
$ rpki-client -vvf rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft
File: XctT6r5qkI7KhlLekkgHxQnFLTA.mft (raw, json)
Hash identifier: vdNAxJVn5SaGz83WJk4DjLtZDraiPJuzEuJgz5qRQBk=
Subject key identifier: 5B:81:A4:5F:77:C1:67:C4:76:CC:CC:F5:8E:3D:30:E7:2C:ED:5B:B4
Authority key identifier: 5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30
Certificate issuer: /CN=A918560D/serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30
Certificate serial: 0D76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft
Manifest number: 0D6C
Signing time: Wed 18 Feb 2026 17:40:12 +0000
Manifest this update: Wed 18 Feb 2026 17:40:11 +0000
Manifest next update: Wed 25 Feb 2026 17:40:11 +0000
Files and hashes: 1: XctT6r5qkI7KhlLekkgHxQnFLTA.crl (hash: ed5iwKa7qk8VXFtsmmPod6B50y3Qt5rSUCGkYHlgD4E=)
2: 41A8E738045111EA9C7DF516C4F9AE02.roa (hash: t9j99ouqyAO1DSlTWOraKVE9DSXzBdaScfcUdlzhboc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl
rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:40:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918560D, serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30
Validity
Not Before: Feb 18 17:40:11 2026 GMT
Not After : Feb 25 17:40:11 2026 GMT
Subject: CN=6995f97c-9c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:4c:50:6b:ed:34:68:52:64:34:46:d8:5e:
37:f0:bb:bf:81:9c:f0:3f:ff:28:87:65:92:52:01:
3a:45:5b:5b:18:95:f2:a6:29:ae:45:5d:f9:6a:61:
37:fc:0a:bb:27:95:a9:9a:3f:06:e9:5d:57:00:78:
7d:ab:26:46:ac:72:04:62:8a:ce:79:43:17:2a:e9:
06:ea:9b:6a:9d:1c:51:56:84:2f:e7:ce:e6:38:aa:
99:0c:08:e9:cc:c3:ce:a2:27:0a:51:cb:e8:cd:26:
22:9d:0a:6e:66:ca:e6:03:d0:f2:94:8f:e6:4d:6c:
81:92:4a:48:56:a2:15:37:0d:fa:86:bf:79:b5:3f:
4b:9e:1e:9f:a4:d8:48:f1:dd:91:ac:7a:e3:48:5f:
41:d1:0f:bc:f4:8a:72:91:08:c6:34:54:77:4d:a7:
e6:0d:83:6e:9a:d4:a5:27:41:93:5c:7c:ba:f6:db:
46:8a:d2:a5:02:2e:6a:cd:49:bf:4f:91:fe:cb:07:
63:4d:37:34:6e:f3:54:e6:b6:55:2b:61:2e:48:af:
76:c7:3e:49:6a:04:67:02:7c:f8:a6:a2:4d:b3:1a:
c6:4d:04:74:99:7f:68:51:d2:38:e3:f6:14:0c:df:
01:8b:a6:e7:13:e8:4f:d1:15:86:d0:86:2b:22:5b:
42:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:81:A4:5F:77:C1:67:C4:76:CC:CC:F5:8E:3D:30:E7:2C:ED:5B:B4
X509v3 Authority Key Identifier:
keyid:5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:03:0f:f4:9f:cd:77:86:c6:b3:ca:5d:88:9f:bb:4e:4f:71:
05:94:99:93:e4:7c:04:61:51:80:c2:dd:26:80:32:ad:81:f3:
aa:82:de:f1:12:64:93:8b:6c:82:51:84:48:fd:52:18:56:04:
9d:ae:94:68:91:e9:1a:d5:0d:cd:3f:f4:c5:0a:f4:b8:0e:16:
37:03:d9:04:4c:76:e9:18:1e:03:e1:b5:77:6b:ef:57:66:63:
1a:bf:35:a0:ea:c1:ec:8c:10:f3:16:aa:ff:48:d0:a4:20:dd:
88:89:5d:44:3f:73:c2:f1:fb:39:b5:77:b4:18:62:de:b1:b8:
4f:0a:cf:37:8e:57:53:a6:73:88:79:d7:e0:19:08:94:ef:42:
f6:14:51:b1:14:d2:29:89:b4:63:2f:b4:7f:08:7b:7a:4e:b6:
9e:a9:10:b9:b8:86:15:e8:49:b2:f5:45:9d:7c:c8:cd:59:d6:
92:ae:01:3d:57:91:b3:5c:10:77:9d:45:57:bf:46:58:0a:e9:
c8:92:b9:3e:41:d3:f9:b0:c5:6c:90:ae:07:03:45:8e:f5:c9:
59:11:09:80:79:bd:b0:72:b1:53:5f:12:ba:7b:fd:88:59:dc:
65:f3:7b:81:96:ec:cc:18:7f:68:94:4e:df:0c:89:89:7e:7d:
e6:45:21:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:39:09 2026 by rpki-client