
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft
File: xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft (raw, json)
Hash identifier: NWsrOI5r0wPy6/iBaCxgJ/RRGvNFH15zxdL3jmqzj1Y=
Subject key identifier: CD:02:8A:29:13:29:1C:37:C3:F1:E3:DA:BF:1B:83:3D:66:77:5C:31
Authority key identifier: C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF
Certificate issuer: /CN=A91E37D1/serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF
Certificate serial: 0215
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft
Manifest number: 0212
Signing time: Thu 19 Feb 2026 01:40:05 +0000
Manifest this update: Thu 19 Feb 2026 01:40:04 +0000
Manifest next update: Thu 26 Feb 2026 01:40:04 +0000
Files and hashes: 1: xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl (hash: rMCVm7TeYgyH4S+/1vVHKnBBXQ4w9EIZ785gnq/dv4s=)
2: 59A00A402C7111EFA821586AC4F9AE02.roa (hash: p1EiKzg6nbrGxBXHUOMKPfqyNz3U7HPnOFjDFgpciCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl
rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533 (0x215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E37D1, serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF
Validity
Not Before: Feb 19 01:40:04 2026 GMT
Not After : Feb 26 01:40:04 2026 GMT
Subject: CN=699669f5-31d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:87:b8:72:42:52:dc:ba:2f:34:01:fd:30:d9:
73:b2:9a:a3:73:92:c3:26:a7:1f:65:b6:c4:69:97:
a5:2b:99:5e:76:95:e0:d9:b8:3c:07:c5:90:1e:39:
8f:b1:87:08:a5:98:2a:26:22:71:ae:d4:6b:fe:7a:
44:6e:31:d2:68:ff:2d:1d:6b:d6:11:7b:2b:b7:28:
74:70:53:03:d3:74:67:ff:64:9f:89:56:64:77:c3:
fb:d7:f6:11:0c:26:e8:1c:9b:6c:4a:85:39:e8:78:
9c:b4:99:0f:5c:74:bc:36:55:c7:86:b9:ba:67:3b:
12:b3:39:1b:fd:71:99:c6:72:30:d4:16:5e:cc:a5:
d1:60:b5:82:84:e0:64:78:9b:f4:2e:94:2a:ef:b5:
3e:67:1d:7f:5e:98:98:9d:de:b5:e3:cd:2f:69:2d:
fc:91:09:a7:2f:2c:9d:86:85:0d:bf:17:05:08:63:
81:68:e9:13:50:90:db:d7:54:60:2a:c4:f8:07:b8:
e7:11:e4:29:ea:8d:69:61:47:42:a4:7e:c9:64:cc:
81:25:65:9b:d0:63:9e:48:0d:a0:19:1d:ac:5d:14:
a4:12:56:46:fb:3b:cd:1c:b1:68:27:02:9c:7b:51:
61:b7:36:ae:0a:8f:b4:6e:bc:e2:1b:c4:9d:e2:77:
08:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:02:8A:29:13:29:1C:37:C3:F1:E3:DA:BF:1B:83:3D:66:77:5C:31
X509v3 Authority Key Identifier:
keyid:C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:64:70:55:8e:ef:6b:89:50:3f:be:73:bf:9a:e2:d8:16:97:
eb:fa:97:05:5f:4c:55:75:74:bd:7d:82:81:86:00:4c:96:02:
44:e3:5f:24:bc:4c:91:1d:fd:9a:d4:a2:63:b6:4c:95:ac:89:
3d:2a:80:14:dd:af:e9:47:bc:52:5c:62:24:c3:5d:b6:c8:52:
1a:64:50:e9:6d:f5:02:4f:ac:4b:26:de:e4:f9:5f:30:d6:d3:
44:08:39:bb:86:1b:ea:3b:fb:c7:dd:09:b5:72:12:fe:ba:14:
fc:ae:f1:7c:c8:ad:b1:9d:ab:24:a1:11:d0:d4:e9:e6:0b:08:
eb:60:6a:42:ae:2b:34:e9:3c:84:35:eb:a5:d6:8e:f3:df:4a:
2a:bc:d4:e2:66:fc:6f:9e:72:8c:65:3c:05:fd:f0:d5:1c:99:
43:fa:d0:5e:eb:ed:70:44:ee:c3:8c:f3:d0:35:2f:aa:8d:c3:
e4:bd:43:3c:ef:c9:3e:f2:70:9d:5c:c6:33:0e:26:8d:25:f2:
a9:5c:54:8e:09:ba:23:5c:3f:07:68:9c:6a:f2:7b:3c:24:33:
9f:3b:52:a1:12:fd:88:b0:57:f9:ae:f7:0d:9e:4a:33:40:ea:
bc:54:63:ac:76:a3:52:9b:c3:90:3b:68:f0:c3:1b:79:0b:bb:
3c:f8:0c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:47 2026 by rpki-client