
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft
File: iXa1-0jy5BEdeNWjzVovyhlhOXo.mft (raw, json)
Hash identifier: 41oVXM+uYLiaKtExYoi97iKXvEZQaugxz23HWeRC+tY=
Subject key identifier: CF:43:D9:25:95:BA:86:5A:E7:3F:15:2F:1D:C3:B5:B5:17:AE:F2:49
Authority key identifier: 89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A
Certificate issuer: /CN=A9128C7F/serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A
Certificate serial: 02A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft
Manifest number: 0290
Signing time: Thu 19 Feb 2026 00:44:13 +0000
Manifest this update: Thu 19 Feb 2026 00:44:12 +0000
Manifest next update: Thu 26 Feb 2026 00:44:12 +0000
Files and hashes: 1: iXa1-0jy5BEdeNWjzVovyhlhOXo.crl (hash: 0usJv4na6dxekHdX+WUzD+c1hsYLndGspD/Z3eRqq44=)
2: FBE538ECC55511F0B6ACB62BC4F9AE02.roa (hash: Xm8YDhtFdsbSB/JaCf1eeLvxGvfVGvAsGyj9y3iXBIE=)
3: A0A9D798C0AB11F0B1CBD10FC4F9AE02.roa (hash: meFnR87+GI3v6nomBtYeU7WZPVYP4nD3qbJitsfc+J0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl
rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673 (0x2a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128C7F, serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A
Validity
Not Before: Feb 19 00:44:12 2026 GMT
Not After : Feb 26 00:44:12 2026 GMT
Subject: CN=69965cdd-783a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:31:87:2a:a7:fc:10:7e:a9:db:b3:db:e6:44:
77:91:c6:c0:5c:cf:01:ca:bc:c9:4f:a8:04:57:cf:
d5:fc:4e:9f:4f:df:b4:12:3b:b5:13:7c:38:40:16:
f1:ac:28:98:b4:e9:ad:8f:d8:53:32:8b:15:86:a4:
e4:3b:5b:83:fe:7e:53:4c:ea:81:9d:8c:c7:86:22:
47:4f:0a:d0:51:0b:0c:20:85:44:4b:cf:04:0f:12:
56:b1:95:39:c0:48:88:50:2d:98:2a:e7:73:9b:0e:
8a:45:1e:9b:cc:26:fa:bb:2b:af:f9:e7:b7:33:44:
f2:67:a3:49:66:18:03:78:df:ef:6a:f6:c5:0e:f9:
3e:ef:ce:86:53:57:f2:7c:5b:8a:4f:2b:28:f7:17:
df:fb:a9:8b:ec:8b:b4:5f:ad:ab:ed:5a:0c:ad:39:
fb:ff:a5:94:2d:0d:99:df:85:22:b2:69:03:8b:22:
0d:87:30:e4:bf:67:f9:8d:82:76:d1:cf:54:84:ba:
22:80:7e:78:d9:b9:11:77:fc:68:e5:d1:d9:a3:cf:
b6:9f:56:08:87:39:f0:60:5e:89:2f:6c:f2:78:97:
89:e5:ed:1c:79:c3:bb:ad:ef:e0:07:70:35:66:08:
b0:07:fd:85:3f:37:0e:de:88:30:b7:77:72:1f:8b:
a2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:43:D9:25:95:BA:86:5A:E7:3F:15:2F:1D:C3:B5:B5:17:AE:F2:49
X509v3 Authority Key Identifier:
keyid:89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:bf:ca:3e:12:6b:8c:aa:f0:69:a7:78:f2:fc:0c:e7:6b:4f:
5c:07:6d:b5:2d:3c:2f:dc:d2:12:5c:11:45:6b:ac:d8:61:2b:
0a:fc:1b:df:b5:b6:66:9e:b3:c2:05:60:08:cc:7a:c0:a1:18:
1e:51:8d:61:78:9f:77:d0:21:71:66:80:23:a0:bb:aa:7d:79:
7d:14:52:f8:6f:a0:f3:a1:d4:f7:e5:e0:fd:d9:1a:4b:9b:94:
2d:9a:4a:dd:e1:f1:b2:f5:92:a4:67:7c:cd:21:56:17:3f:a7:
95:1f:3d:e0:eb:28:33:79:2a:fe:c4:ea:c0:95:22:53:f4:c0:
de:97:71:58:d2:00:ab:97:cf:9b:e3:71:c9:fb:58:62:71:88:
33:b5:96:10:98:8a:b2:18:8c:b9:fc:c2:3b:4f:05:99:2a:90:
68:37:9a:38:4b:d1:9a:11:14:14:fc:67:99:c1:93:00:0d:bf:
77:10:69:f2:19:f7:bc:82:e4:07:5f:8e:40:91:41:59:83:68:
7d:ac:6e:36:25:68:53:0e:55:4f:87:04:57:a7:57:01:7f:5e:
2e:49:30:13:ff:7d:4b:6e:b2:6f:5f:0d:a2:b6:b9:f1:be:76:
92:35:95:28:ec:46:15:94:b0:3e:bb:eb:a0:dd:f6:94:31:07:
31:0a:fc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:41:17 2026 by rpki-client