
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft
File: XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft (raw, json)
Hash identifier: 6fHqO8mANsAfdIxeurFBF34rEojgLEoh/594tHS+wrI=
Subject key identifier: D6:23:BC:B9:F3:E6:47:41:EA:62:5E:89:30:B3:1A:38:2C:3D:20:E0
Authority key identifier: 5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6
Certificate issuer: /CN=A9153F9E/serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6
Certificate serial: 075A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft
Manifest number: 075A
Signing time: Wed 18 Feb 2026 21:03:30 +0000
Manifest this update: Wed 18 Feb 2026 21:03:30 +0000
Manifest next update: Wed 25 Feb 2026 21:03:30 +0000
Files and hashes: 1: XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl (hash: fPuw2Xu1WZSQpcwGoodhzaNWHbLS8cB1jMVRz30U4Y4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl
rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 21:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1882 (0x75a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153F9E, serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6
Validity
Not Before: Feb 18 21:03:30 2026 GMT
Not After : Feb 25 21:03:30 2026 GMT
Subject: CN=69962922-e0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:54:77:18:aa:2c:77:59:67:85:df:1f:c8:98:
96:52:2b:17:a9:00:da:85:c3:78:43:22:8d:60:61:
4e:45:70:3f:1e:1f:9e:2d:d6:c8:23:a3:d7:55:92:
cb:01:15:f4:c5:a8:f4:2b:de:05:e7:fe:46:d1:9b:
bd:f1:9b:40:07:2f:d9:4f:66:a2:2d:15:a5:7c:19:
fd:e0:bb:4c:6f:43:8c:c7:6e:d8:08:9f:0f:cf:22:
cf:0b:b1:6b:09:b6:68:8d:de:a3:63:65:e1:b1:93:
df:f4:08:60:9e:86:7d:c0:84:32:db:1a:68:80:cc:
74:4d:50:fd:7f:fe:8c:47:9b:da:8e:65:60:ed:c8:
d0:d4:ba:83:53:58:c8:c6:33:5c:43:d2:0d:aa:2f:
8d:c0:8d:f7:2f:85:9b:1c:7d:5f:47:86:f9:e8:88:
f1:ad:73:54:a9:bc:e4:00:41:7b:68:83:37:1d:cb:
93:5e:e3:8b:0d:85:b9:8f:c0:36:e8:55:8f:cb:0f:
e2:e7:a4:f4:40:40:07:e8:e5:f2:c6:ad:1b:19:19:
0e:f4:f9:a6:95:94:c5:b2:e2:d5:75:a2:ae:3b:11:
9a:10:64:d1:e9:1f:24:e7:6a:35:10:99:41:92:be:
0e:04:41:24:58:b3:b7:0b:aa:90:ef:f8:fc:3f:2d:
fe:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:23:BC:B9:F3:E6:47:41:EA:62:5E:89:30:B3:1A:38:2C:3D:20:E0
X509v3 Authority Key Identifier:
keyid:5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:0d:32:33:c7:4b:0d:ab:6f:bd:ff:40:e2:b3:68:e3:3b:ec:
91:3a:db:ed:61:c1:85:4c:a5:a1:85:f2:77:91:9d:bb:14:0f:
d6:ce:34:01:9e:0f:24:ce:0a:33:15:e6:4f:e4:55:a6:0b:f6:
b5:44:29:ca:2f:1b:34:ee:47:63:35:16:26:89:c4:88:34:ac:
a1:a0:f8:49:1c:de:dd:48:ac:8a:dc:75:99:bc:9f:a7:7b:e0:
ae:bb:f3:52:58:fe:fe:d6:ac:d8:d4:f9:7a:e8:1c:d3:77:94:
ff:e4:3b:df:86:f3:de:52:84:8a:69:69:9d:68:a2:99:5c:79:
ae:ce:bd:e5:19:c9:0d:8c:81:f3:1f:ed:8b:d9:fd:2f:f3:64:
94:61:a5:10:2f:7b:07:c0:ea:bb:02:b6:b2:a7:b3:81:2b:d2:
b2:c1:7f:78:2d:21:cb:e0:4d:11:87:6d:b0:b6:f0:ca:22:f3:
95:fb:b1:84:bf:cd:a4:2b:13:51:9a:db:50:cc:6e:bd:dc:db:
ff:84:e0:01:e3:59:0c:af:61:3c:7e:89:f7:6f:71:7e:ff:b4:
ac:4b:11:11:c1:fc:3b:fd:c7:41:9c:da:7e:34:b8:0e:d1:0c:
e3:e0:a5:c1:01:fb:09:f8:0a:3d:54:73:ad:f0:05:f4:ad:82:
d7:ae:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:39:35 2026 by rpki-client