f:52:e5:10:cd:6f:57:0a:f0:
d1:ba:64:5f:7a:3c:30:dc:0b:45:9c:a7:28:50:00:98:46:2f:
71:68:36:f3:b4:86:9f:ef:80:84:58:09:3a:0b:7b:dd:b9:af:
62:31:d9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:58 2026 by rpki-client