
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft
File: xw3ieKt3JtKco6jAJAeqW64S7Ao.mft (raw, json)
Hash identifier: dK2L3OMUOL8iJCIwsRK8LZ9TqG+GsmdX7obIu2aGrz0=
Subject key identifier: 73:B8:66:82:BB:E7:9B:05:15:0E:62:49:84:25:30:15:07:4A:4E:2D
Authority key identifier: C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A
Certificate issuer: /CN=A918D323/serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A
Certificate serial: 015D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft
Manifest number: 0157
Signing time: Thu 19 Feb 2026 03:35:39 +0000
Manifest this update: Thu 19 Feb 2026 03:35:39 +0000
Manifest next update: Thu 26 Feb 2026 03:35:39 +0000
Files and hashes: 1: xw3ieKt3JtKco6jAJAeqW64S7Ao.crl (hash: lpx9WohTWJq1udOiKJFFZfqm5od0PWVT9LGCVsaD7lM=)
2: CC166DAC0A0811EFBE7E465EC4F9AE02.roa (hash: LIBTOUx4sDoJqevaYZ7QQd1IJGw6R0nOR1Do32NIl0I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl
rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D323, serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A
Validity
Not Before: Feb 19 03:35:39 2026 GMT
Not After : Feb 26 03:35:39 2026 GMT
Subject: CN=6996850b-576b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:31:60:64:8e:87:72:b2:4a:d0:dc:7f:fb:cc:
27:81:77:29:aa:aa:eb:e8:c2:74:6b:96:0a:9f:eb:
4e:cb:f3:6a:e4:fb:24:fa:6f:f8:8f:df:6f:75:35:
1e:ba:41:1c:f2:10:d9:1e:cd:e8:28:e6:af:19:ea:
93:74:56:70:6f:81:0a:4a:71:46:20:78:e1:17:b4:
52:82:6c:ef:f9:b5:ea:cf:db:02:55:93:c7:f2:34:
4f:f3:8b:5e:cd:8f:21:27:25:52:6f:9d:11:f2:c0:
a6:5b:96:38:0a:84:32:1d:d3:6c:b6:f3:09:48:ae:
51:c1:bb:da:eb:db:50:cf:be:75:a9:02:39:54:aa:
75:74:c6:10:db:7f:cd:bd:43:b2:2e:e8:75:be:aa:
d2:60:a0:34:c9:7a:b3:8c:c2:fb:e9:3a:80:02:a1:
7f:68:c9:84:f8:e9:70:3b:31:ab:e8:7c:35:78:8a:
42:35:65:f4:d8:53:71:de:b4:2f:9f:93:8f:9d:4a:
14:51:fc:78:e3:83:14:f1:49:89:85:09:43:84:b9:
a7:c2:14:e1:67:41:d0:f3:69:d1:ae:a0:71:7e:7f:
8e:d0:60:d9:ac:b2:39:41:60:2e:1d:34:be:9a:1a:
3f:23:ab:75:a7:cb:b7:99:f1:0a:77:be:f3:a8:43:
64:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B8:66:82:BB:E7:9B:05:15:0E:62:49:84:25:30:15:07:4A:4E:2D
X509v3 Authority Key Identifier:
keyid:C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:8e:ab:91:6b:31:bb:0f:1b:2d:95:b1:7e:61:5f:9e:dc:5c:
08:78:d3:a2:5f:b5:10:84:25:33:b1:9b:49:3c:34:9a:56:87:
a7:10:53:eb:8d:9d:4d:19:90:a6:46:14:da:71:f0:96:7e:73:
50:fa:42:12:92:94:a1:87:fb:e4:0b:26:98:a0:8e:2b:b5:27:
d8:ed:e5:b1:9f:a4:3b:e3:a6:02:d1:c0:03:fd:59:b5:bb:dd:
90:29:e0:62:f3:ab:fa:8c:8e:14:a5:34:b1:df:ac:c0:c6:99:
c2:a9:6c:00:9f:03:b1:8c:1e:5f:f8:8c:17:88:9d:e9:8c:88:
07:56:7a:50:ee:e8:fe:30:15:8c:c7:1c:0f:3e:77:40:01:63:
04:70:24:66:40:7b:c4:5c:13:aa:4f:b0:3d:c4:c8:36:1d:9e:
be:f1:5b:34:21:33:a0:a8:65:a9:7e:9b:76:ed:dd:eb:ce:27:
e8:1e:c0:04:43:6e:ea:03:0a:91:61:f3:01:b8:8c:04:67:f7:
ce:34:7c:21:8d:6f:30:af:e7:93:b2:43:0c:cf:e0:b9:8d:fa:
02:cd:8c:d0:05:52:3c:50:c7:72:f0:00:66:12:c1:6e:11:39:
5d:83:0e:1d:04:02:55:2b:8a:74:45:12:6f:12:91:e2:74:f8:
be:f4:8d:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQzMjMxMTAvBgNVBAUTKEM3MERFMjc4QUI3NzI2RDI5Q0EzQThDMDI0MDdBQTVC
QUUxMkVDMEEwHhcNMjYwMjE5MDMzNTM5WhcNMjYwMjI2MDMzNTM5WjAYMRYwFAYD
VQQDDA02OTk2ODUwYi01NzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxjFgZI6HcrJK0Nx/+8wngXcpqqrr6MJ0a5YKn+tOy/Nq5Psk+m/4j99vdTUe
ukEc8hDZHs3oKOavGeqTdFZwb4EKSnFGIHjhF7RSgmzv+bXqz9sCVZPH8jRP84te
zY8hJyVSb50R8sCmW5Y4CoQyHdNstvMJSK5Rwbva69tQz751qQI5VKp1dMYQ23/N
vUOyLuh1vqrSYKA0yXqzjML76TqAAqF/aMmE+OlwOzGr6Hw1eIpCNWX02FNx3rQv
n5OPnUoUUfx444MU8UmJhQlDhLmnwhThZ0HQ82nRrqBxfn+O0GDZrLI5QWAuHTS+
mho/I6t1p8u3mfEKd77zqENkXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHO4ZoK7
55sFFQ5iSYQlMBUHSk4tMB8GA1UdIwQYMBaAFMcN4nirdybSnKOowCQHqluuEuwK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDMyMy8yMjBBMUZEODA5
RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0S2NvNmpBSkFlcVc2NFM3
QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h3M2llS3QzSnRLY282akFKQWVxVzY0UzdBby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDMyMy8yMjBBMUZEODA5RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0
S2NvNmpBSkFlcVc2NFM3QW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDHjquRazG7DxstlbF+YV+e3FwIeNOiX7UQhCUzsZtJPDSaVoenEFPr
jZ1NGZCmRhTacfCWfnNQ+kISkpShh/vkCyaYoI4rtSfY7eWxn6Q746YC0cAD/Vm1
u92QKeBi86v6jI4UpTSx36zAxpnCqWwAnwOxjB5f+IwXiJ3pjIgHVnpQ7uj+MBWM
xxwPPndAAWMEcCRmQHvEXBOqT7A9xMg2HZ6+8Vs0ITOgqGWpfpt27d3rzifoHsAE
Q27qAwqRYfMBuIwEZ/fONHwhjW8wr+eTskMMz+C5jfoCzYzQBVI8UMdy8ABmEsFu
ETldgw4dBAJVK4p0RRJvEpHidPi+9I2x
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:58:02 2026 by rpki-client