
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft
File: HretI1L3xupKYveEzl-7EW3ybsI.mft (raw, json)
Hash identifier: vev8d3D01YR23QbjdE4AbKlWFfFLqSgvoktcB0ZomGc=
Subject key identifier: 01:4D:60:BA:24:A6:ED:6B:6B:D6:0F:A9:70:C6:ED:C8:34:36:1C:91
Authority key identifier: 1E:B7:AD:23:52:F7:C6:EA:4A:62:F7:84:CE:5F:BB:11:6D:F2:6E:C2
Certificate issuer: /CN=A91EF24F/serialNumber=1EB7AD2352F7C6EA4A62F784CE5FBB116DF26EC2
Certificate serial: 0874
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft
Manifest number: 0859
Signing time: Wed 18 Feb 2026 20:21:55 +0000
Manifest this update: Wed 18 Feb 2026 20:21:55 +0000
Manifest next update: Wed 25 Feb 2026 20:21:55 +0000
Files and hashes: 1: HretI1L3xupKYveEzl-7EW3ybsI.crl (hash: zPqC+7cm1grvJBMybJGx6XJyzfj59wLwYLwDaa8ddCs=)
2: 84B96CA6904111EF8D11A381C4F9AE02.roa (hash: bp4jWdbgFBJj7qXPWgiCGUliXYnrbIsNlkes3iQSxxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.crl
rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2164 (0x874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF24F, serialNumber=1EB7AD2352F7C6EA4A62F784CE5FBB116DF26EC2
Validity
Not Before: Feb 18 20:21:55 2026 GMT
Not After : Feb 25 20:21:55 2026 GMT
Subject: CN=69961f63-71cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:df:47:1b:9b:a5:2c:3a:88:42:71:cf:a0:c8:
ba:92:fb:09:cb:4b:de:8c:17:10:86:82:11:dc:68:
1b:43:3e:ec:7d:27:e9:38:e4:25:aa:f2:90:72:3e:
42:c4:73:33:18:58:fa:e1:60:5f:14:aa:6d:d2:5b:
79:c3:11:06:c4:34:6b:03:81:a2:1d:8a:ba:38:d1:
07:0b:43:35:a7:8d:89:fe:8d:44:eb:3f:f3:16:9a:
8f:3e:1c:12:97:d7:a2:91:65:79:61:0b:77:35:ee:
8c:14:31:3d:e9:65:df:ba:8c:aa:46:d0:fa:15:ca:
3d:90:11:43:26:5e:7d:c2:43:a8:a0:7b:a5:51:3d:
90:3d:dc:0f:6c:6e:54:3a:6b:9b:18:be:f3:f7:c4:
55:10:5a:35:42:8c:03:8f:95:ea:14:e8:f9:c1:ab:
96:06:09:3c:79:d7:73:69:31:c5:53:30:75:d3:93:
c4:52:37:fd:ab:8b:30:9b:9b:c3:51:7a:c5:a6:73:
76:c6:c9:d1:72:bb:12:e1:c4:21:73:33:3e:de:56:
6f:1e:ce:8d:6c:62:b8:8e:6c:ed:0d:7b:41:27:0c:
d5:e5:f2:ec:a6:3a:24:a0:b8:aa:9c:8e:76:b6:85:
3a:c4:a0:00:fc:12:02:31:56:37:f3:ff:a4:72:84:
3c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4D:60:BA:24:A6:ED:6B:6B:D6:0F:A9:70:C6:ED:C8:34:36:1C:91
X509v3 Authority Key Identifier:
keyid:1E:B7:AD:23:52:F7:C6:EA:4A:62:F7:84:CE:5F:BB:11:6D:F2:6E:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e1:22:38:33:7f:36:a3:26:8e:58:54:2e:03:46:7a:20:7d:
88:a6:c9:a8:a4:15:8d:b4:76:03:a4:c1:f4:70:b5:ae:83:ba:
33:6d:dc:9f:04:d0:da:ce:0c:63:81:8a:e8:14:10:19:96:46:
b7:26:e8:8f:d9:9a:3d:7e:0c:99:5a:54:ec:68:71:9d:16:99:
84:a0:a1:14:ab:15:44:17:ef:cd:1e:25:95:0b:60:d9:90:2d:
7e:05:95:52:98:d0:82:4f:19:c6:fa:8f:63:28:1b:7f:45:a8:
bd:47:3e:02:12:1a:42:da:66:9e:a7:53:43:52:70:eb:78:fb:
df:64:17:19:e0:4b:de:f9:3f:45:8e:46:27:21:95:cc:cb:8d:
1d:93:15:ce:7a:45:cb:41:f2:c5:fa:a2:62:75:74:3c:38:3d:
5b:9f:87:a3:a2:2b:4f:97:cb:db:80:7d:42:43:07:37:5e:a3:
bf:11:38:ac:bb:95:9d:a6:e1:9f:86:bb:52:de:37:2d:8f:fb:
cd:63:1f:b0:7f:e6:bd:2d:e4:19:de:b2:ab:07:83:3c:e6:b7:
c3:4e:af:11:e7:9b:3d:ae:59:42:5a:9e:c1:cd:d1:0c:e9:32:
c9:6f:b2:ff:1c:d7:17:b6:2f:3e:5b:6b:e0:4f:24:bc:83:fe:
6d:c2:de:35
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYyNEYxMTAvBgNVBAUTKDFFQjdBRDIzNTJGN0M2RUE0QTYyRjc4NENFNUZCQjEx
NkRGMjZFQzIwHhcNMjYwMjE4MjAyMTU1WhcNMjYwMjI1MjAyMTU1WjAYMRYwFAYD
VQQDDA02OTk2MWY2My03MWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3d9HG5ulLDqIQnHPoMi6kvsJy0vejBcQhoIR3GgbQz7sfSfpOOQlqvKQcj5C
xHMzGFj64WBfFKpt0lt5wxEGxDRrA4GiHYq6ONEHC0M1p42J/o1E6z/zFpqPPhwS
l9eikWV5YQt3Ne6MFDE96WXfuoyqRtD6Fco9kBFDJl59wkOooHulUT2QPdwPbG5U
OmubGL7z98RVEFo1QowDj5XqFOj5wauWBgk8eddzaTHFUzB105PEUjf9q4swm5vD
UXrFpnN2xsnRcrsS4cQhczM+3lZvHs6NbGK4jmztDXtBJwzV5fLspjokoLiqnI52
toU6xKAA/BICMVY38/+kcoQ8SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFNYLok
pu1ra9YPqXDG7cg0NhyRMB8GA1UdIwQYMBaAFB63rSNS98bqSmL3hM5fuxFt8m7C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjI0Ri82NURERkFCNDAy
RkExMUVCQTNBMEEyMzFDNEY5QUUwMi9IcmV0STFMM3h1cEtZdmVFemwtN0VXM3li
c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hyZXRJMUwzeHVwS1l2ZUV6bC03RVczeWJzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjI0Ri82NURERkFCNDAyRkExMUVCQTNBMEEyMzFDNEY5QUUwMi9IcmV0STFMM3h1
cEtZdmVFemwtN0VXM3lic0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCM4SI4M382oyaOWFQuA0Z6IH2IpsmopBWNtHYDpMH0cLWug7ozbdyf
BNDazgxjgYroFBAZlka3JuiP2Zo9fgyZWlTsaHGdFpmEoKEUqxVEF+/NHiWVC2DZ
kC1+BZVSmNCCTxnG+o9jKBt/Rai9Rz4CEhpC2maep1NDUnDrePvfZBcZ4Eve+T9F
jkYnIZXMy40dkxXOekXLQfLF+qJidXQ8OD1bn4ejoitPl8vbgH1CQwc3XqO/ETis
u5WdpuGfhrtS3jctj/vNYx+wf+a9LeQZ3rKrB4M85rfDTq8R55s9rllCWp7BzdEM
6TLJb7L/HNcXti8+W2vgTyS8g/5twt41
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:28 2026 by rpki-client