
$ rpki-client -vvf rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
File: X3A2SNc_YGlFARjbom-WaC1a5so.mft (raw, json)
Hash identifier: ggB32WM69x8mvnePv17QM8znr7mdA3QaBW/RboHHHp0=
Subject key identifier: CF:8C:DC:4D:D6:57:2C:76:A7:38:CB:29:DC:76:52:46:2A:67:35:EF
Authority key identifier: 5F:70:36:48:D7:3F:60:69:45:01:18:DB:A2:6F:96:68:2D:5A:E6:CA
Certificate issuer: /CN=A91508BB/serialNumber=5F703648D73F6069450118DBA26F96682D5AE6CA
Certificate serial: 350C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
Manifest number: 350C
Signing time: Wed 18 Feb 2026 14:35:44 +0000
Manifest this update: Wed 18 Feb 2026 14:35:43 +0000
Manifest next update: Wed 25 Feb 2026 14:35:43 +0000
Files and hashes: 1: X3A2SNc_YGlFARjbom-WaC1a5so.crl (hash: uOoh6Um5cTaVA7sfiRJ8Cl6cb66fkkH9iwsu2GELx3o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.crl
rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 14:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13580 (0x350c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91508BB, serialNumber=5F703648D73F6069450118DBA26F96682D5AE6CA
Validity
Not Before: Feb 18 14:35:43 2026 GMT
Not After : Feb 25 14:35:43 2026 GMT
Subject: CN=6995ce40-6c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:37:98:1a:dc:43:54:b0:21:25:a3:f3:2c:
5f:1b:12:15:43:06:b2:29:ff:67:69:a3:5c:51:94:
f8:2c:2b:3e:a3:5b:1a:e7:92:c3:14:23:80:b6:c3:
bd:40:2e:1c:1b:c5:60:14:14:46:1b:02:9e:e4:c3:
f9:c6:9e:c2:ac:5c:f1:79:91:a0:cf:09:3c:36:c7:
28:d5:f1:64:c6:32:00:fb:e1:47:f1:5d:2c:23:f6:
a6:bc:b9:bc:74:c8:8d:41:59:3a:43:fc:e3:3f:28:
e8:a4:dd:24:3d:d4:74:fb:35:fa:e1:9d:6e:50:ee:
21:a7:73:1a:c4:10:ba:e2:45:55:ae:d4:76:35:fa:
45:9b:51:05:10:35:a7:7d:71:be:55:f8:d8:2e:58:
6c:1f:d6:49:6b:23:b4:05:cc:d5:69:fa:6b:20:b8:
c3:54:1f:93:53:68:e9:f0:e8:73:47:e2:08:e7:41:
b1:d8:a8:5a:7f:be:c2:e5:a3:42:7c:c6:5e:81:c8:
93:0d:21:36:43:9a:d9:d3:2a:4d:9e:3e:d7:9f:bd:
08:e7:0f:41:f6:cf:f1:6d:6d:4e:59:dd:8a:a5:60:
fe:ec:ad:fe:11:e7:c4:a8:29:d2:7c:d8:bc:62:8c:
39:1e:ee:64:00:36:e7:e2:02:1f:f1:37:e9:ab:ac:
cd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8C:DC:4D:D6:57:2C:76:A7:38:CB:29:DC:76:52:46:2A:67:35:EF
X509v3 Authority Key Identifier:
keyid:5F:70:36:48:D7:3F:60:69:45:01:18:DB:A2:6F:96:68:2D:5A:E6:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e0:31:26:b6:d7:09:31:c3:04:4e:ef:f5:0f:34:41:ad:df:
0d:3f:77:cc:7c:e8:61:6e:e6:50:8e:08:1b:1a:03:6e:44:1d:
39:21:a8:8a:0f:b5:2a:1e:8c:f2:2d:69:63:c5:ca:fd:38:3e:
cd:5f:70:cd:f3:9e:d3:20:a3:3d:2f:f9:c2:fe:76:60:f1:17:
9d:57:52:db:9f:ab:b5:b1:40:7f:f6:c8:6f:ca:0b:1f:60:c6:
85:cd:d8:da:8a:42:65:3c:86:2d:14:78:22:41:57:fe:8f:ae:
ce:d7:20:bf:3f:91:20:be:63:ad:c9:ec:70:01:9a:4f:ee:fc:
01:52:86:02:69:2c:ac:c1:c2:ce:e9:41:52:e1:12:ef:e8:de:
80:07:c9:64:45:dd:37:0f:5c:c7:3b:b4:9c:30:00:18:60:f4:
f4:40:e1:8f:54:54:b0:02:f8:8b:d2:74:9f:c5:8a:11:09:93:
36:de:ce:2b:c9:10:ce:f4:89:4e:10:62:51:72:f2:e4:f5:b6:
95:b6:82:5e:96:e1:97:4b:56:35:3d:94:9d:ef:af:32:bf:4e:
c0:82:ea:0c:13:a5:29:35:b0:85:17:d3:f8:82:85:bb:4a:af:
4d:cd:7e:bc:41:5a:bd:13:69:c8:fa:9e:f5:05:87:18:10:03:
b7:ec:b8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:17:30 2026 by rpki-client