
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
File: XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft (raw, json)
Hash identifier: WFHltVGI4ioPivPBmEmpSLw/LoUQ3FRyBBvgff6Ql74=
Subject key identifier: 3A:59:49:4E:D4:62:76:1F:7B:A7:C5:D6:2A:A7:B1:D5:F9:9F:74:0D
Authority key identifier: 5D:CA:45:28:B9:E4:0C:88:E4:67:A4:3F:DC:12:B7:8F:2B:35:45:E3
Certificate issuer: /CN=A91E4BD2/serialNumber=5DCA4528B9E40C88E467A43FDC12B78F2B3545E3
Certificate serial: 0984
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
Manifest number: 097D
Signing time: Wed 18 Feb 2026 19:34:50 +0000
Manifest this update: Wed 18 Feb 2026 19:34:49 +0000
Manifest next update: Wed 25 Feb 2026 19:34:49 +0000
Files and hashes: 1: XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl (hash: TEEF0l8y7F9tbB01X+fHHnsLOS7m2xmVL+4gUCj0OcY=)
2: A862F866AA3111EA9E08C324C4F9AE02.roa (hash: OW41bUAPIGMrqZxgUYQ1U1pF1P2hht2Fk6aRcB2b9ic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl
rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2436 (0x984)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4BD2, serialNumber=5DCA4528B9E40C88E467A43FDC12B78F2B3545E3
Validity
Not Before: Feb 18 19:34:49 2026 GMT
Not After : Feb 25 19:34:49 2026 GMT
Subject: CN=6996145a-d972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:04:6c:2d:24:8a:e5:58:8c:4c:d0:05:7a:
b2:40:1b:39:0d:a1:a1:56:f2:23:43:ec:41:d6:61:
c6:22:86:5b:06:b2:9b:41:27:43:b0:00:dd:71:f4:
c4:8c:e6:3a:16:cf:76:d0:c6:57:82:0b:6d:3e:ee:
ab:83:64:50:af:1d:0c:7a:f1:57:fe:b7:b3:8d:2c:
67:6d:31:81:0f:a6:78:c4:a1:43:48:07:e4:3b:8a:
8b:a2:62:a4:0f:c5:00:97:f3:6f:dd:b3:33:c0:23:
21:e5:a4:8a:5a:51:18:27:06:65:47:5f:b1:2f:58:
7a:56:61:ab:c9:d3:24:6d:6f:67:1b:7b:9d:0d:a0:
d7:a3:24:f5:00:17:22:42:ab:fe:f8:a6:40:17:ec:
dc:e2:1a:7b:be:e0:e6:97:1d:bd:d1:16:31:cd:67:
d9:a4:51:eb:f5:06:32:fc:6f:2a:7a:28:d8:37:6e:
1a:5c:59:8d:ac:52:9a:6a:ab:91:b1:b4:54:02:de:
c8:b1:81:40:15:59:1f:b0:ae:a9:d2:16:f2:e5:1b:
c1:86:fd:fb:11:94:85:77:61:ee:c8:78:c0:9d:24:
bb:e9:97:09:84:eb:a9:4f:b0:28:54:f1:29:35:2c:
90:82:a6:23:20:c4:fe:ae:7a:4f:93:d2:4b:dc:38:
41:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:59:49:4E:D4:62:76:1F:7B:A7:C5:D6:2A:A7:B1:D5:F9:9F:74:0D
X509v3 Authority Key Identifier:
keyid:5D:CA:45:28:B9:E4:0C:88:E4:67:A4:3F:DC:12:B7:8F:2B:35:45:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:e1:df:72:90:4b:a6:5e:98:c0:34:31:54:6b:4b:4e:a5:c8:
9c:dd:c5:06:47:ca:b5:f8:96:05:9f:a5:e4:f0:21:a4:d1:f8:
52:71:0c:4d:dc:13:78:cc:0a:db:96:8c:78:1f:b6:33:a6:cb:
75:82:01:a7:dd:09:8d:f4:70:8b:f4:0a:65:af:8c:3a:58:64:
8d:29:01:4b:05:70:e2:37:47:d2:a5:30:1b:99:70:bb:3c:02:
fe:5b:12:66:6f:13:af:da:60:6a:4c:a6:f4:9a:62:fc:0f:87:
c4:ce:17:89:98:26:89:01:56:b5:34:22:bd:33:97:ea:bb:b8:
99:66:bb:8f:9b:52:b4:51:fb:e1:a1:65:3e:ee:3a:2d:9a:c7:
25:02:cb:98:58:5a:05:3c:ad:92:a2:93:7e:2a:62:95:06:ef:
31:7e:51:ad:a8:00:be:ee:b3:d6:94:57:a3:34:d8:67:c6:16:
2e:fd:e9:84:b7:a6:a3:dd:f4:28:a9:fb:43:9c:a0:98:ba:3b:
a9:24:28:2e:03:9a:b4:6f:67:93:4e:b5:c4:a3:6a:1b:97:1e:
36:ef:6e:30:22:4d:e5:32:06:f6:2b:93:8a:db:f3:92:8d:2f:
47:ae:f2:ef:10:e0:a7:35:bc:0b:72:40:e6:d1:50:5f:bc:3a:
75:49:20:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:48:28 2026 by rpki-client