
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft
File: 4XM7lw_d92f_GVQoQ34SQqN2knc.mft (raw, json)
Hash identifier: +Mg60GRyGcqnK3Ercsv50WKnOi6pu+Mpt1Bft96kDn0=
Subject key identifier: A5:4F:65:A4:BE:DF:4A:3A:1C:B3:A2:64:82:ED:B6:CE:AD:48:54:FA
Authority key identifier: E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77
Certificate issuer: /CN=A912E5CB/serialNumber=E1733B970FDDF767FF195428437E1242A3769277
Certificate serial: 025F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft
Manifest number: 025B
Signing time: Thu 19 Feb 2026 01:00:44 +0000
Manifest this update: Thu 19 Feb 2026 01:00:44 +0000
Manifest next update: Thu 26 Feb 2026 01:00:44 +0000
Files and hashes: 1: 4XM7lw_d92f_GVQoQ34SQqN2knc.crl (hash: JJYySqjM28CE6ipwzndM8TdPl/LpKkf4k2iduNBp/mo=)
2: 5FF4FD52704C11ED97935E7DC4F9AE02.roa (hash: mkay78ArXCLuTCpk5LBJHpYSqvgsay5EEQLpiKDYBb8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl
rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E5CB, serialNumber=E1733B970FDDF767FF195428437E1242A3769277
Validity
Not Before: Feb 19 01:00:44 2026 GMT
Not After : Feb 26 01:00:44 2026 GMT
Subject: CN=699660bc-5425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:51:c7:de:3c:1a:7d:58:8f:3a:ac:7e:d2:
42:f3:2e:aa:f6:da:7d:f3:7b:dd:04:b9:fe:8d:91:
ae:7d:7b:29:dc:cd:ec:a9:2c:af:b8:86:84:aa:38:
21:11:25:dc:58:3f:87:ff:bd:18:f8:e0:f9:be:2e:
08:bd:72:08:0b:6d:c9:87:5f:aa:57:4a:88:58:d9:
bf:e4:9e:25:8c:2e:a9:65:d9:52:25:51:c4:33:ae:
df:1e:86:69:34:2d:15:2d:c5:e0:5f:b3:0f:10:7a:
82:47:5d:90:ba:0b:25:55:87:99:2c:b0:be:98:e7:
eb:46:bd:4f:e3:2e:3e:3f:55:2b:27:17:74:40:ee:
85:8b:1d:92:d0:98:c8:8d:d5:b9:32:87:e9:97:d3:
ae:2d:92:f3:41:4f:05:3b:d6:7b:68:ee:07:a1:57:
6a:2a:04:57:e2:fc:d8:d0:0d:83:fc:5a:c7:5f:1c:
61:b3:6b:1b:85:d2:2e:f1:ff:6f:2d:ef:a5:23:2c:
7e:a2:5d:79:7d:d5:7e:30:b0:54:f3:1f:e4:ed:27:
8e:4f:76:50:d5:b9:c5:b5:7d:b2:57:98:2f:9b:50:
0b:32:6b:72:06:2c:87:6d:7f:59:82:c2:93:0e:82:
0b:91:7d:ba:88:75:10:75:2b:48:e2:2b:41:37:7b:
ce:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4F:65:A4:BE:DF:4A:3A:1C:B3:A2:64:82:ED:B6:CE:AD:48:54:FA
X509v3 Authority Key Identifier:
keyid:E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fc:c8:90:e9:6b:2a:ca:da:7d:a1:d6:49:25:13:18:25:c0:
83:d8:7e:0d:e1:e5:c6:2b:14:e8:30:3f:2f:da:35:78:01:52:
d2:3c:9d:95:5e:36:29:c5:0d:86:7d:5e:72:6f:2e:e3:16:97:
c9:65:d3:b6:4d:bf:04:e9:6d:29:e4:f5:1a:49:de:20:68:b8:
83:6a:81:ae:be:b6:d4:1d:44:bd:8a:f8:fa:7f:35:8c:05:f2:
c8:20:73:20:46:8a:22:d6:76:1a:1a:45:c5:91:81:93:81:3b:
f3:d6:08:3c:a4:88:2e:48:25:16:b8:83:e0:58:33:10:b1:ce:
9f:9d:63:b6:39:93:e0:2f:42:da:2f:3f:90:3d:0e:b1:d9:0d:
1b:f5:e6:54:88:f5:da:57:b9:9e:e3:04:f3:28:0b:fe:1e:ce:
0a:99:1e:f1:10:fa:69:8f:fe:85:6c:2d:58:7f:90:af:51:72:
61:a2:0b:d5:6e:a5:74:01:e5:b9:af:ff:61:fe:af:08:e7:e1:
34:58:c7:70:92:cd:4d:89:36:02:73:ec:d3:a6:6c:74:43:e8:
87:bf:46:87:66:99:7e:12:47:90:59:c1:ed:73:48:e2:a5:ce:
dc:1f:53:5c:5b:ea:64:5a:e3:16:7a:91:78:d4:14:23:2e:dd:
fc:47:ee:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:36:09 2026 by rpki-client