
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
File: -xaxnfv3ymrECmtqNT94V4kX4P0.mft (raw, json)
Hash identifier: TzKnwhYHcVOM7ahVdbiGo8hxaKIuw1rWKgXERcI1ZcI=
Subject key identifier: 44:2C:40:BC:11:D7:CE:6A:60:A1:B0:A1:BA:9E:60:EA:68:B4:85:0A
Authority key identifier: FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD
Certificate issuer: /CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
Certificate serial: 0203
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
Manifest number: 01FF
Signing time: Thu 19 Feb 2026 01:49:05 +0000
Manifest this update: Thu 19 Feb 2026 01:49:04 +0000
Manifest next update: Thu 26 Feb 2026 01:49:04 +0000
Files and hashes: 1: -xaxnfv3ymrECmtqNT94V4kX4P0.crl (hash: x7hpYkVXjaTPKbiecenZ4gDg6InZhDKsujF5Qq9TLUg=)
2: DFC662EC415B11EE9E83852AC4F9AE02.roa (hash: JQglPoDIL3Eq1y2JiUK8F3q2nUek/I2P1c153lPMYTA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl
rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 515 (0x203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146CB4, serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
Validity
Not Before: Feb 19 01:49:04 2026 GMT
Not After : Feb 26 01:49:04 2026 GMT
Subject: CN=69966c11-f56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c6:60:94:a2:48:91:e0:9c:98:5b:f9:0e:5b:
d9:8f:de:bc:ff:0c:57:71:37:f9:a0:76:9d:fc:68:
13:31:d1:89:71:02:02:a0:5d:7b:d6:95:c8:01:2d:
29:df:60:68:4b:3f:83:dc:dc:bc:70:d0:29:a3:ee:
76:f0:a1:d2:95:cd:14:b4:62:63:06:12:1b:8b:31:
3f:c1:71:a7:a3:9e:59:ad:97:9f:97:d6:05:bf:a0:
a1:90:82:c5:2f:d1:f2:0d:5f:75:eb:45:0a:5e:4e:
a4:bf:29:85:b5:d8:de:44:c4:39:b4:1e:e0:28:82:
2a:cf:cf:72:89:2d:90:78:1d:3d:0a:73:94:f9:ad:
a8:1f:d7:72:77:cf:6c:04:3f:69:4c:01:d8:3d:cd:
69:7d:5b:25:71:e3:49:39:9e:eb:98:11:ff:c2:47:
0f:5a:78:0c:54:94:26:15:eb:03:97:e9:fa:e8:f2:
a2:e3:6a:0c:76:13:52:27:1b:1c:9e:ab:21:98:4f:
e2:d7:61:d3:a9:ba:23:9f:ab:ee:43:23:6e:a6:d2:
d5:41:bc:5d:30:29:1f:88:7b:1b:79:2b:f6:eb:0b:
a4:64:15:ff:00:a4:64:f0:c5:2b:74:c4:9c:8f:db:
78:2c:26:b1:3c:4d:05:18:f6:63:51:36:fb:42:8c:
7c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2C:40:BC:11:D7:CE:6A:60:A1:B0:A1:BA:9E:60:EA:68:B4:85:0A
X509v3 Authority Key Identifier:
keyid:FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:c7:6e:aa:dc:3e:02:b6:45:62:35:1d:c4:e3:5e:08:74:9a:
75:f6:ce:df:53:7d:4b:33:1f:39:9e:31:09:3e:dc:3c:36:e6:
28:b9:9c:96:fc:07:a2:76:d0:0c:0b:47:16:a0:73:1a:22:65:
1d:f4:27:cf:46:ec:a5:34:79:9f:4c:91:f3:3d:3f:27:6b:11:
04:5b:e5:76:8b:24:af:ef:b2:bf:1d:7f:c6:b4:07:77:1b:33:
bd:89:99:67:5c:fc:bf:cf:5f:17:e5:f0:0a:c0:3a:5d:e5:9d:
28:1f:bb:31:56:66:19:2b:3a:b1:18:e2:c1:38:23:ff:08:4c:
94:0f:8f:92:29:0e:6b:71:3d:6a:cb:75:56:04:4c:4f:9b:ef:
4c:39:f4:a4:99:84:d1:c1:3c:a6:c0:d2:a5:e1:30:ab:ff:e4:
49:d6:92:64:54:f9:f5:9c:c0:0e:c3:15:7f:21:1e:de:ec:8e:
cb:d2:55:ee:95:50:d7:72:65:23:f8:5f:45:d3:98:08:87:de:
0c:af:6a:95:c9:cd:4d:cc:4e:d0:65:4f:df:39:ad:b6:95:22:
eb:5c:e6:e3:bd:df:96:1e:b5:7b:94:f7:d9:d3:c6:61:52:93:
0d:ee:8d:8f:d1:c6:0e:09:b2:0e:73:d1:3d:cf:17:49:ed:37:
22:5c:aa:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZDQjQxMTAvBgNVBAUTKEZCMTZCMTlERkJGN0NBNkFDNDBBNkI2QTM1M0Y3ODU3
ODkxN0UwRkQwHhcNMjYwMjE5MDE0OTA0WhcNMjYwMjI2MDE0OTA0WjAYMRYwFAYD
VQQDDA02OTk2NmMxMS1mNTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAocZglKJIkeCcmFv5DlvZj968/wxXcTf5oHad/GgTMdGJcQICoF171pXIAS0p
32BoSz+D3Ny8cNApo+528KHSlc0UtGJjBhIbizE/wXGno55ZrZefl9YFv6ChkILF
L9HyDV9160UKXk6kvymFtdjeRMQ5tB7gKIIqz89yiS2QeB09CnOU+a2oH9dyd89s
BD9pTAHYPc1pfVslceNJOZ7rmBH/wkcPWngMVJQmFesDl+n66PKi42oMdhNSJxsc
nqshmE/i12HTqbojn6vuQyNuptLVQbxdMCkfiHsbeSv26wukZBX/AKRk8MUrdMSc
j9t4LCaxPE0FGPZjUTb7Qox89wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQsQLwR
185qYKGwobqeYOpotIUKMB8GA1UdIwQYMBaAFPsWsZ3798pqxAprajU/eFeJF+D9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkNCNC8yQTg0RDFEOEZE
QzgxMUVEOTcyRURCMUVDNEY5QUUwMi8teGF4bmZ2M3ltckVDbXRxTlQ5NFY0a1g0
UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy14YXhuZnYzeW1yRUNtdHFOVDk0VjRrWDRQMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NkNCNC8yQTg0RDFEOEZEQzgxMUVEOTcyRURCMUVDNEY5QUUwMi8teGF4bmZ2M3lt
ckVDbXRxTlQ5NFY0a1g0UDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBpx26q3D4CtkViNR3E414IdJp19s7fU31LMx85njEJPtw8NuYouZyW
/AeidtAMC0cWoHMaImUd9CfPRuylNHmfTJHzPT8naxEEW+V2iySv77K/HX/GtAd3
GzO9iZlnXPy/z18X5fAKwDpd5Z0oH7sxVmYZKzqxGOLBOCP/CEyUD4+SKQ5rcT1q
y3VWBExPm+9MOfSkmYTRwTymwNKl4TCr/+RJ1pJkVPn1nMAOwxV/IR7e7I7L0lXu
lVDXcmUj+F9F05gIh94Mr2qVyc1NzE7QZU/fOa22lSLrXObjvd+WHrV7lPfZ08Zh
UpMN7o2P0cYOCbIOc9E9zxdJ7TciXKrq
-----END CERTIFICATE-----
Generated at Thu Feb 19 16:40:44 2026 by rpki-client