
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
File: x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json)
Hash identifier: qaoLwJCXT6Vq73uedwdwAVbGSkkJBqjIDIYmybIGbyA=
Subject key identifier: E6:99:5A:C9:B4:77:9E:21:D6:4F:54:29:87:0E:A8:F7:DE:D3:3D:40
Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B
Certificate issuer: /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
Certificate serial: 01F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
Manifest number: 01F2
Signing time: Thu 19 Feb 2026 01:56:23 +0000
Manifest this update: Thu 19 Feb 2026 01:56:22 +0000
Manifest next update: Thu 26 Feb 2026 01:56:22 +0000
Files and hashes: 1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: 313tNy3KABPNlkj2cbNXL7NW/THVcEATPzcxONTmldY=)
2: 96BD724A36E411F0AAE1DE39C4F9AE02.roa (hash: Amgok0VNeeOi0Xzs/UuEsPD+TVZIQ/XSEwWrN16Emag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl
rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500 (0x1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131A5E, serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
Validity
Not Before: Feb 19 01:56:22 2026 GMT
Not After : Feb 26 01:56:22 2026 GMT
Subject: CN=69966dc7-aa09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5e:2c:18:22:d2:f1:d4:1f:a3:93:03:26:d5:
f3:7c:df:a0:16:31:08:ce:f2:ba:33:0f:83:72:6a:
99:08:10:32:9d:99:3a:c8:0e:bd:ef:96:42:18:30:
49:bf:d5:8f:d4:0c:0a:1c:d0:a0:1c:7c:7a:ed:8d:
33:12:3a:1d:28:79:cd:4d:97:47:e2:d7:37:2a:fa:
a5:32:85:9b:a6:50:b5:44:3d:2a:58:43:1e:98:fc:
40:81:46:21:2e:83:09:0e:ed:c9:09:78:e4:b0:fa:
66:d9:77:44:26:16:96:67:1d:9a:f9:9e:24:61:da:
85:73:6f:9e:d6:e7:5b:d1:08:68:8e:1d:48:ee:0e:
21:27:a3:90:39:bd:b7:68:a8:d7:41:92:91:c0:41:
0a:d9:ef:f8:90:61:a0:a1:10:9b:4d:eb:24:7a:84:
db:67:b5:be:99:9d:5a:fa:75:d5:f1:20:e4:41:8f:
bb:77:4f:95:f5:27:d3:45:94:d7:af:e0:3c:0a:ff:
0a:1a:43:95:03:7a:0c:25:16:b2:b8:91:f8:82:d1:
86:f2:f0:15:9a:f8:eb:6d:f2:e6:5c:e1:e7:4e:1b:
d3:5d:53:1d:a8:10:49:51:20:06:f7:b5:1b:e5:47:
e9:b0:1d:fb:f8:2b:73:22:87:ec:5f:f3:5f:78:e0:
ad:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:99:5A:C9:B4:77:9E:21:D6:4F:54:29:87:0E:A8:F7:DE:D3:3D:40
X509v3 Authority Key Identifier:
keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:a2:41:d1:c0:12:9e:25:25:19:fd:04:ba:f2:42:fb:23:c8:
15:5c:68:ed:e9:02:fd:1a:9b:76:25:58:6b:4b:8a:24:cd:b3:
87:83:38:1b:57:c8:3a:25:ca:c9:af:ff:e5:fd:22:59:c2:32:
33:60:4b:61:1b:7d:d9:8b:ea:68:74:79:8b:e3:06:0a:75:68:
41:c3:3f:a4:c1:51:4c:c5:15:3d:24:2f:1a:70:82:44:3b:7c:
e7:7f:29:73:fd:5b:2e:fb:3b:b8:f2:1e:0a:78:5c:07:3b:ba:
ad:5d:41:f4:9d:7e:49:53:df:f4:f7:a8:6a:54:3f:2c:3c:15:
4c:e1:fd:47:b2:68:25:02:9d:54:3f:0d:0f:df:53:9c:f5:38:
94:ce:d6:4d:45:3a:1c:67:89:1f:42:ce:5f:d7:af:ee:08:0b:
7b:ed:e7:79:ce:64:0c:de:ac:4c:ea:3b:05:61:5f:67:32:6a:
09:91:de:de:67:ee:c7:da:e9:c6:c6:f7:25:d8:0c:46:7a:87:
1e:9b:77:c3:a0:6c:32:47:8d:68:d8:4a:16:a9:d8:58:e7:8a:
56:6f:14:d4:d2:1f:c9:a1:17:f2:35:66:4d:28:09:e4:f7:fe:
96:44:67:71:dd:bc:5d:20:25:98:ff:df:4a:a7:9f:47:32:95:
f3:1c:7f:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MzFBNUUxMTAvBgNVBAUTKEM3NEIzNEY1MDg0QzNENDI3RDJEQjUyODRFMEE1RTMw
NzcwQjkzM0IwHhcNMjYwMjE5MDE1NjIyWhcNMjYwMjI2MDE1NjIyWjAYMRYwFAYD
VQQDDA02OTk2NmRjNy1hYTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAg14sGCLS8dQfo5MDJtXzfN+gFjEIzvK6Mw+DcmqZCBAynZk6yA6975ZCGDBJ
v9WP1AwKHNCgHHx67Y0zEjodKHnNTZdH4tc3KvqlMoWbplC1RD0qWEMemPxAgUYh
LoMJDu3JCXjksPpm2XdEJhaWZx2a+Z4kYdqFc2+e1udb0Qhojh1I7g4hJ6OQOb23
aKjXQZKRwEEK2e/4kGGgoRCbTeskeoTbZ7W+mZ1a+nXV8SDkQY+7d0+V9SfTRZTX
r+A8Cv8KGkOVA3oMJRayuJH4gtGG8vAVmvjrbfLmXOHnThvTXVMdqBBJUSAG97Ub
5UfpsB37+CtzIofsX/NfeOCtDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOaZWsm0
d54h1k9UKYcOqPfe0z1AMB8GA1UdIwQYMBaAFMdLNPUITD1CfS21KE4KXjB3C5M7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUE1RS8wMzQ2MkU2NjEw
RUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBVSjlMYlVvVGdwZU1IY0xr
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3gwczA5UWhNUFVKOUxiVW9UZ3BlTUhjTGt6cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MUE1RS8wMzQ2MkU2NjEwRUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBV
SjlMYlVvVGdwZU1IY0xrenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB0okHRwBKeJSUZ/QS68kL7I8gVXGjt6QL9Gpt2JVhrS4okzbOHgzgb
V8g6JcrJr//l/SJZwjIzYEthG33Zi+podHmL4wYKdWhBwz+kwVFMxRU9JC8acIJE
O3znfylz/Vsu+zu48h4KeFwHO7qtXUH0nX5JU9/096hqVD8sPBVM4f1HsmglAp1U
Pw0P31Oc9TiUztZNRTocZ4kfQs5f16/uCAt77ed5zmQM3qxM6jsFYV9nMmoJkd7e
Z+7H2unGxvcl2AxGeocem3fDoGwyR41o2EoWqdhY54pWbxTU0h/JoRfyNWZNKAnk
9/6WRGdx3bxdICWY/99Kp59HMpXzHH/K
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:47 2026 by rpki-client