
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
File: h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft (raw, json)
Hash identifier: 8wr16pKqyvah+lRuKEcP4Ot3dG78m/IN4OuIDJ8dXkQ=
Subject key identifier: F2:D9:F5:99:7C:1D:8D:BB:9E:BA:BF:AB:85:B4:D4:4D:E7:22:D1:B8
Authority key identifier: 87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C
Certificate issuer: /CN=A91F65E4/serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C
Certificate serial: 159E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
Manifest number: 158D
Signing time: Wed 18 Feb 2026 16:32:38 +0000
Manifest this update: Wed 18 Feb 2026 16:32:37 +0000
Manifest next update: Wed 25 Feb 2026 16:32:37 +0000
Files and hashes: 1: h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl (hash: o+gjGwVzo/7sFYB6JCwmt250ckPa64i80m4THBWFMa4=)
2: 4A7E3036340811ED9D3D7620C4F9AE02.roa (hash: e0ssa3aYMf93SekbtHzPrUvWJb3pV0vdOrt0LlRsi20=)
3: F0326FAE4D0011E8A24EE324C4F9AE02.roa (hash: VDqja2wA6F2/7izy8asaq5NP96Ouz+ypKnE/JwJEwCk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl
rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:32:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5534 (0x159e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F65E4, serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C
Validity
Not Before: Feb 18 16:32:37 2026 GMT
Not After : Feb 25 16:32:37 2026 GMT
Subject: CN=6995e9a6-a2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:6c:4d:2d:6b:4f:c6:d2:0d:55:c8:1f:1f:
77:5c:01:57:96:5d:bd:b0:09:f9:1f:a7:44:6a:3f:
69:3c:f5:c7:63:58:57:1b:f9:fc:16:b9:14:da:d8:
12:9a:ef:65:79:5e:46:c2:75:8e:78:78:49:40:ab:
6b:d9:8f:f2:79:c3:08:07:e9:0e:c1:19:cd:2e:91:
20:65:28:52:7a:8b:e3:b5:f6:b2:5c:27:81:1f:95:
1c:2e:af:b9:56:0e:bc:b0:95:17:26:04:fc:84:7d:
d5:86:ac:59:8d:f9:53:df:29:d1:18:c6:06:1e:dd:
bf:d6:b9:5e:ed:c9:3c:33:62:5b:8d:bb:7c:41:56:
a8:1b:99:72:76:60:45:55:b6:9a:f0:a1:6e:1f:b5:
4f:f9:75:f0:4d:f0:54:85:46:a5:39:9d:63:95:c6:
c5:16:4e:e6:68:37:6a:13:91:69:09:21:0e:6d:4d:
a5:4e:75:c4:23:68:04:b1:08:b1:6e:43:8e:71:bc:
57:b3:01:ed:9a:de:db:f2:e4:45:cb:00:b0:12:5f:
b5:45:2b:df:d9:7a:4c:bb:97:87:c1:93:d3:f0:3f:
95:8d:ea:2d:f3:5c:f5:17:84:ad:f6:37:a7:46:8a:
37:47:e7:eb:f7:f5:e9:95:e6:8a:30:b7:e5:9f:b4:
de:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D9:F5:99:7C:1D:8D:BB:9E:BA:BF:AB:85:B4:D4:4D:E7:22:D1:B8
X509v3 Authority Key Identifier:
keyid:87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:98:2f:56:d3:ab:5b:54:11:c6:fc:96:01:c6:a0:be:94:8b:
70:4e:3a:0c:bd:fa:e2:83:a1:3b:3b:0e:35:c6:ed:72:b9:4d:
c2:4e:ee:96:f2:67:02:12:7f:9c:ee:fd:e6:21:40:63:fb:e2:
11:78:61:6c:b3:e6:fb:93:71:66:bd:40:9b:d1:f1:a5:28:f9:
4a:41:88:7f:2b:9c:25:b2:cd:08:e0:6d:fc:4b:35:50:99:18:
36:73:4f:0e:80:a6:b4:55:5d:29:40:8a:3e:d9:4c:10:4e:da:
f6:ab:74:a5:db:74:17:88:ef:12:da:0a:73:26:94:32:68:2f:
3b:0e:8c:72:b5:9f:d0:08:76:3e:7a:4b:bc:9a:ac:a4:34:87:
6f:87:34:a5:e4:ed:88:4a:0a:67:1f:a9:82:e8:2e:45:b5:d5:
6f:3b:d0:45:bb:bf:34:c5:e7:92:ce:6a:a8:a0:5f:69:87:0e:
bf:51:81:a6:b5:b9:00:bb:f7:80:f7:8a:12:78:76:07:9c:d6:
5a:12:28:e2:d4:f1:e8:d3:a3:a4:c8:f7:c7:fb:59:f3:c0:ea:
99:3c:48:b3:0d:70:b5:67:99:6e:76:e3:fc:39:68:2a:e7:e1:
2c:c3:c6:fe:a5:19:9d:fd:5d:24:02:49:87:77:5c:a8:41:26:
d9:e8:1f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:00 2026 by rpki-client