
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
File: xUMJ3BErZYYnvTagMHLnXQYDZNM.mft (raw, json)
Hash identifier: XCIUa/FO0qasdVC+XqcvHC55Bc1ODDsqimeicL3CRws=
Subject key identifier: EC:0F:E8:CF:1D:08:E3:68:FB:9C:10:C5:B8:DC:92:24:20:5E:97:C4
Authority key identifier: C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3
Certificate issuer: /CN=A9199836/serialNumber=C54309DC112B658627BD36A03072E75D060364D3
Certificate serial: 052A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
Manifest number: 0525
Signing time: Wed 18 Feb 2026 22:50:54 +0000
Manifest this update: Wed 18 Feb 2026 22:50:54 +0000
Manifest next update: Wed 25 Feb 2026 22:50:54 +0000
Files and hashes: 1: xUMJ3BErZYYnvTagMHLnXQYDZNM.crl (hash: ncGt0X/pf/tXQFTFo29q+3XpCJyqk7wPurViycI264Q=)
2: 029F318A366F11ECA773E263C4F9AE02.roa (hash: XUaIWvSjvHJx2WjE0nq5LCjXyTsCoEUciSF2lpWLzf8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl
rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 22:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1322 (0x52a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199836, serialNumber=C54309DC112B658627BD36A03072E75D060364D3
Validity
Not Before: Feb 18 22:50:54 2026 GMT
Not After : Feb 25 22:50:54 2026 GMT
Subject: CN=6996424e-7b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:36:04:a8:ce:2c:00:fc:2c:3e:05:35:48:21:
7e:a1:c9:5e:0e:5b:f8:f8:36:7f:1e:e5:60:0c:fd:
88:47:48:84:9a:16:e9:a9:7f:dd:93:7c:57:89:e7:
bb:ba:4b:b2:ba:2f:d5:d9:28:af:5e:51:12:63:33:
e0:b6:91:6d:30:ff:65:3c:54:3a:22:b0:d0:08:2b:
f7:25:fb:86:1a:68:a1:d7:ae:8f:4c:3d:7b:8a:71:
85:af:dd:ef:b6:52:f4:bc:21:a9:87:d3:0b:92:db:
c0:e7:44:dd:5d:84:28:42:1a:b2:e0:7a:dd:98:4a:
f9:d0:8e:2b:16:c8:b8:4a:9a:c2:be:cf:79:73:8d:
17:56:b3:aa:98:d7:77:ea:fb:db:d8:fe:33:9c:51:
96:88:5a:bd:a7:a1:f8:4a:b6:76:78:ce:7e:80:ae:
e1:51:9f:08:f4:bc:97:60:ce:16:e5:32:a8:c7:4a:
d6:41:a3:99:81:3e:b8:b6:61:07:47:c9:1b:c6:29:
94:86:85:74:f1:ef:aa:63:5c:98:92:a6:ec:29:25:
9b:2e:bf:b8:2c:c0:7c:02:70:9d:70:8c:64:ff:35:
72:e2:91:d3:0c:52:6a:49:d5:56:47:15:40:88:ae:
54:96:db:4a:ae:41:19:2f:ff:87:e0:0f:55:ea:01:
e0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0F:E8:CF:1D:08:E3:68:FB:9C:10:C5:B8:DC:92:24:20:5E:97:C4
X509v3 Authority Key Identifier:
keyid:C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d0:fd:c1:fe:fb:16:c7:86:14:e8:d9:a2:0f:f6:70:19:df:
db:e8:ee:69:14:d0:2b:0f:3e:b9:0e:5f:dd:cc:e1:64:db:15:
ba:eb:00:e2:69:d8:59:4b:96:92:c3:c6:ed:25:a9:b7:3b:76:
4d:72:9b:fb:00:75:e2:45:7f:2b:4f:9b:9c:16:cc:14:16:89:
9d:db:86:ef:a5:71:6a:29:75:3a:e4:ad:cc:d8:1b:2a:c0:03:
04:90:87:3d:38:2b:51:4a:00:8f:83:76:ae:ce:67:27:51:1c:
15:89:f1:a0:75:90:51:8d:f1:15:69:34:6f:ab:06:71:50:22:
63:9e:16:c6:ba:c8:e7:4a:c2:c2:d2:a9:a6:90:a9:7c:06:87:
ad:d1:f6:59:46:37:08:a1:c0:77:f3:a4:39:89:59:71:ae:06:
7d:f8:9c:81:37:bc:24:62:39:8b:6c:32:cc:b8:91:6c:ce:e1:
63:74:4d:09:97:85:be:4c:6c:f1:48:48:df:20:09:82:56:49:
e3:80:e0:49:65:4a:dd:99:02:1e:94:66:04:0b:a1:59:4f:99:
5c:37:53:0f:fe:d3:17:9c:07:ec:f0:c9:bb:29:06:e6:a0:ac:
aa:a2:7c:e2:2d:f6:ab:80:87:e7:c6:e5:0a:04:3d:45:3f:90:
14:0f:f2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:34:57 2026 by rpki-client