
$ rpki-client -vvf rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
File: xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft (raw, json)
Hash identifier: qyF8aBEoV9pLfbi/dBki6df9kbHnwWU62mRBsTk3OLg=
Subject key identifier: 49:7D:09:87:C6:84:4A:B2:4C:57:BB:0B:5F:F8:88:DF:25:7C:04:8A
Authority key identifier: C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39
Certificate issuer: /CN=A915786A/serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
Certificate serial: 0C70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
Manifest number: 0C65
Signing time: Wed 18 Feb 2026 18:14:10 +0000
Manifest this update: Wed 18 Feb 2026 18:14:10 +0000
Manifest next update: Wed 25 Feb 2026 18:14:10 +0000
Files and hashes: 1: xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl (hash: 5t8Xm3y9i48WS/qXGgT7CVj8vehkC2bmNfQmXrQ6ex4=)
2: FBFF89FC3AC611EEB790D485C4F9AE02.roa (hash: DQuIcDvil4xhDWRcyNWiHmLcTyjG0SYLvwiCuCDmI90=)
3: 7A7B776A1F0E11EA92AA6824C4F9AE02.roa (hash: vuAfqS+oupAqLtbWHhdz3OsiJgWg5sczosdrHd8kXwo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl
rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:14:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3184 (0xc70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915786A, serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
Validity
Not Before: Feb 18 18:14:10 2026 GMT
Not After : Feb 25 18:14:10 2026 GMT
Subject: CN=69960172-1311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:1c:21:5f:c7:55:a5:0d:db:1e:23:15:a6:
40:24:04:4e:04:1d:b1:2e:1d:5f:6f:02:40:3b:e1:
18:bb:ac:03:c3:5a:61:dc:4e:d8:08:11:19:e9:cc:
98:76:30:a0:94:05:e5:e5:10:07:62:c1:fc:7c:b5:
20:5a:f1:72:47:7f:22:6c:bc:87:77:89:32:c7:a2:
2f:61:05:67:04:8e:74:54:14:58:20:8d:47:6a:01:
82:20:96:dc:03:ae:85:53:9b:b3:f0:12:81:d4:23:
e3:03:26:22:39:9c:38:ca:1a:5f:ea:8f:44:24:27:
47:94:7f:d0:ae:f8:19:de:6b:d4:13:0a:e0:07:a1:
fe:cb:67:e0:59:3c:e8:1b:af:69:76:27:0c:bb:cb:
ce:a6:ef:34:0e:ac:05:e1:02:20:10:d7:ef:f8:b8:
64:70:6a:33:2e:de:12:fd:1a:59:4f:d1:8d:77:e3:
7a:34:de:83:b9:26:a7:ae:cd:bb:a7:c0:45:0e:73:
99:c3:56:2a:fa:f8:2d:98:9b:1c:db:f6:5f:61:33:
db:73:6b:11:7c:ce:c7:2a:21:b9:63:0c:b1:d9:9e:
fe:14:c6:e4:3f:07:b5:a5:6b:10:ed:39:8a:5b:a9:
98:3c:c2:ab:f9:18:da:7e:ef:af:ab:06:84:de:58:
98:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7D:09:87:C6:84:4A:B2:4C:57:BB:0B:5F:F8:88:DF:25:7C:04:8A
X509v3 Authority Key Identifier:
keyid:C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:35:d0:2f:34:76:6b:77:6d:e1:41:a6:aa:11:01:70:4e:66:
6d:79:7e:19:cf:07:48:f2:11:4f:53:b4:29:00:2a:5a:09:4d:
c0:d2:df:2e:9d:9d:43:39:5f:7f:a9:50:81:1a:66:72:26:21:
19:35:66:c4:c1:28:20:66:e7:df:b0:64:c0:4d:f5:88:5a:89:
6c:1c:ec:46:a0:48:02:94:7f:71:87:30:7f:2b:9c:10:a9:86:
52:20:14:84:0e:63:c3:76:97:d6:0f:90:5d:c4:ea:c4:49:c6:
33:60:09:92:66:ed:31:54:48:79:97:a1:05:d1:fd:ea:67:8c:
71:d8:05:d2:06:9c:d3:93:a0:e1:7d:d4:e6:1c:b4:5e:6b:39:
b8:94:3b:58:16:47:16:41:e7:a9:a9:04:ec:f8:ba:79:ec:18:
7c:a9:72:31:23:d1:17:84:a8:6b:07:7a:a9:5e:a5:9b:42:20:
aa:9b:69:d4:d8:c5:be:b5:94:aa:87:4b:7b:56:b4:90:52:90:
ed:d7:6c:04:0e:d2:eb:73:1f:be:7b:be:86:a6:32:8c:ac:7d:
ee:c7:4d:6b:40:f5:1c:4e:61:77:49:c6:42:a6:e5:98:23:c7:
57:d7:be:f2:c7:13:b1:9d:63:7d:91:29:94:ca:4c:b4:2f:87:
fd:e2:6b:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTc4NkExMTAvBgNVBAUTKEM3MTUzMUQyNUY4MDU0OEY1QjY1MUY4NjQ5MzI1RjND
OEZEODU5MzkwHhcNMjYwMjE4MTgxNDEwWhcNMjYwMjI1MTgxNDEwWjAYMRYwFAYD
VQQDDA02OTk2MDE3Mi0xMzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqG4cIV/HVaUN2x4jFaZAJAROBB2xLh1fbwJAO+EYu6wDw1ph3E7YCBEZ6cyY
djCglAXl5RAHYsH8fLUgWvFyR38ibLyHd4kyx6IvYQVnBI50VBRYII1HagGCIJbc
A66FU5uz8BKB1CPjAyYiOZw4yhpf6o9EJCdHlH/QrvgZ3mvUEwrgB6H+y2fgWTzo
G69pdicMu8vOpu80DqwF4QIgENfv+LhkcGozLt4S/RpZT9GNd+N6NN6DuSanrs27
p8BFDnOZw1Yq+vgtmJsc2/ZfYTPbc2sRfM7HKiG5Ywyx2Z7+FMbkPwe1pWsQ7TmK
W6mYPMKr+Rjafu+vqwaE3liYswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEl9CYfG
hEqyTFe7C1/4iN8lfASKMB8GA1UdIwQYMBaAFMcVMdJfgFSPW2UfhkkyXzyP2Fk5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Nzg2QS8xMjZERkM5NjFB
NTUxMUVBODgwNDIyMTFDNEY5QUUwMi94eFV4MGwtQVZJOWJaUi1HU1RKZlBJX1lX
VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h4VXgwbC1BVkk5YlpSLUdTVEpmUElfWVdUay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Nzg2QS8xMjZERkM5NjFBNTUxMUVBODgwNDIyMTFDNEY5QUUwMi94eFV4MGwtQVZJ
OWJaUi1HU1RKZlBJX1lXVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAaNdAvNHZrd23hQaaqEQFwTmZteX4ZzwdI8hFPU7QpACpaCU3A0t8u
nZ1DOV9/qVCBGmZyJiEZNWbEwSggZuffsGTATfWIWolsHOxGoEgClH9xhzB/K5wQ
qYZSIBSEDmPDdpfWD5BdxOrEScYzYAmSZu0xVEh5l6EF0f3qZ4xx2AXSBpzTk6Dh
fdTmHLReazm4lDtYFkcWQeepqQTs+Lp57Bh8qXIxI9EXhKhrB3qpXqWbQiCqm2nU
2MW+tZSqh0t7VrSQUpDt12wEDtLrcx++e76GpjKMrH3ux01rQPUcTmF3ScZCpuWY
I8dX177yxxOxnWN9kSmUyky0L4f94mvA
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:27 2026 by rpki-client