
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
File: QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft (raw, json)
Hash identifier: 6LBdjMxVghn11UMvxCO17VwguaIgc6DHbjkdSQ01iCQ=
Subject key identifier: 8F:4F:94:AE:AD:F1:D0:70:F8:F4:A6:E8:49:30:7C:B3:11:8D:4B:B4
Authority key identifier: 41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C
Certificate issuer: /CN=A91EC8C9/serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C
Certificate serial: 0438
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
Manifest number: 0433
Signing time: Wed 18 Feb 2026 23:31:48 +0000
Manifest this update: Wed 18 Feb 2026 23:31:48 +0000
Manifest next update: Wed 25 Feb 2026 23:31:48 +0000
Files and hashes: 1: QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl (hash: V1MYHoI54+qYlYGOKmzkaZFMf75enM5+PTTRavY41iU=)
2: FFDA736894CB11ECA827746DC4F9AE02.roa (hash: pj2LnVj5JMKgQoW/CIO4SmTNgNuQfByzQiOUhiNM/dY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl
rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1080 (0x438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC8C9, serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C
Validity
Not Before: Feb 18 23:31:48 2026 GMT
Not After : Feb 25 23:31:48 2026 GMT
Subject: CN=69964be4-f6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:8e:59:55:74:8f:a4:fe:cf:54:d6:a2:1d:
72:5a:45:79:c3:7a:a1:77:c7:7d:f1:c1:e2:9a:77:
48:a4:e8:98:25:ac:50:ac:3b:8f:c7:84:ce:9f:e2:
2a:32:58:f2:43:c8:40:24:f8:22:76:6e:50:47:a3:
c4:2f:2d:aa:1f:76:e1:a6:1e:91:60:3c:4e:08:43:
97:58:9a:2d:af:79:4f:e1:72:8d:ff:25:0b:5a:f0:
13:f9:ba:56:4d:0e:66:a1:f8:27:40:c7:69:45:f7:
92:a1:82:f1:4a:47:c5:bd:8d:5b:5a:65:5c:5b:4b:
2a:8a:75:4c:75:12:e9:b1:3a:17:0f:6a:b6:2c:ae:
88:ee:36:bd:ba:4f:4d:77:95:1d:6f:91:4a:f6:f7:
46:9d:10:00:6a:26:2d:f3:2d:1e:81:6e:4d:48:6b:
35:e2:ef:30:c9:c9:7f:89:88:13:e6:ae:dd:e3:a2:
07:38:48:af:b9:01:10:d9:95:78:39:16:ef:97:24:
dc:f7:dd:cd:97:eb:7c:93:66:c9:a0:a8:89:13:2b:
4e:8c:d5:ae:27:db:aa:a3:d0:ea:2b:a7:83:8e:51:
44:eb:93:41:97:86:77:73:f1:e2:a3:1e:fe:d9:f4:
72:53:e7:75:f5:e3:c9:02:37:0f:bc:9f:e7:4b:79:
d7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4F:94:AE:AD:F1:D0:70:F8:F4:A6:E8:49:30:7C:B3:11:8D:4B:B4
X509v3 Authority Key Identifier:
keyid:41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:fe:b6:aa:06:28:94:6e:33:b1:15:16:c6:8b:b5:45:6c:ba:
ad:7e:a8:be:d0:9d:f6:e6:6f:be:32:79:f1:a6:ff:ab:db:9f:
fd:d8:54:18:08:66:45:4d:21:8f:40:97:f2:da:18:dc:fc:47:
6b:9f:f8:2e:00:d8:70:a8:8b:b4:4c:e1:34:1f:3f:35:1b:e5:
6f:c9:3a:f2:61:d3:79:7a:7b:ba:81:6b:ec:4f:50:25:d9:b8:
ae:19:40:b4:c4:5e:47:9d:99:71:c8:e5:3d:a1:1c:fc:4f:2a:
3e:a6:00:2c:ac:2b:32:f7:9b:6b:0b:f9:9a:e1:88:1e:57:07:
fe:e3:97:55:40:60:db:22:14:cb:f5:c9:64:34:dd:8b:cc:78:
4d:86:59:39:c5:d8:f5:da:d0:ce:c7:0a:2e:c3:45:49:c5:80:
8c:ed:b4:6b:5d:a9:31:07:18:0a:68:f8:51:8e:f1:8d:4a:ee:
8a:77:53:1a:e9:a9:92:11:54:70:57:4c:4f:84:e1:48:96:55:
61:a2:ff:df:1f:b0:9c:fa:0a:b4:54:2f:fb:a3:0a:62:8e:9a:
fb:ac:0c:38:bf:2d:e3:59:7f:a3:d4:57:4b:70:74:e8:47:05:
84:ac:c9:14:37:8e:1b:ff:93:28:90:07:c9:9f:bf:6c:98:60:
40:1a:6e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:17:58 2026 by rpki-client