
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
File: xPuRgT57oJnZHpxIFyCUuZBcDxE.mft (raw, json)
Hash identifier: kZl6DaHN5/TA5RXFje38SGawhsz02T24CHBC/uk/j+s=
Subject key identifier: 07:FC:E7:F8:DB:45:81:76:54:70:20:1E:52:3A:E2:31:16:7E:C9:7E
Authority key identifier: C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11
Certificate issuer: /CN=A919B3BC/serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11
Certificate serial: 1EB8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
Manifest number: 1E99
Signing time: Wed 18 Feb 2026 15:54:04 +0000
Manifest this update: Wed 18 Feb 2026 15:54:04 +0000
Manifest next update: Wed 25 Feb 2026 15:54:04 +0000
Files and hashes: 1: xPuRgT57oJnZHpxIFyCUuZBcDxE.crl (hash: odGYjqyLOUqtiH/5R9c5P8u1NppWvP65opGp7gvrmx0=)
2: 6553E9461A0611F08E7AD42AC4F9AE02.roa (hash: gPUSFmbihFfUmrLnrNcUaLZQc5vn//4bgSoy5gzJdZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl
rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7864 (0x1eb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B3BC, serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11
Validity
Not Before: Feb 18 15:54:04 2026 GMT
Not After : Feb 25 15:54:04 2026 GMT
Subject: CN=6995e09c-fcde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:18:66:75:e2:fe:b5:26:4b:79:98:5c:ef:2e:
a6:d1:fe:9b:9b:d8:df:25:39:bd:6e:69:a6:c1:de:
cd:04:f5:a1:d4:90:3f:2d:3e:b9:73:34:07:8f:d8:
13:57:55:50:13:4f:67:11:fa:e9:96:ee:0a:5c:41:
2c:3b:e3:b9:35:5b:62:11:67:0e:5e:a2:ce:89:eb:
20:b5:77:be:d9:25:71:8e:d6:99:b7:38:10:a9:01:
69:71:20:c5:bf:c3:22:12:74:90:08:77:28:6a:6b:
c2:d6:24:36:52:90:2a:22:a7:87:4c:a5:a2:ea:45:
c7:f1:e8:91:5c:51:fe:2b:83:b9:e8:3d:57:e4:59:
f4:8a:4d:85:43:7b:51:de:3d:a8:a8:98:df:98:03:
c5:24:23:dd:d8:a4:ee:68:72:2d:20:42:da:b9:65:
a4:84:1d:4d:be:64:d4:42:6b:6c:ef:85:c2:84:1c:
02:00:99:39:24:15:24:1d:97:28:1f:ee:f3:57:91:
f4:a9:60:cf:aa:3b:d6:71:12:6e:0d:52:7a:cf:36:
85:ce:ac:74:67:ca:0c:c5:89:c8:11:d0:c7:63:e2:
78:51:88:6e:e5:bb:35:23:44:d4:8a:94:b6:7e:6e:
db:02:88:87:0b:b0:18:e3:81:73:57:a8:b4:a1:64:
e6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FC:E7:F8:DB:45:81:76:54:70:20:1E:52:3A:E2:31:16:7E:C9:7E
X509v3 Authority Key Identifier:
keyid:C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:d1:49:05:02:c7:16:de:cf:91:1d:bf:6a:2e:84:db:23:2c:
16:e9:d2:75:de:dd:92:d5:26:fd:e7:3a:0f:25:c3:3f:06:25:
f3:55:cd:44:07:cc:21:b1:99:5d:c3:a0:20:cb:cf:69:1e:a2:
b9:0d:7f:61:7c:3f:07:20:3c:80:62:23:cc:81:8e:51:8b:e9:
e0:e7:1c:03:b3:98:5e:70:2c:1d:15:cb:92:c5:e9:63:ff:7e:
08:81:5c:f4:1c:da:ac:9b:60:66:cc:7d:6d:76:46:e6:1c:c2:
12:48:bd:d0:cd:9a:d5:cd:f6:8e:e1:5e:97:14:4a:25:7a:02:
d4:ef:eb:95:47:b8:18:77:ab:9c:9d:f8:e2:20:9a:fb:99:0a:
fa:66:79:76:a7:7f:51:c5:a7:c1:42:f1:5f:2d:5a:f1:11:4a:
14:73:c5:d5:64:16:51:23:b2:cb:5f:68:08:33:6c:49:26:c8:
9b:bd:f9:53:15:61:ab:e6:86:a6:3d:4f:ac:e8:4d:32:fb:6a:
0b:a4:13:68:00:25:07:9f:e2:d1:d1:db:f5:ee:b2:8a:99:ce:
b9:98:02:1a:38:01:17:73:37:96:ed:d0:f5:4d:a6:f5:58:47:
3b:d9:42:cc:a3:75:3c:bf:64:2c:eb:78:34:72:75:40:c6:b9:
da:21:86:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:42:00 2026 by rpki-client