
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft
File: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft (raw, json)
Hash identifier: ZaNa2jxl2XU3lQAsOYwOYhBS8yXK/qgIHR1S6nLeTZY=
Subject key identifier: B9:BB:CA:91:7D:70:A3:B0:C7:EC:39:06:8F:16:34:A8:4D:B3:3B:DE
Authority key identifier: 5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D
Certificate issuer: /CN=A9150EF7/serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D
Certificate serial: 0CD3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft
Manifest number: 0CCB
Signing time: Wed 18 Feb 2026 17:57:47 +0000
Manifest this update: Wed 18 Feb 2026 17:57:46 +0000
Manifest next update: Wed 25 Feb 2026 17:57:46 +0000
Files and hashes: 1: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl (hash: yZhyU6JVb7whjvexq0FzQlUCCNbqcPlM/auPsO3XNBc=)
2: 999F4BE8259611EE944D733CC4F9AE02.roa (hash: FqEN/utj0qRJF2RShIO0hvD2R+VumfpS5SKeV7adKGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl
rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:57:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3283 (0xcd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150EF7, serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D
Validity
Not Before: Feb 18 17:57:46 2026 GMT
Not After : Feb 25 17:57:46 2026 GMT
Subject: CN=6995fd9b-b96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:5d:11:fb:f5:85:c5:2d:98:c5:ae:c8:60:
dc:e0:07:9c:02:cc:5e:fb:d6:c7:d3:0b:4c:b1:92:
cb:df:6c:87:08:83:7b:0d:1d:e8:59:08:30:c0:60:
06:c7:fb:e5:ba:0b:7e:05:65:bc:5b:be:a0:e1:71:
67:a5:32:fc:b3:3a:ab:34:fa:db:23:9e:ca:cb:1b:
49:93:b5:75:a6:94:b6:81:26:ef:7f:d1:8a:29:ac:
2b:26:6b:0d:db:d5:c2:2b:14:32:0d:71:b8:65:7e:
50:15:3b:a9:93:88:c5:f3:08:15:af:08:39:f4:13:
56:5f:84:a7:f1:2d:83:58:df:0e:f6:d0:ae:ec:0d:
58:34:dc:68:10:a1:b7:b8:a6:53:ec:e4:00:bb:f9:
7e:c1:7a:58:1d:54:66:74:b6:2d:d0:f4:08:84:05:
b0:45:a2:25:bf:4b:85:5d:a2:cf:57:a2:9d:d3:18:
53:4e:75:e0:fb:19:46:58:46:a6:b4:3c:f9:c8:12:
49:1f:57:c7:0f:bf:41:24:a8:46:8c:da:3e:59:38:
76:6b:b9:20:b0:c6:49:e6:0b:96:17:73:35:1b:88:
73:66:c7:f4:e6:c9:79:86:bb:16:b5:29:c6:45:71:
8f:82:c0:76:00:d7:e0:18:b6:7e:00:01:16:60:86:
66:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BB:CA:91:7D:70:A3:B0:C7:EC:39:06:8F:16:34:A8:4D:B3:3B:DE
X509v3 Authority Key Identifier:
keyid:5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b9:b7:91:71:23:4d:94:62:76:6c:fb:7f:55:66:a5:09:32:
96:1a:fc:39:a1:66:ac:6b:fc:da:1d:ec:be:98:04:47:b2:81:
ad:69:8b:f7:aa:8e:53:96:41:4f:c4:72:d5:48:7f:25:0c:a2:
1c:bc:4d:49:a4:18:e4:40:f9:fe:12:9d:40:5e:5c:7a:6d:92:
6a:ff:84:43:3a:86:c3:ae:0e:49:16:ae:ba:0a:7a:f0:13:c9:
41:b4:ab:2d:ec:f5:ed:0b:67:65:68:8a:46:c0:b5:fa:ce:fa:
e9:c5:78:b1:7f:00:bd:b6:21:47:9e:0e:05:9d:31:79:71:f0:
df:46:92:47:6f:82:92:26:51:a3:ae:0e:6e:bf:49:63:de:d2:
d5:94:65:73:4a:42:72:62:a7:c9:f7:3c:ff:b8:92:7b:eb:5a:
83:ce:61:3c:a2:37:13:a8:63:82:47:e2:9b:c7:91:de:f5:03:
87:23:76:89:19:93:f8:aa:3b:3e:af:88:ad:d0:22:3b:f4:85:
33:9f:1e:7d:6e:29:e4:4c:f5:ca:45:8d:86:53:2b:eb:08:52:
18:90:9b:d8:ca:a2:14:44:76:f2:8f:2c:06:43:4d:f6:a8:54:
37:dd:2d:72:9b:07:a5:ac:3d:8b:84:09:38:da:c0:a1:7f:81:
14:ef:dd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:02:23 2026 by rpki-client