
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft
File: XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft (raw, json)
Hash identifier: ZDips7B0mnpwjlo6hzCLl3yLzHjAa8tzJ8QIuH7st8w=
Subject key identifier: D8:DA:67:19:EE:80:8C:59:82:4C:DA:2D:C8:1E:C7:1C:17:BC:F4:92
Authority key identifier: 5C:03:C6:C9:C7:26:FF:3D:20:27:47:0A:18:A0:C8:82:22:EC:66:FB
Certificate issuer: /CN=A9162B98/serialNumber=5C03C6C9C726FF3D2027470A18A0C88222EC66FB
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft
Manifest number: 22
Signing time: Thu 19 Feb 2026 07:04:44 +0000
Manifest this update: Thu 19 Feb 2026 07:04:43 +0000
Manifest next update: Thu 26 Feb 2026 07:04:43 +0000
Files and hashes: 1: XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl (hash: tCVxvMd54p3xyW+tE/OrY6SoUosTbl/g6jFy5k8bffk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl
rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:04:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162B98, serialNumber=5C03C6C9C726FF3D2027470A18A0C88222EC66FB
Validity
Not Before: Feb 19 07:04:43 2026 GMT
Not After : Feb 26 07:04:43 2026 GMT
Subject: CN=6996b60c-12b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:6f:9f:0a:af:1b:71:e6:a5:d9:b3:f9:4d:
f5:53:20:10:eb:c9:7c:32:35:7a:45:2f:5e:70:20:
18:a8:c9:07:32:8b:43:fe:a9:07:33:1b:02:a4:dc:
b4:74:16:3d:1e:3d:c8:68:5a:6b:e7:d8:96:9f:11:
2c:58:a0:76:db:ff:aa:a5:d2:d4:3d:4f:ea:f3:ae:
7d:49:3f:4d:5a:a7:ab:cb:46:02:77:22:74:f8:0f:
8c:77:e8:f5:fe:ac:82:9c:34:4e:04:bc:18:6b:d7:
a3:2f:fd:39:3e:c6:4f:9a:4b:e7:cb:70:c2:7a:5a:
03:d1:76:c2:a9:1c:57:76:c1:e0:16:a2:49:fd:6c:
5f:50:ab:06:63:fa:75:04:d0:0e:9a:fc:40:aa:96:
d6:5f:df:20:b7:f4:77:05:2b:d5:6a:2e:1c:6a:64:
3f:9f:6a:3c:9e:b2:df:40:00:b8:2d:ec:76:1a:8e:
68:ea:ed:14:4b:52:6f:9d:2d:cf:47:56:5e:24:59:
9c:9e:97:f9:0e:6e:1a:bc:cb:47:b4:e1:b4:77:95:
53:2e:ff:4b:ef:3c:2e:8c:f0:73:e2:58:54:f0:0e:
04:ad:d4:7c:7a:78:77:2b:a0:17:80:47:88:45:a4:
ed:54:23:b2:6c:05:40:12:ab:7d:97:a2:91:57:f0:
77:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DA:67:19:EE:80:8C:59:82:4C:DA:2D:C8:1E:C7:1C:17:BC:F4:92
X509v3 Authority Key Identifier:
keyid:5C:03:C6:C9:C7:26:FF:3D:20:27:47:0A:18:A0:C8:82:22:EC:66:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9b:1f:9f:6b:08:ce:00:34:d2:c5:e7:80:9e:f4:47:4d:d2:
7f:ec:3a:21:6d:f5:0e:76:a7:62:0e:ed:2f:11:87:e3:24:2e:
4c:7f:ca:87:83:07:57:19:5f:33:c9:1a:e8:5b:11:d6:2d:75:
c6:63:da:1a:6c:11:fb:fd:62:f9:5f:fc:6d:13:13:5f:14:fe:
4b:22:0a:e7:1a:fb:70:58:5e:44:94:d0:3d:a6:f9:07:bc:a4:
44:89:6a:e4:7c:a5:f4:bf:b9:bc:bd:91:99:73:60:e2:3f:8f:
dd:89:42:df:70:5e:1e:e5:4e:12:f3:20:2c:c7:93:23:51:90:
be:a5:05:ea:1c:e7:47:d1:7c:fc:79:b6:73:56:9c:5b:63:e1:
99:f7:12:3e:27:06:31:36:7e:f6:3b:b7:d4:ac:92:c6:94:45:
e4:e8:d7:c2:b4:e9:d7:00:b8:a8:e8:d2:aa:85:66:9b:78:cc:
83:20:1a:0a:ac:61:5e:b6:8d:52:97:d2:38:d0:e4:a3:78:aa:
cf:ff:0e:8f:a2:65:61:62:53:eb:dc:33:e3:c1:48:73:3c:cd:
70:79:c5:e8:cd:eb:4d:fc:99:fb:28:8f:93:58:82:a6:66:24:
39:e8:4b:69:d9:1a:a1:53:05:37:d0:13:ae:64:55:b3:da:f6:
ef:fc:27:1b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE2
MkI5ODExMC8GA1UEBRMoNUMwM0M2QzlDNzI2RkYzRDIwMjc0NzBBMThBMEM4ODIy
MkVDNjZGQjAeFw0yNjAyMTkwNzA0NDNaFw0yNjAyMjYwNzA0NDNaMBgxFjAUBgNV
BAMMDTY5OTZiNjBjLTEyYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2MG+fCq8bceal2bP5TfVTIBDryXwyNXpFL15wIBioyQcyi0P+qQczGwKk3LR0
Fj0ePchoWmvn2JafESxYoHbb/6ql0tQ9T+rzrn1JP01ap6vLRgJ3InT4D4x36PX+
rIKcNE4EvBhr16Mv/Tk+xk+aS+fLcMJ6WgPRdsKpHFd2weAWokn9bF9QqwZj+nUE
0A6a/ECqltZf3yC39HcFK9VqLhxqZD+fajyest9AALgt7HYajmjq7RRLUm+dLc9H
Vl4kWZyel/kObhq8y0e04bR3lVMu/0vvPC6M8HPiWFTwDgSt1Hx6eHcroBeAR4hF
pO1UI7JsBUASq32XopFX8HeDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2NpnGe6A
jFmCTNotyB7HHBe89JIwHwYDVR0jBBgwFoAUXAPGyccm/z0gJ0cKGKDIgiLsZvsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyQjk4LzIzOUNBMjBFREM5
MzExRjA5OTVEODREOTNGNkY1NkJDL1hBUEd5Y2NtX3owZ0owY0tHS0RJZ2lMc1p2
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWEFQR3ljY21fejBnSjBjS0dLRElnaUxzWnZzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy
Qjk4LzIzOUNBMjBFREM5MzExRjA5OTVEODREOTNGNkY1NkJDL1hBUEd5Y2NtX3ow
Z0owY0tHS0RJZ2lMc1p2cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFqbH59rCM4ANNLF54Ce9EdN0n/sOiFt9Q52p2IO7S8Rh+MkLkx/yoeD
B1cZXzPJGuhbEdYtdcZj2hpsEfv9Yvlf/G0TE18U/ksiCuca+3BYXkSU0D2m+Qe8
pESJauR8pfS/uby9kZlzYOI/j92JQt9wXh7lThLzICzHkyNRkL6lBeoc50fRfPx5
tnNWnFtj4Zn3Ej4nBjE2fvY7t9SsksaUReTo18K06dcAuKjo0qqFZpt4zIMgGgqs
YV62jVKX0jjQ5KN4qs//Do+iZWFiU+vcM+PBSHM8zXB5xejN6038mfsoj5NYgqZm
JDnoS2nZGqFTBTfQE65kVbPa9u/8Jxs=
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:25:07 2026 by rpki-client