
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft
File: XfVm12I2fCjH8_ElYbRxa4yhuWY.mft (raw, json)
Hash identifier: cbVFAFcM0O5K0bqC5dFkF2FI6C1atmV4xwt9MeSziJA=
Subject key identifier: EE:22:23:DB:A2:6F:65:F0:3A:25:23:53:1F:C7:C3:83:92:5D:4F:EB
Authority key identifier: 5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66
Certificate issuer: /CN=A9133B47/serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft
Manifest number: 014E
Signing time: Thu 19 Feb 2026 03:37:47 +0000
Manifest this update: Thu 19 Feb 2026 03:37:46 +0000
Manifest next update: Thu 26 Feb 2026 03:37:46 +0000
Files and hashes: 1: XfVm12I2fCjH8_ElYbRxa4yhuWY.crl (hash: yZBCVM5yzWzyI95C3kxLSPFB/0Cbsd2ZkGGralB0w7M=)
2: 23B1A0120FA511EFB28F5235C4F9AE02.roa (hash: 1j2rFTty2/H954Iwvk/ZWmtqptjhE7lYs+ZEPtYw42E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl
rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:37:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133B47, serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966
Validity
Not Before: Feb 19 03:37:46 2026 GMT
Not After : Feb 26 03:37:46 2026 GMT
Subject: CN=6996858b-f302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:83:6c:6c:65:30:30:ef:b7:b4:ea:8b:66:a2:
1c:d6:81:8c:ef:f1:d0:89:0c:29:2d:e0:cb:b2:56:
c3:17:9e:f8:9c:73:7d:c2:03:a6:32:0e:68:66:fd:
61:30:19:89:d2:aa:3d:a8:6b:0d:b1:9f:5b:57:ff:
93:21:fc:7d:c0:d1:1a:4e:39:3a:7e:6e:6c:7f:7e:
91:9b:4c:e8:7c:66:9f:08:01:b8:79:5b:d9:80:88:
15:19:25:6f:dd:4d:0b:2e:6b:f9:6d:d9:f5:ed:f8:
b7:f4:dc:e4:f1:17:c3:5b:3e:54:fa:8c:2f:bf:79:
e4:6e:d4:46:ed:2c:38:d9:59:79:04:64:65:24:4c:
6b:8e:c0:09:73:7f:fc:1b:45:ed:ed:9a:dc:1f:e8:
9a:85:27:9c:64:7d:05:73:c8:f8:be:73:9a:d8:a2:
8d:74:8c:ce:27:70:1e:12:33:d2:c7:a2:29:77:1d:
3c:89:bd:0c:ee:2a:e7:76:f7:81:c2:df:c1:2a:c6:
a8:5f:ab:28:3d:b9:b1:4c:5a:e7:08:33:8a:ac:e2:
99:6d:e9:ae:87:2c:6d:d2:0d:ad:be:57:1c:32:c6:
3d:b2:0e:5b:8b:d1:18:a3:6a:5a:4f:d3:3e:4e:7d:
73:c7:e9:49:46:59:c9:ba:47:0c:5b:2e:1a:19:1a:
4b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:22:23:DB:A2:6F:65:F0:3A:25:23:53:1F:C7:C3:83:92:5D:4F:EB
X509v3 Authority Key Identifier:
keyid:5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:b9:a8:7f:77:7b:66:e0:dc:f2:53:f4:8e:20:a1:25:e6:93:
52:d9:9f:ab:3b:5c:42:ef:95:bd:0a:bf:83:59:70:87:a8:ff:
0f:d7:4a:94:d8:58:41:96:a0:78:07:81:24:5e:ef:91:36:35:
81:aa:9a:94:a4:c7:ff:91:f2:aa:2b:53:49:c5:d8:1f:04:05:
2c:d1:b7:70:9e:db:18:69:de:7c:87:ed:3c:fa:c7:26:77:87:
ad:54:62:25:f4:61:a5:8b:5e:84:e3:79:a3:a9:8d:72:de:a9:
ef:90:cf:bc:51:e9:13:72:a4:2a:fb:33:38:79:79:d9:a8:53:
73:27:bb:8b:54:37:f5:98:09:22:c1:ac:b7:d7:3e:20:78:f4:
d0:cd:bf:4f:94:d9:27:cd:69:a9:1e:ec:22:ea:5e:90:7f:cd:
cd:b0:de:40:b6:ed:4f:82:88:c5:2a:4a:6f:7b:b2:91:3d:ac:
c7:d3:bb:b1:ee:6e:df:8a:2e:6d:e8:4f:5a:30:92:5b:de:f1:
96:6f:90:3e:d6:41:1e:b0:6f:62:cb:2e:cb:0d:d6:74:4e:2e:
04:c4:ca:8b:ce:1a:8f:0e:88:e2:3a:44:4f:73:18:c1:09:cc:
e4:77:e0:4e:31:ca:18:d6:85:c6:73:89:99:90:99:65:b6:5f:
f2:1c:b7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:03:42 2026 by rpki-client