
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
File: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft (raw, json)
Hash identifier: pYN6fD5OSW9iGMXPr+n8Gn4xi/prvhufZVFdI/nGnsE=
Subject key identifier: 96:37:0B:33:57:31:08:4D:1F:97:31:AE:31:78:AA:AB:E6:9F:18:64
Authority key identifier: A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76
Certificate issuer: /CN=A9199DF5/serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76
Certificate serial: 039F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
Manifest number: 039A
Signing time: Wed 18 Feb 2026 23:59:24 +0000
Manifest this update: Wed 18 Feb 2026 23:59:23 +0000
Manifest next update: Wed 25 Feb 2026 23:59:23 +0000
Files and hashes: 1: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl (hash: 9LYl+s75Izhayd812vHqqEVFVjkCQb0+uMPEx+VA/Fk=)
2: B6EB7E8ED14511EC89527642C4F9AE02.roa (hash: zOa4PF6DbTNRPznC3F2BR2cHewtdmnvs1jqCDBbkuO0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl
rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 927 (0x39f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199DF5, serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76
Validity
Not Before: Feb 18 23:59:23 2026 GMT
Not After : Feb 25 23:59:23 2026 GMT
Subject: CN=6996525c-3c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f8:3e:f9:b5:d1:6e:4b:47:01:7a:a5:46:b3:
6f:f1:4d:2f:0a:d6:b7:ed:83:48:34:82:a0:f1:82:
b6:23:3d:0c:f5:53:27:1f:9c:d1:19:aa:e6:c0:3d:
38:ad:3b:6b:b0:28:51:62:1a:e3:76:e4:b0:80:57:
35:73:01:d9:2c:59:68:fd:2e:b1:68:49:3c:2c:2d:
47:5d:a7:ea:e1:87:ed:14:b7:fb:f8:39:86:b0:9b:
9f:90:f1:a6:ff:49:de:b4:51:f0:aa:0e:f3:d2:43:
e3:41:6a:da:10:1f:e9:c4:11:04:0a:08:74:10:c0:
b0:5b:6e:48:fd:1e:59:1a:4a:21:4e:07:11:cf:6c:
5e:5e:cd:e7:e1:2d:3c:0d:1c:74:83:ce:9e:5c:ab:
ab:97:8d:6f:99:9c:c4:7b:d8:31:00:82:c2:d5:02:
f0:ef:89:66:fd:23:99:2d:cd:a5:1a:2d:b9:38:e9:
c7:43:87:38:94:dd:d3:c3:46:e4:fa:aa:b0:da:12:
41:ea:25:68:06:e5:69:64:f8:b6:0a:ad:0c:d7:8f:
03:e7:08:6d:dc:b0:35:32:5a:37:b4:2b:a1:a5:bf:
2a:23:63:18:78:c0:fd:ee:fd:e1:1e:24:50:8c:2d:
09:e4:c0:82:69:5a:01:b2:7c:8a:2e:36:4e:03:54:
cd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:37:0B:33:57:31:08:4D:1F:97:31:AE:31:78:AA:AB:E6:9F:18:64
X509v3 Authority Key Identifier:
keyid:A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:1f:ae:84:20:f4:27:4e:81:b2:b1:e3:0f:d9:2a:e6:b9:6a:
de:73:2a:c9:35:13:b0:b1:5d:97:7c:51:fa:27:39:e8:33:08:
7b:df:aa:c5:ff:1f:f0:d8:c3:dc:1e:a1:42:90:68:9f:b4:a3:
b2:9e:94:25:b2:86:ed:11:48:c3:63:6c:a4:00:60:ed:b6:29:
c4:84:fd:08:0b:b7:56:90:ce:57:1a:95:2c:31:14:a5:7e:bf:
8d:a2:2a:f5:d6:24:9d:22:58:21:4f:48:15:20:ce:36:f8:92:
fa:c3:2d:fb:bd:48:30:d6:64:44:17:98:b9:c2:c6:c8:52:8d:
7b:bc:f5:67:71:25:06:0f:4a:57:ca:a6:5a:ce:f3:7a:5c:9e:
34:8a:e6:30:dc:7b:20:97:0e:6b:83:7a:95:a2:59:95:ca:a3:
b8:ea:68:34:7a:a6:69:fc:a5:c5:2c:98:95:36:06:dd:b3:3f:
a7:cb:bc:bb:2c:f0:3e:ab:96:69:da:57:2f:21:b0:0b:bf:fe:
c3:e1:09:c9:00:90:a3:0c:e7:b7:4f:57:11:1e:5c:b7:0c:51:
d0:c8:c4:2e:69:aa:e1:b2:d6:39:07:c3:24:54:33:b8:b2:a4:
50:a7:40:ec:22:dc:a1:b4:16:af:7c:23:3c:4c:d9:2c:05:78:
c0:21:77:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:28:27 2026 by rpki-client