
$ rpki-client -vvf rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
File: xl_8-yz82bzWja6waX0xbPNbI_A.mft (raw, json)
Hash identifier: vV8Ng0by8eyir8TNbaIIIIBSnST4tS4maPxIAcqNMOc=
Subject key identifier: 38:FB:51:3A:DE:9A:7E:A2:32:B9:C7:69:A5:B6:2A:8C:5B:82:91:C9
Authority key identifier: C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
Certificate issuer: /CN=A91472E2/serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0
Certificate serial: 0319
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
Manifest number: 030D
Signing time: Thu 19 Feb 2026 00:23:57 +0000
Manifest this update: Thu 19 Feb 2026 00:23:57 +0000
Manifest next update: Thu 26 Feb 2026 00:23:57 +0000
Files and hashes: 1: xl_8-yz82bzWja6waX0xbPNbI_A.crl (hash: x1vqQXhVB+vuN6WDsloYKnwXQLceEccsAu9Tr9GhamU=)
2: 216EE802F87A11EDAAE56C0DC4F9AE02.roa (hash: le7JEqoYvZIMl+uq0wwq/akdNhi0QtrKh8LNnkVREXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl
rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 793 (0x319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91472E2, serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0
Validity
Not Before: Feb 19 00:23:57 2026 GMT
Not After : Feb 26 00:23:57 2026 GMT
Subject: CN=6996581d-dbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7c:78:b0:9e:1c:85:28:57:aa:19:74:7c:2f:
aa:5c:d7:5b:f3:25:3a:70:18:87:9a:5d:65:76:e9:
e6:4a:3f:ac:dd:80:2d:2f:6c:1f:c8:99:26:ab:20:
6a:81:72:0f:e3:77:5e:df:6d:df:3c:94:2b:d9:59:
a4:75:e3:87:8a:a1:55:0c:f2:38:34:c7:23:53:fc:
e6:43:54:12:92:82:ee:b8:03:35:ac:43:59:36:cc:
a4:8e:e9:c3:fd:58:b5:8d:57:7e:1e:a0:16:1a:f1:
0b:a2:b0:fe:49:ea:df:18:92:92:0c:ae:8d:92:0e:
b4:2a:4d:f8:66:55:7c:8d:59:6f:15:c5:fc:fb:5d:
09:5d:25:ee:8e:db:13:36:e3:59:5a:70:d1:c5:2a:
89:39:1d:f0:31:af:3c:1f:22:ab:de:07:76:7c:6b:
2b:e6:98:74:d4:ae:79:02:59:04:0d:b1:8f:91:ee:
02:b7:e3:44:cf:65:86:02:03:c4:79:4f:d6:cf:20:
09:2f:1f:67:f3:61:b9:5b:11:cd:32:d0:3c:93:4c:
7e:f1:46:ef:f2:4b:01:d1:9b:54:f8:89:00:a4:f8:
22:57:f0:c1:dc:c0:66:e0:f6:dc:aa:01:2c:7a:7a:
85:74:4f:86:24:30:96:c5:75:f3:9e:0a:f8:5a:b7:
b8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FB:51:3A:DE:9A:7E:A2:32:B9:C7:69:A5:B6:2A:8C:5B:82:91:C9
X509v3 Authority Key Identifier:
keyid:C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:da:03:94:21:58:2d:10:c9:ae:71:0c:8a:3e:c1:48:5d:8a:
fa:98:6d:f3:0f:9d:3a:5d:98:0d:c2:e9:95:c5:dd:01:c9:a7:
a3:ee:37:a1:6a:99:36:16:c6:57:2c:72:52:27:63:4d:b0:87:
c6:fc:fd:2a:f0:45:4e:91:0d:7c:5f:28:e3:1c:64:7f:62:9c:
74:67:d2:d1:66:22:f3:6a:37:65:6d:07:19:bc:e8:66:a4:4f:
40:ba:a8:bc:45:f5:13:0f:bf:7e:2e:ad:49:f0:07:69:68:f6:
e0:18:75:e8:a1:d5:39:52:3a:63:d3:d8:28:e1:bb:b0:b6:b5:
07:97:48:33:07:e8:d2:2b:bd:ef:ea:09:b7:00:b5:f1:e8:ed:
e5:87:8a:d4:f8:6d:a9:8c:b0:53:5f:fb:83:40:e5:40:f0:a2:
89:f2:6c:5c:52:79:dc:c6:99:a7:1f:f4:71:67:09:08:03:77:
65:ba:e7:69:15:07:cb:3c:91:bf:75:58:b6:e2:f1:39:ac:7e:
b4:0f:00:f2:c5:fe:2e:7f:42:94:dd:09:a0:eb:e8:52:10:a1:
42:2b:d8:1f:12:47:e6:0b:e6:30:19:ab:42:b2:7d:75:1d:30:
66:91:1d:ef:55:68:12:a2:df:6c:23:8f:e4:2c:cc:8c:58:70:
26:f9:72:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:48 2026 by rpki-client