
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft
File: xhcbemowv7ipfMAGg1yMk60C3k4.mft (raw, json)
Hash identifier: +uH6D0qsGoeXfnen7P7trOQycy30fxudIPzfFc3U2hw=
Subject key identifier: CA:45:EF:F1:2A:7B:B6:08:51:71:66:EF:30:C2:77:0F:AC:45:9E:0A
Authority key identifier: C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E
Certificate issuer: /CN=A91A80CB/serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E
Certificate serial: 0222
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft
Manifest number: 021F
Signing time: Thu 19 Feb 2026 01:33:23 +0000
Manifest this update: Thu 19 Feb 2026 01:33:22 +0000
Manifest next update: Thu 26 Feb 2026 01:33:22 +0000
Files and hashes: 1: xhcbemowv7ipfMAGg1yMk60C3k4.crl (hash: 47FSy8QT1EN9X7OLfRT+hviV0IiBnKV6SijyLjUymhQ=)
2: 48485D88CC6411EDA7970484C4F9AE02.roa (hash: 2K9kOKHGwBClsOCjMWjBt/lsIDrWFOJQCQhQXvkzECo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl
rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546 (0x222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A80CB, serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E
Validity
Not Before: Feb 19 01:33:22 2026 GMT
Not After : Feb 26 01:33:22 2026 GMT
Subject: CN=69966863-6576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f2:d2:21:a7:0b:c2:97:de:ca:c5:b7:cb:7d:
c4:c2:da:6f:6b:35:46:c2:ed:d9:fe:8f:fd:72:97:
22:10:f0:10:6d:cc:5f:2e:67:68:f3:99:65:89:c6:
1f:a7:93:ae:4b:3c:0a:dc:c0:91:ab:88:f9:02:66:
0c:b0:c4:41:60:e7:3d:aa:03:b1:c7:f1:ca:cc:05:
2e:3d:6c:d1:4c:54:de:ad:cd:5d:57:4d:51:b7:28:
ba:4a:60:dc:d4:f8:ff:1c:52:f7:90:37:c8:76:80:
29:b0:ef:97:bb:df:2e:fa:d0:d2:ed:b8:a5:9e:38:
0f:be:07:4d:46:dd:6a:67:0b:b8:3e:39:2b:de:9f:
66:06:20:a3:e6:74:7a:07:78:d7:08:93:52:af:ca:
0d:6c:63:25:e4:c9:f7:9f:3d:19:92:ac:c6:bd:30:
da:fd:18:09:05:c1:d1:af:63:87:f3:ee:fc:85:17:
61:fe:2f:fa:e3:f1:6a:d5:46:b4:e3:46:06:c0:f0:
bf:28:f5:77:0b:fa:1d:0c:b1:a2:6e:28:50:6b:fb:
a4:a7:68:06:0a:7a:7f:98:b0:3e:5b:9b:26:07:08:
ba:65:09:4c:b0:32:ce:9c:03:cc:7a:ae:2c:a2:72:
33:33:d8:10:60:1f:3b:df:4c:e1:96:11:4c:f2:3c:
74:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:45:EF:F1:2A:7B:B6:08:51:71:66:EF:30:C2:77:0F:AC:45:9E:0A
X509v3 Authority Key Identifier:
keyid:C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:22:34:a4:dd:14:3e:cb:e8:39:07:a9:34:47:82:aa:75:9e:
c9:24:97:cc:c7:d3:b7:96:21:e7:03:64:d7:86:c2:b1:ab:b0:
04:b0:e5:fd:c9:cd:c9:2d:70:69:e4:8b:80:1d:3b:5e:6e:f2:
2e:c1:14:8c:45:fa:bc:cd:3e:bb:89:a9:db:d5:4f:8b:7f:75:
ab:1e:aa:fe:55:a7:0b:fd:3b:d5:52:ea:78:22:cd:f6:6d:18:
83:80:66:8f:5a:00:da:85:fe:ff:c3:6c:bd:6a:4e:73:e0:ad:
59:fe:29:85:1f:38:b6:83:5f:33:d1:54:ff:33:a7:17:26:62:
75:0f:00:e1:c4:61:da:4a:70:1b:3a:73:6d:4c:7d:fb:9d:67:
b5:75:28:65:a7:bc:d2:ed:6c:d4:64:18:a2:40:83:cb:84:35:
7b:fd:4b:ca:ae:db:00:41:99:c9:fb:b6:c9:fd:ea:a8:48:8e:
9f:64:0c:09:a3:3a:da:e1:f5:1d:15:6d:ac:73:a8:fb:02:d9:
dd:53:a6:1d:55:28:13:ec:e2:1d:70:3b:c0:36:a0:ab:81:5b:
20:9d:86:df:ec:ad:98:1e:bf:c2:c7:1f:0b:a6:ae:38:5e:9e:
d8:70:74:22:54:38:72:47:83:d1:d3:35:5e:f2:f9:a9:61:35:
9b:6e:78:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:44:44 2026 by rpki-client