
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft
File: XTDuvxHkF41iO-G95Nu0y1nMhDc.mft (raw, json)
Hash identifier: wvVVQR/ioB0aluQ7BVmKfpwbCkeSUZKB8pPZvIN43S0=
Subject key identifier: 38:1E:F0:B7:8E:A2:E3:DB:2E:9B:C7:BF:0C:FC:9B:8E:66:39:FD:A1
Authority key identifier: 5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37
Certificate issuer: /CN=A91AB1C2/serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft
Manifest number: 26
Signing time: Thu 19 Feb 2026 07:05:11 +0000
Manifest this update: Thu 19 Feb 2026 07:05:10 +0000
Manifest next update: Thu 26 Feb 2026 07:05:10 +0000
Files and hashes: 1: XTDuvxHkF41iO-G95Nu0y1nMhDc.crl (hash: NdlcAzkHPKIvpbXx4zrY8XUDGxVFPNlCb61/pyH2NwQ=)
2: 253978EAE0FC11F0B50D6A7D5F6F56BC.roa (hash: vY+eyQ8/qCQ8QT3QSBagytHOVQX4pPB3HnOj3X62RNk=)
3: 24992E62E0FC11F0B50D6A7D5F6F56BC.roa (hash: xFgB7EH2QxxLlf3n0UJ+DMqo3db1de33t4nREaUSocw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl
rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB1C2, serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437
Validity
Not Before: Feb 19 07:05:10 2026 GMT
Not After : Feb 26 07:05:10 2026 GMT
Subject: CN=6996b626-cd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:8c:04:61:53:05:de:1a:3c:c9:26:89:b8:
18:2d:fc:dd:db:8d:fa:ea:4a:5a:33:2b:a2:c1:1a:
62:5f:28:bf:28:9c:9a:73:cb:8d:52:bc:e6:94:f8:
6b:16:90:f2:1c:01:7e:6c:c4:96:a8:c8:9e:cf:ba:
82:0e:66:0b:e0:6f:b8:83:56:e8:c8:95:a4:4e:7d:
4f:b0:a6:74:7c:d0:10:2b:75:b9:71:b4:98:89:89:
16:a4:72:9b:93:b4:1b:f8:8e:ca:eb:a4:5e:df:3c:
21:ee:40:00:d8:0c:ed:16:58:2b:bd:16:54:84:f6:
50:26:93:39:fd:e4:e3:e5:b2:bf:3d:1e:ac:63:c0:
1c:f6:e0:aa:60:d2:d5:e5:43:bd:e4:b0:af:46:70:
ee:1f:2f:1e:79:3c:38:d1:cf:f1:1e:66:c3:01:18:
c7:56:2a:8e:3f:a6:ac:f7:13:5a:b3:9e:b3:85:f2:
a4:77:bf:b5:e6:36:90:15:94:67:f9:58:b8:f4:b3:
01:61:53:66:a1:a7:a2:eb:00:a3:0d:04:f8:57:db:
99:dc:47:74:d7:d0:d8:94:c8:bf:56:22:f3:8a:00:
1a:3c:2d:95:6e:76:d0:ad:64:44:87:4c:83:48:73:
f5:9d:39:42:ea:38:47:3a:e9:9d:85:b2:a5:e9:24:
aa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1E:F0:B7:8E:A2:E3:DB:2E:9B:C7:BF:0C:FC:9B:8E:66:39:FD:A1
X509v3 Authority Key Identifier:
keyid:5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:40:9d:20:ad:86:89:56:83:bf:bc:df:58:26:4b:8a:06:ba:
79:c5:86:2e:bc:06:81:2d:c4:57:35:e8:12:49:c9:a4:9a:dd:
cb:6a:b4:8a:73:ad:2b:d1:5a:13:ef:36:27:fb:15:fa:3e:52:
a7:82:0c:c6:85:0a:dc:b1:90:a5:fc:a9:f6:99:b7:50:21:74:
c0:42:cc:94:b2:a2:51:cb:9b:af:b4:09:43:8c:1c:b0:7b:28:
7e:49:60:0a:7a:a2:75:9a:fd:cf:62:94:ef:f9:95:4c:6a:60:
07:a6:dc:bf:53:48:8e:43:9e:e8:c7:42:b1:10:1d:97:15:5b:
f4:94:98:1f:1f:3c:a8:bb:a5:4e:b4:fe:6f:c1:77:16:ef:69:
47:a1:18:12:ed:de:d4:b7:32:38:20:6b:5e:10:04:89:f5:04:
6f:48:38:63:2a:7d:d8:25:bf:d7:de:5e:24:f6:db:4a:ad:de:
cd:60:b1:c3:5d:e4:1b:19:07:86:5e:46:0d:2c:79:37:35:93:
98:e4:ce:3c:af:d6:b3:1b:cf:bf:64:55:59:9c:f0:38:94:b0:
a4:58:bd:83:7a:8b:5c:16:84:fc:11:bc:d6:4a:bc:46:59:c5:
32:00:ee:b9:ca:f2:24:1a:7a:08:17:c2:e8:15:76:3a:ff:9d:
84:ab:a6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:14:19 2026 by rpki-client