
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft
File: XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft (raw, json)
Hash identifier: B4AikMuy4Ei5go4fT25YtstHLqTrKI/4uNl3jv3Bg50=
Subject key identifier: 71:E0:79:80:16:FD:F5:CA:61:EE:04:14:FB:99:BC:17:79:29:67:46
Authority key identifier: 5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54
Certificate issuer: /CN=A918B0B9/serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54
Certificate serial: 0A2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft
Manifest number: 0A15
Signing time: Wed 18 Feb 2026 19:23:09 +0000
Manifest this update: Wed 18 Feb 2026 19:23:08 +0000
Manifest next update: Wed 25 Feb 2026 19:23:08 +0000
Files and hashes: 1: XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl (hash: mKiTKfDXYbk198o62doQrtsBGrH3nAOiOkWk143AMHM=)
2: 52F955A89B1511EA9BEFA53BC4F9AE02.roa (hash: ULVz6gtv7Lj17GsbY0DraIvlqeAo9m+ryNVdzpRY8/w=)
3: BED54F1A9B1611EA939F5A3FC4F9AE02.roa (hash: vTD8xn0iYmYF0FCpYg76YMcwnWDZovAXcFL69UbAO9c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl
rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:23:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2605 (0xa2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B0B9, serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54
Validity
Not Before: Feb 18 19:23:08 2026 GMT
Not After : Feb 25 19:23:08 2026 GMT
Subject: CN=6996119d-05a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cf:f2:ce:51:0b:94:4b:89:c5:65:94:d7:ca:
d2:50:35:af:dd:59:30:95:a1:a8:2a:cc:23:a5:38:
9f:33:50:9d:98:97:7e:11:5b:37:95:2f:83:26:4e:
1c:6c:08:a7:be:2d:15:77:ba:b5:83:5a:a1:8f:82:
ad:02:59:d4:cc:15:48:42:5a:fe:c4:aa:94:e6:1f:
00:35:1d:b4:ff:8c:42:56:cc:27:4a:79:86:c0:0e:
f0:46:6a:4f:b3:a3:3c:26:91:b3:c7:e2:d5:0c:8c:
68:2c:64:a3:cb:6c:b3:da:cd:92:36:53:7b:4e:21:
1b:07:a9:a7:f5:5d:36:09:4f:87:33:7d:54:bd:84:
ba:0e:d1:ce:15:04:b1:a7:7f:45:02:55:e6:0b:e2:
3b:e4:c8:04:a3:89:c3:44:0e:67:ef:68:5a:1f:e6:
70:e7:e6:5b:75:42:c1:af:c2:d2:90:ac:52:62:7b:
ac:76:49:97:3e:c7:d4:2f:2c:4c:95:a5:10:0d:f1:
63:46:a7:a6:f5:d5:47:f1:36:a3:30:7f:bf:59:16:
e5:de:e8:4a:00:d1:6d:ba:f5:76:0d:e1:4f:f2:d6:
28:0d:71:85:2a:d4:a6:91:02:00:6d:74:24:af:92:
db:e3:b0:7c:d8:bb:e2:3a:03:05:51:66:1b:75:5c:
82:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E0:79:80:16:FD:F5:CA:61:EE:04:14:FB:99:BC:17:79:29:67:46
X509v3 Authority Key Identifier:
keyid:5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:87:f2:d3:7d:b4:cd:b6:02:43:ad:3c:7d:5d:2c:ea:49:e1:
36:bd:a7:c7:6b:f1:62:f8:6b:70:6f:e2:c2:ab:ce:20:00:86:
b3:9c:6d:72:49:10:ff:16:dc:87:f8:42:11:fb:ce:db:38:0e:
07:db:d4:31:9b:cc:f2:68:32:41:1a:df:3d:4f:ba:30:72:e9:
9e:d2:7f:00:f2:6c:a1:2f:65:86:8d:52:0c:18:33:3d:bd:b4:
ec:9f:0b:9d:a9:d2:0b:fb:d5:45:21:26:7d:1e:35:7b:93:47:
e8:68:e3:66:5f:7f:e7:7a:c1:e2:49:8a:2d:24:6b:ce:13:c4:
ab:c4:b1:83:cc:12:34:6d:ed:88:d5:86:07:85:85:af:98:e9:
bd:d6:0c:98:87:db:fa:52:c2:94:53:54:b1:e9:a2:42:ee:c6:
a2:65:04:35:52:a3:ba:4b:fb:78:bd:2c:a3:34:5e:92:36:3e:
5e:2b:d3:b8:08:79:42:85:9c:55:db:f1:6c:cf:0a:4a:c6:7b:
c2:93:1e:84:37:8f:ac:23:ad:1f:56:37:92:36:79:53:b2:93:
a1:ff:6a:14:15:e9:05:1e:bf:8e:5b:84:0d:70:c7:31:28:8a:
63:0e:c8:ac:44:7e:d2:e8:e5:fb:b3:64:51:89:a2:4e:29:12:
b9:e7:0d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:52:05 2026 by rpki-client