
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft
File: QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft (raw, json)
Hash identifier: rn47FqcBKVqR4ZbStzbF1F37/MGwobmeunObJIDxTW8=
Subject key identifier: 35:78:84:2E:D7:EE:18:F0:F2:91:8E:15:2A:BC:4C:33:1E:C7:71:15
Authority key identifier: 42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1
Certificate issuer: /CN=A91FCEB1/serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1
Certificate serial: 2114
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft
Manifest number: 289F
Signing time: Wed 18 Feb 2026 15:46:53 +0000
Manifest this update: Wed 18 Feb 2026 15:46:52 +0000
Manifest next update: Wed 25 Feb 2026 15:46:52 +0000
Files and hashes: 1: QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl (hash: CMsY8BBVgnXMkA/e5zG+S9pUsNGfx1V+5C7shRUHGbw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl
rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:46:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8468 (0x2114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCEB1, serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1
Validity
Not Before: Feb 18 15:46:52 2026 GMT
Not After : Feb 25 15:46:52 2026 GMT
Subject: CN=6995deed-0c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:91:36:40:b4:fa:e7:1a:df:4a:dd:e0:6b:e5:
0a:58:c7:3f:6d:c6:bd:04:09:85:fc:e0:48:9d:62:
2e:f4:84:22:81:d3:46:42:86:3e:06:4b:9b:52:00:
ea:c1:ba:b3:9d:1c:ce:c0:47:3c:b2:05:cf:9a:90:
1a:25:68:11:25:8d:ba:72:8f:3a:84:a8:0d:b4:aa:
44:48:ec:49:5c:d9:90:4b:83:a0:3e:1e:4e:9c:8c:
1c:b5:0e:5e:a8:9d:30:42:8b:5e:ff:b9:28:17:92:
11:ee:7a:72:6a:32:4c:a3:9f:65:d2:95:f5:e0:0a:
c9:85:9f:1b:6e:8a:fd:97:a4:e7:12:78:17:72:91:
6c:c0:08:fc:41:de:e7:27:a8:2a:57:96:47:48:a3:
d3:0b:40:f4:72:c3:e3:f8:fe:a3:e9:48:75:0a:3f:
e9:21:5f:9c:cd:18:40:1a:ed:05:5e:af:58:e8:50:
bc:ba:20:f2:d1:4f:b6:94:a3:18:10:78:da:8f:49:
02:62:cd:0e:70:55:71:8e:7a:39:f0:09:68:19:ca:
cd:d2:ce:90:32:72:8c:07:c8:ae:69:66:7e:0b:b5:
b4:e1:d8:c1:48:b7:16:46:89:ad:f3:f6:12:c2:11:
db:d7:6e:ee:33:2e:80:c5:90:14:bf:79:3d:52:ef:
c3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:78:84:2E:D7:EE:18:F0:F2:91:8E:15:2A:BC:4C:33:1E:C7:71:15
X509v3 Authority Key Identifier:
keyid:42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:17:64:4c:e8:fa:73:33:14:a6:d2:b8:65:5e:59:9a:35:a7:
e6:c3:d5:05:e6:f8:1e:ee:79:f8:27:96:15:5e:82:5c:6c:34:
6a:d4:4d:95:6f:0e:f1:6e:32:42:ed:87:7a:cd:28:e7:cc:e2:
5f:8e:fd:b8:35:56:ed:5f:f3:10:dd:66:13:02:cc:59:61:7c:
b9:92:41:13:64:59:b7:e4:c4:50:dd:57:77:bc:26:61:a2:ee:
cc:76:78:c8:58:de:d7:4c:fb:f7:a9:19:56:9a:1a:21:80:9d:
13:41:b8:03:4f:52:04:1f:0d:35:08:b6:9c:9a:0d:35:45:dd:
73:12:45:f0:75:72:aa:d1:c5:07:3d:f6:c2:f4:6e:e9:21:2d:
97:5e:4c:ce:bc:b1:85:36:05:b4:63:5a:c1:9a:9e:6d:23:ee:
32:d0:38:a0:77:ea:12:e3:73:be:9f:7d:76:cd:40:a0:f2:3e:
35:5a:02:13:28:f0:e4:09:4d:53:95:25:ce:d2:41:86:63:ad:
39:a2:2c:ba:2e:2c:5a:04:5c:4a:1d:b3:44:3d:3c:ba:a7:5c:
e3:04:c8:9b:b3:cc:95:d6:b2:29:a3:02:23:21:ff:83:24:a6:
3c:1b:ad:00:3d:c9:42:7a:ab:71:28:83:0d:b4:87:b6:01:32:
43:0e:9a:85
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICIRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNFQjExMTAvBgNVBAUTKDQyNjdDRjVEMDMwMDRBOEZFRkRGMjEzOTVEMEZFODI0
NTQ4QjEzQzEwHhcNMjYwMjE4MTU0NjUyWhcNMjYwMjI1MTU0NjUyWjAYMRYwFAYD
VQQDDA02OTk1ZGVlZC0wYzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAppE2QLT65xrfSt3ga+UKWMc/bca9BAmF/OBInWIu9IQigdNGQoY+BkubUgDq
wbqznRzOwEc8sgXPmpAaJWgRJY26co86hKgNtKpESOxJXNmQS4OgPh5OnIwctQ5e
qJ0wQote/7koF5IR7npyajJMo59l0pX14ArJhZ8bbor9l6TnEngXcpFswAj8Qd7n
J6gqV5ZHSKPTC0D0csPj+P6j6Uh1Cj/pIV+czRhAGu0FXq9Y6FC8uiDy0U+2lKMY
EHjaj0kCYs0OcFVxjno58AloGcrN0s6QMnKMB8iuaWZ+C7W04djBSLcWRomt8/YS
whHb127uMy6AxZAUv3k9Uu/DxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDV4hC7X
7hjw8pGOFSq8TDMex3EVMB8GA1UdIwQYMBaAFEJnz10DAEqP798hOV0P6CRUixPB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4
QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNvX3YzeUU1WFFfb0pGU0xF
OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FtZlBYUU1BU29fdjN5RTVYUV9vSkZTTEU4RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNv
X3YzeUU1WFFfb0pGU0xFOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAGF2RM6PpzMxSm0rhlXlmaNafmw9UF5vge7nn4J5YVXoJcbDRq1E2V
bw7xbjJC7Yd6zSjnzOJfjv24NVbtX/MQ3WYTAsxZYXy5kkETZFm35MRQ3Vd3vCZh
ou7MdnjIWN7XTPv3qRlWmhohgJ0TQbgDT1IEHw01CLacmg01Rd1zEkXwdXKq0cUH
PfbC9G7pIS2XXkzOvLGFNgW0Y1rBmp5tI+4y0Digd+oS43O+n312zUCg8j41WgIT
KPDkCU1TlSXO0kGGY605oiy6LixaBFxKHbNEPTy6p1zjBMibs8yV1rIpowIjIf+D
JKY8G60APclCeqtxKIMNtIe2ATJDDpqF
-----END CERTIFICATE-----
Generated at Thu Feb 19 16:39:43 2026 by rpki-client