
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft
File: XwBNV-s29CZy5m8wBfZGm2KJFxs.mft (raw, json)
Hash identifier: RAWL7YH5nBIZIdh47qcsNZik15eDgwI52NBsrzHklWQ=
Subject key identifier: 41:B7:1E:EE:AF:F9:AF:A0:E6:DA:9E:FC:9A:F5:FC:28:20:FF:69:A6
Authority key identifier: 5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B
Certificate issuer: /CN=A91C1025/serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B
Certificate serial: F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft
Manifest number: F4
Signing time: Tue 17 Feb 2026 04:40:30 +0000
Manifest this update: Tue 17 Feb 2026 04:40:29 +0000
Manifest next update: Tue 24 Feb 2026 04:40:29 +0000
Files and hashes: 1: XwBNV-s29CZy5m8wBfZGm2KJFxs.crl (hash: 6fXW/BxtthlDgpoyASI7BNQEKUAQIkCit5u+DyBP8Y0=)
2: 3D04EA589D9211EF8083B245C4F9AE02.roa (hash: Iqqm3XnZxAwHyLfxm5fiQ2PL3nIt3cAVFXF23TPN80A=)
3: 6D79D956EF8E11F0A4EF9B52626F56BC.roa (hash: Hzt1eZQcZftEf9k6UknT6CUEtQOuHyRI5QFd27G9nms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl
rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 24 Feb 2026 04:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1025, serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B
Validity
Not Before: Feb 17 04:40:29 2026 GMT
Not After : Feb 24 04:40:29 2026 GMT
Subject: CN=6993f13d-c479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:bb:20:f6:49:17:e2:ea:45:5e:fe:d1:d2:
d5:cf:a6:ca:a0:50:f3:36:a4:be:a8:3b:74:61:3b:
37:19:12:fa:1c:02:20:fa:14:da:33:b4:f2:6f:04:
04:df:1f:e3:7b:ee:ee:a5:d2:a9:b8:3d:cd:bb:bc:
bd:47:e0:4d:94:85:58:02:8d:23:18:40:3a:88:44:
a6:60:4d:49:d3:33:1e:5a:67:7e:45:36:43:75:56:
75:5d:c3:a3:c6:ee:3d:34:2f:66:b1:74:9b:a1:0d:
77:3f:b1:56:f6:0c:ea:fa:16:80:09:34:d7:5b:d4:
e6:ef:92:c2:61:21:44:44:b8:40:98:c4:e2:39:75:
6d:fe:ab:e6:d1:2c:c8:96:ce:71:ff:d1:c8:f4:aa:
3a:86:14:d0:2d:67:c8:57:c2:c7:7b:a6:26:29:c3:
9f:a0:fe:15:ad:cc:22:fd:7e:77:56:9f:d8:dd:12:
6f:03:6c:3a:6b:75:8d:f3:a9:92:75:03:e1:1f:37:
e3:13:a5:64:d3:fb:96:df:24:d1:b4:e9:29:88:5f:
ed:70:08:03:b8:fb:d4:54:ba:84:fa:1c:78:a0:12:
8a:5d:62:12:d2:63:57:f7:3b:5d:4e:7a:ea:45:cb:
6e:a1:d5:e9:80:a5:f8:cc:f8:8b:82:bb:08:59:05:
84:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B7:1E:EE:AF:F9:AF:A0:E6:DA:9E:FC:9A:F5:FC:28:20:FF:69:A6
X509v3 Authority Key Identifier:
keyid:5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:ef:07:40:92:fb:98:31:bc:a0:f7:fb:b5:86:7f:ad:33:1f:
4a:4b:1c:df:77:e6:78:f7:af:02:ba:e0:dc:2f:cf:c5:69:74:
ce:27:ac:35:a1:70:d0:24:84:d0:4e:fe:c3:c9:c5:35:e6:d3:
bd:1f:16:16:de:ff:cc:41:40:96:2d:4d:8b:49:53:26:c2:74:
5e:ad:01:7c:ab:6e:9e:54:9f:6f:fa:6d:80:3b:bf:fa:9c:d8:
31:7b:d5:47:f8:35:d3:03:c3:da:dc:ee:9e:d7:ff:d9:09:05:
02:46:da:b1:eb:04:32:3b:58:83:00:5f:a5:a4:86:fd:1f:ae:
2e:ce:20:2d:7b:ef:05:87:fb:f7:3c:c0:e5:a2:3f:24:0f:b9:
9f:58:c0:ba:a9:8d:9d:fd:5b:bf:10:31:df:29:56:7e:ee:ca:
c3:ad:c0:6c:e8:17:66:a7:2f:b3:17:5a:25:f9:28:ea:74:7c:
60:72:0d:69:a4:71:4c:13:96:0d:a5:d8:90:25:a4:cb:a7:2e:
03:6f:cc:1e:5f:2c:b7:ac:bb:c9:cb:11:72:5d:33:a2:00:a5:
a2:9f:a1:26:54:3f:17:50:62:21:f2:01:ba:4a:c4:dc:05:f0:
b6:ed:92:7f:38:76:06:fe:2e:28:6c:02:a3:92:af:1e:d4:58:
e1:94:17:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:19:43 2026 by rpki-client