
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
File: qmLHn-GEOUEsWwLPS-tUqy674Yg.mft (raw, json)
Hash identifier: GbtER8SFxRnNhhQutD25VyntlBNVEw4HuNhJOyCTsGY=
Subject key identifier: 82:20:34:DE:13:22:A8:91:DF:2D:0B:B3:36:F7:81:55:9A:F4:A5:7E
Authority key identifier: AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88
Certificate issuer: /CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
Certificate serial: 0B0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
Manifest number: 0AF0
Signing time: Wed 18 Feb 2026 19:00:10 +0000
Manifest this update: Wed 18 Feb 2026 19:00:09 +0000
Manifest next update: Wed 25 Feb 2026 19:00:09 +0000
Files and hashes: 1: qmLHn-GEOUEsWwLPS-tUqy674Yg.crl (hash: 6+iWLluz4eJ8sweUho2sfd1y1J7K+28eR6Rsy4CXgaY=)
2: 3AFE6DA8F72911EDB956BA86C4F9AE02.roa (hash: NCtWjC1uM4+Sx0ntIvyY3s6R1AF8S0ZUO+CcBcvcH7w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl
rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2827 (0xb0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6BFA, serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
Validity
Not Before: Feb 18 19:00:09 2026 GMT
Not After : Feb 25 19:00:09 2026 GMT
Subject: CN=69960c39-4dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:06:3e:d7:8c:17:cf:70:d2:08:bc:74:a0:
e0:9d:21:4d:af:43:be:da:18:d8:fc:79:ab:3a:e8:
6a:b1:f7:7f:3f:91:aa:03:e5:00:e4:9d:cc:5f:3e:
80:d2:dc:ae:92:3a:f0:6b:5a:00:69:3d:81:a8:11:
39:f3:cc:f5:04:30:b0:d8:e7:02:74:81:7d:59:e9:
d4:73:03:be:01:e7:0d:2b:4e:3e:e4:e4:a5:c5:02:
95:1f:7f:7c:a6:44:b9:a6:52:0a:1d:7d:92:db:9e:
85:3e:fe:16:ee:af:0c:05:5e:aa:e2:12:81:31:11:
f9:46:eb:8b:8d:f6:79:83:d2:1e:92:b5:b8:9d:a4:
4c:6c:dc:96:78:98:e5:ae:29:fa:a0:7b:8d:19:01:
55:3c:2d:1f:26:2d:c7:9c:fa:eb:71:ca:89:d2:e7:
96:3a:b7:d1:29:b1:93:71:a1:2d:63:17:9b:dd:a6:
07:66:7f:fe:ed:39:dc:13:44:30:17:59:e5:b7:d5:
21:1d:45:8f:73:c1:1f:70:27:0a:5d:a9:90:76:81:
39:e6:21:30:26:8c:cd:f7:06:ab:4c:71:66:4d:8a:
f7:5b:fe:98:9d:db:cc:b4:f5:ce:5d:af:80:39:1b:
c0:db:fe:9f:5e:94:9f:2f:30:63:0c:45:45:e1:ea:
ff:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:20:34:DE:13:22:A8:91:DF:2D:0B:B3:36:F7:81:55:9A:F4:A5:7E
X509v3 Authority Key Identifier:
keyid:AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:94:99:f1:9f:a0:d0:5b:2d:39:00:f9:22:b7:e4:bb:ec:cb:
0e:ad:84:87:4e:66:92:56:31:4a:44:3a:71:31:5b:ff:fa:d9:
dc:3b:ea:d1:67:77:bd:1f:28:e2:3c:ed:ae:6c:8d:7f:73:34:
82:00:b9:88:e0:72:46:94:c9:7f:22:c0:aa:61:ce:5c:85:ad:
a8:f2:8e:08:6e:c2:91:3c:c2:fe:07:a0:bb:ff:26:67:ae:c7:
f7:89:13:8c:38:ae:ff:56:c4:73:23:37:b9:4f:e2:0e:45:6a:
ef:06:07:67:1e:b0:c3:0a:69:f4:e4:6b:68:b4:a6:f9:9b:e1:
1f:3e:86:9d:c0:50:46:c9:02:8f:e6:a1:4a:9f:de:67:55:a8:
e1:9d:47:9c:62:09:61:08:9b:d2:76:1a:ad:35:ae:56:f0:6c:
0c:26:44:f6:ee:4f:a5:03:9d:b4:10:4c:10:db:91:fa:6b:82:
46:b6:7e:ac:91:30:d1:a1:e6:8a:07:68:7f:40:72:00:55:4c:
cf:47:79:67:57:48:ea:ad:8e:33:50:82:90:19:63:17:53:7e:
8a:bf:a1:ef:19:f6:a0:da:9d:df:5f:d6:03:a3:5c:e8:bd:2c:
14:38:9f:70:da:36:c7:84:6a:25:39:8f:5e:15:9b:16:3b:2a:
1a:41:d5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:23 2026 by rpki-client