
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
File: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft (raw, json)
Hash identifier: PI7T2YIquvExsB3zMdlJqWpgt28iVL1M+TmUDdhR11A=
Subject key identifier: C2:8E:D1:7D:BD:00:FB:15:BF:E8:21:FE:8D:09:C0:95:7F:D1:94:A5
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial: 715821CD58F5923B0F05586F1EFCA9B4C03E3F17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
Manifest number: 070A
Signing time: Thu 19 Feb 2026 13:20:16 +0000
Manifest this update: Thu 19 Feb 2026 13:15:16 +0000
Manifest next update: Fri 20 Feb 2026 14:59:16 +0000
Files and hashes: 1: 3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (hash: Wnz7iyh9clZuDDpLGVNNBZJ0JgoGPtAKZ8B2Ynr6Xgc=)
2: 323430333a376530303a3a2f33322d3438203d3e2037353436.roa (hash: /tu1GLPgmx3L59lA9DS67uY00dm6i5Wm3Y/TLJzZPPI=)
3: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (hash: TyUQXYW/Z9X7LSxau+0o+4cjIXJiQzcIYmIWKatiFMc=)
4: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl (hash: NeDZ1c13+pVENrCvinpDTQ0umLc60UxBXincQSe/1iI=)
5: 3230332e372e3139362e302f32332d3233203d3e2037353436.roa (hash: DF0B2w1ci15U2MWgi9NHF/RrZ7F8ylilgRl/5FkgJoA=)
6: 3230332e372e3139372e302f32342d3234203d3e20313334303930.roa (hash: yVZN8uUTOOhqgDafcuJzyObo6OYnTkFGrZV6T9wM9pM=)
7: 3132322e39392e3132302e302f32322d3234203d3e2037353436.roa (hash: Fe1UVCyCNYuLeK/2YClSqpX8AFGVDlpgAyiB6HZMqgE=)
8: 3230332e33302e36302e302f32342d3234203d3e2037353436.roa (hash: ciSHjom7uhsnTUry3euH0kEf+ood81S/2eHdQ8CkHns=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Feb 2026 14:59:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:58:21:cd:58:f5:92:3b:0f:05:58:6f:1e:fc:a9:b4:c0:3e:3f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Validity
Not Before: Feb 19 13:15:16 2026 GMT
Not After : Feb 20 14:59:16 2026 GMT
Subject: CN=C28ED17DBD00FB15BFE821FE8D09C0957FD194A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:d6:57:88:f6:23:7a:8d:b2:19:29:1d:cc:
37:6d:b8:e7:5a:a7:a0:c2:8f:50:fd:2d:35:16:ed:
ce:65:44:79:d5:50:1c:d9:23:d3:e3:41:1d:5b:0e:
94:3d:ef:33:89:80:8f:89:cb:df:9e:89:02:54:6a:
d3:46:42:79:08:4a:62:f3:55:2e:fd:43:99:6a:d2:
c7:f7:b4:0a:4a:35:af:ed:c6:3d:3d:c5:9b:f4:70:
91:a7:fe:ec:60:38:48:8f:65:8b:15:a8:c1:14:0e:
a2:28:a4:78:0b:8d:49:52:2c:75:36:00:4d:b3:d3:
28:1d:ae:e3:ad:a3:0e:13:74:0f:13:75:d0:cd:59:
1b:0a:18:5c:d8:62:92:0b:68:28:f2:f7:52:7f:55:
6e:3c:b8:d0:a0:06:23:6f:f2:c9:54:79:3e:12:d7:
f2:2c:26:4d:c8:5a:33:05:cc:f3:93:39:18:6d:48:
aa:37:a6:38:32:f4:9d:a9:ee:39:ee:71:7f:f2:c5:
77:52:7e:1f:99:84:f5:91:11:05:6a:b4:63:3f:6f:
7f:55:2d:b7:59:01:9d:3a:7b:3e:da:4a:48:d6:05:
c3:aa:6b:04:3f:26:60:aa:6a:f2:1a:b2:ab:e0:64:
70:8f:10:16:50:b9:3e:19:0a:f1:63:fb:d6:17:e5:
f0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8E:D1:7D:BD:00:FB:15:BF:E8:21:FE:8D:09:C0:95:7F:D1:94:A5
X509v3 Authority Key Identifier:
keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ab:1f:3b:3b:be:70:e4:ca:9a:85:5a:ef:4d:12:f7:62:22:
00:b8:32:85:fc:21:0e:42:ec:b5:6f:0e:7e:82:17:e0:c8:09:
b6:ac:c0:13:97:a1:34:29:9e:6d:51:5f:db:0d:94:4b:cf:43:
1f:ce:39:6d:74:8b:48:67:b2:d8:90:ad:fa:de:32:41:b6:83:
0a:35:8b:4b:20:ad:05:e6:05:32:40:fd:8f:88:32:48:f7:46:
0c:d6:97:da:2b:16:01:e7:7b:59:64:63:41:8b:13:78:75:cb:
56:88:fa:7d:f3:4a:5a:8b:28:b0:7c:b2:e4:0c:e0:b1:d2:7d:
10:69:cc:60:2c:0d:4b:2f:03:06:29:01:cc:93:0f:1f:0e:ac:
30:5c:2f:26:fc:fc:b6:fb:11:12:5e:ad:cc:90:be:1f:5c:90:
1c:b6:2d:0c:76:52:d2:ec:64:92:d3:f8:91:f3:18:1a:d9:7d:
65:43:c9:77:f5:0a:6a:b7:ed:aa:88:df:88:52:dd:00:89:37:
9a:14:bf:76:46:6e:76:db:15:30:2b:90:91:9b:6f:e6:bf:90:
4f:aa:fb:fb:79:b4:4c:05:45:52:6f:19:5b:03:2a:56:0d:75:
06:3b:7d:00:31:3d:51:3a:3c:4f:0e:5c:af:3f:11:8e:41:32:
30:17:52:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:06:28 2026 by rpki-client