
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
File: qkjQtX4IXNlA26F5HapYc8wZx_4.mft (raw, json)
Hash identifier: wK9JpMGpxAGMG2O87GOyKaj5W4r9o19pM4k/kLJx8JA=
Subject key identifier: B1:EA:7A:30:93:BB:56:37:6B:4B:1F:79:55:75:0D:E7:F7:07:71:14
Authority key identifier: AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE
Certificate issuer: /CN=A91EA582/serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE
Certificate serial: 0419
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
Manifest number: 0413
Signing time: Wed 18 Feb 2026 23:39:38 +0000
Manifest this update: Wed 18 Feb 2026 23:39:38 +0000
Manifest next update: Wed 25 Feb 2026 23:39:38 +0000
Files and hashes: 1: qkjQtX4IXNlA26F5HapYc8wZx_4.crl (hash: AtwoAadnG2fTBAHSko8YXUKXEqaD7IOIWUNpFY2VJFE=)
2: 9924B750A1AF11EC9A73D814C4F9AE02.roa (hash: H07H0KC74DRAPdC4SUe3j+pKIkb6uyeJtaN+ueDEin0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl
rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:39:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1049 (0x419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA582, serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE
Validity
Not Before: Feb 18 23:39:38 2026 GMT
Not After : Feb 25 23:39:38 2026 GMT
Subject: CN=69964dba-2aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ac:45:21:8c:41:7d:09:05:df:49:7e:b1:5f:
f6:f2:cc:62:48:1d:1f:c5:b9:ce:96:cd:23:42:a7:
6b:72:1a:dc:e7:a9:2c:80:56:8e:cd:1e:63:96:3c:
9d:7e:3f:24:4e:75:72:71:8b:0f:6e:9e:ee:7e:b2:
34:14:92:e8:4c:c3:77:ae:7d:83:b5:5e:1e:37:8a:
2e:ad:98:09:9e:b9:9f:8e:7e:93:03:aa:93:d7:c1:
27:43:7e:b6:01:2f:12:77:99:0b:7e:0e:10:4b:e1:
f0:ae:3b:d5:d7:94:df:14:f4:44:20:42:8e:93:97:
d6:47:7f:ab:2f:7a:01:d1:f6:f7:6d:13:c2:e5:72:
6e:8a:68:d5:4d:d2:5e:7e:28:9d:ac:37:ee:83:a2:
30:ad:e5:a0:b9:14:23:fa:0e:9a:8b:67:47:5d:46:
bd:e4:8d:fc:73:d9:4d:8e:0e:a5:1f:de:de:8c:82:
93:6f:db:81:9e:dd:3f:3a:b3:65:5c:c7:32:dc:75:
d6:0f:a2:ce:a8:b5:1c:3c:fc:58:5c:6f:dd:a6:0f:
29:fa:3c:e9:9c:2d:7b:03:0d:84:41:72:6d:29:c8:
62:ef:27:00:04:7f:35:f8:92:32:bb:b9:a7:ae:5d:
2b:87:ea:28:23:e3:d9:79:da:71:d2:c2:9b:ed:16:
e7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EA:7A:30:93:BB:56:37:6B:4B:1F:79:55:75:0D:E7:F7:07:71:14
X509v3 Authority Key Identifier:
keyid:AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:95:b6:88:2c:e4:c0:16:9f:d4:72:0b:b8:d4:e5:26:06:d4:
9c:83:5b:d0:69:17:58:00:10:d7:ed:5f:cf:00:19:50:a4:22:
93:8d:e0:79:a4:d2:67:13:2a:c9:7e:63:6f:06:79:7d:9d:6f:
41:a6:df:de:22:1f:19:7c:ca:ee:87:68:51:7a:4d:33:e7:aa:
d3:dc:5b:54:a1:d4:49:25:24:0b:aa:72:4f:00:dc:5e:8a:4f:
6b:37:a5:86:b1:9b:a8:2e:09:19:30:ce:ec:74:a8:9b:7b:08:
fd:f0:b9:9f:5b:d2:2a:4a:2a:5a:58:b3:bc:7b:0d:af:16:9b:
7e:e0:b1:66:38:0d:c6:09:aa:a4:54:d8:54:9e:83:70:d6:2b:
7f:3e:f2:f2:9f:7e:bf:60:f2:c2:06:46:af:58:e8:77:95:f2:
fc:4f:8e:17:09:5d:7a:37:15:65:b8:e0:6b:c3:1c:17:ff:12:
7f:24:74:e0:5b:62:27:44:e6:4d:c4:ed:bb:cc:be:52:1a:d6:
fc:ef:25:86:fd:95:8b:72:67:ec:a7:76:93:35:53:ee:45:c0:
85:ee:43:fc:46:1f:35:49:90:93:a3:a9:07:41:83:14:fa:86:
e9:03:2c:26:c2:dc:60:27:fc:bf:11:74:76:ad:d9:d7:3b:74:
82:ff:bc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:37 2026 by rpki-client