
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
File: Xtho2ocq-NaWpcGp-ngp9lJzynk.mft (raw, json)
Hash identifier: 3gzJ6QO/24toBF4Py8uKjNvMRoCLlLk9VeOACjFusMk=
Subject key identifier: AB:AC:32:A2:5C:CB:55:F5:C1:B8:47:ED:DC:7B:B8:4C:FD:F1:9D:E3
Authority key identifier: 5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79
Certificate issuer: /CN=A9119B43/serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79
Certificate serial: 04FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
Manifest number: 04F5
Signing time: Wed 18 Feb 2026 22:59:42 +0000
Manifest this update: Wed 18 Feb 2026 22:59:42 +0000
Manifest next update: Wed 25 Feb 2026 22:59:42 +0000
Files and hashes: 1: Xtho2ocq-NaWpcGp-ngp9lJzynk.crl (hash: Yme78R6i87bizIphDkOvS5t0ADp1uAlenByrHeXXq3A=)
2: 6C27C19E4BFA11ECA6797F6DC4F9AE02.roa (hash: 4MjnE6h/+HZ8xwEMPqh4WZTTOcevjIxEAxZ9zge9gjM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl
rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 22:59:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1278 (0x4fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119B43, serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79
Validity
Not Before: Feb 18 22:59:42 2026 GMT
Not After : Feb 25 22:59:42 2026 GMT
Subject: CN=6996445e-5717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:34:0b:82:26:93:f3:78:ac:9a:fb:60:53:
fe:e3:f0:6f:ac:a7:ab:81:40:68:16:b1:06:47:23:
5c:ed:28:20:2b:74:4f:b4:14:d5:75:3f:15:21:f1:
f6:9c:e8:fa:21:61:ab:45:b8:9a:00:ef:9d:09:c6:
9a:8a:e6:38:97:d2:01:a3:a2:14:dd:1d:1c:87:25:
3b:8e:04:ca:75:48:16:22:e4:62:7a:01:df:ca:48:
5a:d5:cc:bc:ea:1a:62:fb:aa:3c:c8:67:d0:06:9e:
a3:aa:e7:57:8a:e0:2b:3f:96:5d:68:e2:5b:98:a2:
76:0b:52:6d:16:0c:bb:ba:b2:bc:b4:32:24:03:25:
73:e0:0e:88:86:68:db:a7:16:28:7d:21:02:6d:1d:
22:06:53:e3:af:2c:06:76:f7:60:bf:5c:c3:06:03:
aa:b6:79:d4:0a:a8:6b:eb:b1:8f:30:81:f5:84:e3:
aa:dd:b3:f4:1c:74:dd:fd:78:79:7f:39:58:49:1b:
e9:53:3b:8f:e6:9b:88:cf:79:fc:31:66:96:39:e3:
c1:da:5b:28:50:3f:f9:2e:2e:6f:e8:23:15:ba:a0:
35:b1:06:75:f0:d3:a5:0d:ec:79:23:08:45:45:13:
b2:6a:22:43:cc:c8:25:c2:5e:14:2a:e1:a7:9c:8a:
c1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AC:32:A2:5C:CB:55:F5:C1:B8:47:ED:DC:7B:B8:4C:FD:F1:9D:E3
X509v3 Authority Key Identifier:
keyid:5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:92:f5:23:cb:4d:f7:88:c0:73:9e:36:a4:ec:8f:f0:45:11:
30:db:96:35:cf:f2:e6:52:da:30:58:d2:84:ac:18:ce:f1:48:
d2:78:15:e3:71:59:0d:f4:2c:d2:eb:75:b3:3c:16:9e:17:09:
d9:6e:4a:1c:7e:cb:af:f3:96:e0:51:f5:9c:3c:8f:f7:46:13:
5c:40:ef:ed:47:d9:5b:e1:9c:f2:26:b2:98:a7:36:d5:c6:f0:
f1:4e:41:0b:06:43:a7:c5:2c:08:40:6d:4b:5b:66:c8:49:01:
38:43:f8:e9:c3:f3:56:0a:63:e4:c3:48:d2:91:45:a4:70:65:
77:97:94:30:05:e5:5e:76:ec:d4:c7:37:c0:53:42:0f:85:ba:
dc:42:97:b8:84:f3:fb:f7:2b:7e:c4:e5:f5:88:b5:52:df:14:
dc:f7:ca:0a:43:76:33:bb:e3:f1:4f:bb:d7:f9:90:f5:b4:1e:
ba:fd:09:a7:5d:4b:ef:cb:79:04:bf:b8:ea:9e:18:62:5f:8b:
a0:19:5b:da:fa:e4:36:70:67:8e:1a:0f:16:6d:73:10:6f:dc:
fc:59:46:0c:a2:53:f0:93:fb:30:18:7e:45:10:75:ed:b8:2a:
aa:b2:87:eb:f4:84:54:0f:ff:04:ca:c3:71:44:17:8d:d8:d0:
0e:ec:96:29
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MTlCNDMxMTAvBgNVBAUTKDVFRDg2OERBODcyQUY4RDY5NkE1QzFBOUZBNzgyOUY2
NTI3M0NBNzkwHhcNMjYwMjE4MjI1OTQyWhcNMjYwMjI1MjI1OTQyWjAYMRYwFAYD
VQQDDA02OTk2NDQ1ZS01NzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAskw0C4Imk/N4rJr7YFP+4/BvrKergUBoFrEGRyNc7SggK3RPtBTVdT8VIfH2
nOj6IWGrRbiaAO+dCcaaiuY4l9IBo6IU3R0chyU7jgTKdUgWIuRiegHfykha1cy8
6hpi+6o8yGfQBp6jqudXiuArP5ZdaOJbmKJ2C1JtFgy7urK8tDIkAyVz4A6Ihmjb
pxYofSECbR0iBlPjrywGdvdgv1zDBgOqtnnUCqhr67GPMIH1hOOq3bP0HHTd/Xh5
fzlYSRvpUzuP5puIz3n8MWaWOePB2lsoUD/5Li5v6CMVuqA1sQZ18NOlDex5IwhF
RROyaiJDzMglwl4UKuGnnIrBoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKusMqJc
y1X1wbhH7dx7uEz98Z3jMB8GA1UdIwQYMBaAFF7YaNqHKvjWlqXBqfp4KfZSc8p5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUI0My9FNUI4Mzk4MjRC
M0ExMUVDOTkyRTgxNTBDNEY5QUUwMi9YdGhvMm9jcS1OYVdwY0dwLW5ncDlsSnp5
bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1h0aG8yb2NxLU5hV3BjR3AtbmdwOWxKenluay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OUI0My9FNUI4Mzk4MjRCM0ExMUVDOTkyRTgxNTBDNEY5QUUwMi9YdGhvMm9jcS1O
YVdwY0dwLW5ncDlsSnp5bmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCQkvUjy033iMBznjak7I/wRREw25Y1z/LmUtowWNKErBjO8UjSeBXj
cVkN9CzS63WzPBaeFwnZbkocfsuv85bgUfWcPI/3RhNcQO/tR9lb4ZzyJrKYpzbV
xvDxTkELBkOnxSwIQG1LW2bISQE4Q/jpw/NWCmPkw0jSkUWkcGV3l5QwBeVeduzU
xzfAU0IPhbrcQpe4hPP79yt+xOX1iLVS3xTc98oKQ3Yzu+PxT7vX+ZD1tB66/Qmn
XUvvy3kEv7jqnhhiX4ugGVva+uQ2cGeOGg8WbXMQb9z8WUYMolPwk/swGH5FEHXt
uCqqsofr9IRUD/8EysNxRBeN2NAO7JYp
-----END CERTIFICATE-----
Generated at Thu Feb 19 15:10:01 2026 by rpki-client