
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft
File: GHotNbr5BXwPC40mLS5dYiajI4I.mft (raw, json)
Hash identifier: PNb+4UK1vi+LZ6TvIPPYHQGLK9sCTCXSCTAo5ygFWJQ=
Subject key identifier: 05:C2:25:3E:4F:C8:22:5F:5A:89:8C:1C:C3:BC:BA:28:82:D8:2B:BB
Authority key identifier: 18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82
Certificate issuer: /CN=A91FD1C3/serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382
Certificate serial: 01D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft
Manifest number: 01CE
Signing time: Thu 19 Feb 2026 02:21:51 +0000
Manifest this update: Thu 19 Feb 2026 02:21:51 +0000
Manifest next update: Thu 26 Feb 2026 02:21:51 +0000
Files and hashes: 1: GHotNbr5BXwPC40mLS5dYiajI4I.crl (hash: u7WPYH42rgvLVaz0nusvKc0Nyv/bqWdo34I6PP2n+wg=)
2: 5773966456D011EE9C8F8C56C4F9AE02.roa (hash: 2nukhqdNU6Euo+43iQiPgLSUJQocXAJN3vnaW4r7bwY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl
rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:21:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD1C3, serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382
Validity
Not Before: Feb 19 02:21:51 2026 GMT
Not After : Feb 26 02:21:51 2026 GMT
Subject: CN=699673bf-bd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:e9:0e:9a:a7:8d:f3:10:94:bf:96:a5:f9:
6e:e4:8a:71:b3:5e:4d:49:71:1a:49:90:dd:46:bc:
42:ae:b6:71:a0:0c:ec:39:a1:7e:aa:4e:cb:3f:93:
e0:99:13:ed:b1:f4:6c:a7:c6:be:06:e8:25:f0:10:
b6:5c:98:fc:fd:ca:92:88:2b:db:4b:b4:a9:5b:cc:
bf:e2:46:1e:95:98:7e:01:0c:f6:66:fb:f6:cc:2a:
f2:c6:10:57:6c:b3:5a:ae:0a:88:bf:d6:a4:0f:fa:
b4:34:6c:44:c6:4a:be:23:60:12:d9:95:e3:9f:6f:
62:6d:16:e4:96:5f:a1:60:9c:c9:aa:15:91:99:1f:
73:a1:d8:c1:e6:d2:52:9b:bd:17:89:a7:9e:46:26:
78:4c:82:90:1c:db:62:03:c2:bc:2d:77:99:1a:53:
22:05:c0:be:6d:fa:ca:ee:90:2a:bd:99:fb:37:54:
6e:33:53:44:50:67:78:d8:02:6a:a6:be:bd:65:7c:
99:13:2b:e3:53:da:c3:aa:a4:ca:eb:4e:0e:40:36:
38:f4:e4:4e:0b:35:a8:b7:34:d3:18:53:65:43:44:
ba:3f:3c:62:5c:d2:e9:ff:6a:35:0f:12:27:29:20:
26:b9:32:ea:19:fe:e7:1f:20:fd:f9:53:f4:ea:ec:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C2:25:3E:4F:C8:22:5F:5A:89:8C:1C:C3:BC:BA:28:82:D8:2B:BB
X509v3 Authority Key Identifier:
keyid:18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:8b:3e:1e:52:7d:ab:8f:b4:67:e9:d7:f6:4b:b0:48:3f:f8:
be:46:b4:a3:0c:92:ce:a6:c7:97:7e:80:7c:a6:fc:6c:a7:80:
41:46:3c:af:60:aa:3c:a0:25:26:0f:d8:08:1d:12:77:38:3b:
b7:23:e6:8c:15:90:86:16:ab:51:fa:10:8f:23:7c:b6:3b:d3:
e1:72:f0:2e:01:01:db:9e:91:5a:96:c9:28:d4:ad:65:14:70:
7a:14:9b:bd:d9:c4:1a:d1:46:79:11:7e:a2:35:63:d3:6f:f7:
db:42:5d:7e:82:57:6c:4e:b1:91:5b:77:cb:dc:ad:2b:d7:d6:
57:1c:05:39:cc:8f:1e:29:15:fb:71:35:10:c3:b5:5f:97:f0:
3c:47:13:65:64:d4:2e:2e:14:f9:21:71:e6:6c:b4:a7:3b:1b:
f5:37:39:94:b0:b9:b9:97:89:26:90:4d:c3:25:ab:3f:07:fe:
4d:b4:e1:e3:98:c5:e9:6e:c9:0d:39:66:32:18:95:37:9a:c3:
aa:c9:66:b8:69:fb:96:68:d3:11:bb:5c:d3:a4:6e:ba:45:25:
ef:53:77:4b:50:a9:3f:03:ee:5a:57:95:5f:c7:02:53:1b:90:
ab:9e:92:07:7e:ed:81:59:be:f8:1f:ba:49:0d:6b:0b:c7:78:
6f:39:fb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:38:58 2026 by rpki-client