
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft
File: XozcAfwJtFN0mgHuUjmzXt4kvmw.mft (raw, json)
Hash identifier: LNS7ZneQgzQZ34/tKpyZ40L5K/Q9qRa7RpfwpVxfNUI=
Subject key identifier: B8:7F:3A:94:69:A2:95:D4:21:FE:48:15:85:4B:B5:DB:AD:0C:DC:7F
Authority key identifier: 5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C
Certificate issuer: /CN=A91F4CFA/serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C
Certificate serial: 07C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft
Manifest number: 07BA
Signing time: Wed 18 Feb 2026 20:51:07 +0000
Manifest this update: Wed 18 Feb 2026 20:51:07 +0000
Manifest next update: Wed 25 Feb 2026 20:51:07 +0000
Files and hashes: 1: XozcAfwJtFN0mgHuUjmzXt4kvmw.crl (hash: ZHXrTf7ImTT5LwUIdSiJ4vbbj7g6I2ocH0U+9W36CIM=)
2: A5D573E4305A11EB921D6332C4F9AE02.roa (hash: YBEc7X7y2zLa5OdEGOrRlwoEuxYs7fU2wrxzm81YklQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl
rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1984 (0x7c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4CFA, serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C
Validity
Not Before: Feb 18 20:51:07 2026 GMT
Not After : Feb 25 20:51:07 2026 GMT
Subject: CN=6996263b-e4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:c8:76:e4:2d:24:42:13:fe:32:78:55:98:
f1:e1:e0:31:53:eb:a2:98:ed:ad:77:9a:01:06:6a:
d9:41:ea:9a:e1:a5:52:90:1b:f8:12:44:32:55:ce:
4d:9d:55:41:4a:17:a4:b4:2c:ec:66:e3:c8:77:76:
2d:fd:62:49:4b:cb:9e:5d:8e:3d:17:b9:81:fe:96:
28:b3:89:d7:7b:26:ca:88:c5:71:d7:f9:89:46:d9:
e4:ee:cb:04:8d:fd:65:41:be:d2:43:22:55:c8:2d:
aa:22:d5:38:6f:a8:0d:5c:40:f5:06:f4:1f:ea:0f:
ec:e8:6d:7a:6b:5c:5e:82:8d:24:d8:84:b7:83:fd:
14:a1:4e:0f:4b:77:ec:80:0b:5f:36:52:fb:9b:d8:
2f:1f:f2:3e:7f:ab:82:45:87:e8:36:23:79:62:74:
5e:e3:21:38:1a:e8:56:bd:cd:04:56:74:23:2c:f6:
59:78:fe:55:7b:76:90:38:69:d2:68:0e:26:ce:cb:
ca:61:eb:3a:26:e1:d8:45:1b:c3:be:b8:72:0d:45:
6b:23:8a:09:55:f6:9c:3c:28:7a:d2:00:21:35:64:
ad:fd:47:c4:68:4e:4a:02:f2:46:84:49:1a:6f:c0:
16:74:8d:db:a3:88:33:85:c9:a5:ca:8e:09:75:ef:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7F:3A:94:69:A2:95:D4:21:FE:48:15:85:4B:B5:DB:AD:0C:DC:7F
X509v3 Authority Key Identifier:
keyid:5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b1:bc:e9:9f:b2:40:b2:84:65:a6:02:3e:6a:fe:5c:ef:03:
f6:97:6f:48:9a:a6:71:b7:94:ec:4c:aa:86:f4:bd:21:0d:f8:
57:14:d8:f2:40:cd:b0:72:74:cc:c0:05:95:1d:ce:bf:81:67:
48:bf:d9:a4:3b:90:5a:66:9e:57:6e:15:05:aa:31:37:43:17:
18:53:fb:65:f9:b8:ba:00:85:62:04:4a:68:e1:82:63:d3:3c:
39:84:cc:e1:ab:08:2b:d3:91:bd:a1:8b:2e:a4:d7:e5:22:18:
52:b1:0e:89:89:24:86:e2:b1:fa:1f:d7:f2:9a:2f:bd:47:0e:
b5:08:cb:b2:1a:92:57:5a:a0:77:91:77:93:54:ee:b0:85:56:
c4:d6:1b:54:2c:80:8c:06:81:64:92:cb:8f:c5:00:44:b4:40:
46:28:bc:0d:d2:b0:35:68:d9:06:cd:16:79:d7:c5:cb:9c:e7:
d1:13:5b:8e:84:d0:65:f0:5a:7f:a7:a7:07:81:6d:8a:52:7b:
1f:32:f9:d7:c8:d9:1f:4f:da:1a:44:eb:55:bd:b4:89:9c:f1:
6e:77:c0:da:fc:ba:6a:eb:f3:9b:38:9e:90:a4:be:f4:8f:36:
3c:8c:01:bd:3f:5e:9c:f6:d7:19:ab:c9:e4:46:bf:46:36:20:
23:5b:3a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:28:47 2026 by rpki-client