
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft
File: xQo91YIWmexaCS_v5V5AfVvQy6U.mft (raw, json)
Hash identifier: dSc3TRrl03N2iPn7jrgU5KXSuJ8uVW2F13clT+sMFLo=
Subject key identifier: B5:B9:DF:14:2B:65:68:7E:3F:3B:AC:78:A1:84:71:58:8D:86:40:05
Authority key identifier: C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5
Certificate issuer: /CN=A91C2E41/serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5
Certificate serial: 3509
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft
Manifest number: 3507
Signing time: Wed 18 Feb 2026 15:03:06 +0000
Manifest this update: Wed 18 Feb 2026 15:03:06 +0000
Manifest next update: Wed 25 Feb 2026 15:03:06 +0000
Files and hashes: 1: xQo91YIWmexaCS_v5V5AfVvQy6U.crl (hash: seMFWHPfmxXeG4Jga/IyHmTvuknfJjO3ksJuitwHU90=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl
rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13577 (0x3509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2E41, serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5
Validity
Not Before: Feb 18 15:03:06 2026 GMT
Not After : Feb 25 15:03:06 2026 GMT
Subject: CN=6995d4aa-9253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b5:aa:8e:7d:36:ea:73:5c:fa:37:07:ed:3e:
41:3f:dd:3e:68:ec:92:eb:3c:84:27:d7:49:56:77:
f5:fd:78:f7:ce:09:79:3e:99:81:87:9a:2b:42:0e:
fe:b4:e0:1a:bf:63:ea:70:5b:4f:ef:7c:8a:2d:74:
4e:a2:22:28:07:35:54:b1:37:03:a9:50:2e:32:a8:
34:ff:9b:c5:61:a4:2f:9c:7f:6e:83:6d:5d:09:fb:
cd:6f:91:0a:82:b4:aa:95:2a:32:7e:ff:cd:b4:ec:
cb:ad:b2:b6:93:e7:2d:72:bc:af:b7:8b:85:bf:79:
a3:c0:e8:41:0d:96:37:73:62:3f:db:33:da:ce:6e:
2b:5e:e3:d0:22:94:ec:e7:55:53:65:0d:93:22:94:
a4:d3:a2:e4:0e:b5:8b:a1:f9:99:e0:87:ab:7b:2d:
f1:2a:6c:2c:d1:93:52:8a:3a:e2:8f:2c:d8:a8:63:
75:e2:1d:6a:df:4c:1d:79:92:d4:6e:b5:d5:61:5b:
2c:ae:85:f1:0c:78:48:10:11:f5:5b:86:98:0d:c4:
d1:56:38:f6:ed:5c:9b:a2:4d:27:de:4b:c1:7e:e7:
12:ec:fa:be:eb:58:5d:71:fc:fd:69:a8:27:17:32:
c7:f3:62:d9:56:3e:a1:be:f6:69:16:7c:76:e5:67:
eb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B9:DF:14:2B:65:68:7E:3F:3B:AC:78:A1:84:71:58:8D:86:40:05
X509v3 Authority Key Identifier:
keyid:C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1c:71:a2:03:3f:aa:9a:eb:50:37:82:45:c0:6e:57:e1:71:
c3:84:48:7b:53:c4:e9:8a:eb:47:ec:eb:ec:e5:d3:5e:ac:0b:
b5:e2:a7:e1:a6:c8:56:88:85:0b:01:79:3f:3e:9f:d4:c9:f3:
7a:e6:bc:6a:9a:27:26:9b:88:39:f1:a1:6d:fe:5f:43:b9:3a:
64:4a:e4:9c:df:49:dc:35:aa:55:21:ae:b4:15:0c:00:05:1c:
8b:ec:8e:bd:6f:df:aa:74:77:84:b1:76:a5:a7:98:47:a4:85:
db:0e:6e:0b:20:ee:90:6f:67:70:82:68:6a:1e:56:65:97:9b:
a2:d9:c0:d4:05:32:dd:8a:ef:00:4a:91:a9:50:f9:80:ba:b5:
61:b2:17:aa:d1:4d:53:b9:43:d9:a2:37:f5:bf:e1:00:3d:f0:
e9:ab:bf:1e:d4:f8:2a:cb:28:d9:c5:34:df:24:c4:91:b5:13:
24:6b:96:e3:cc:f6:bf:4a:8d:36:1c:89:e9:67:e4:51:54:dd:
fb:da:5a:96:5d:15:0e:76:6b:61:d4:4c:e7:64:ef:e4:52:b7:
eb:36:5a:32:d7:96:fc:e5:dc:23:34:bb:58:e8:3d:a6:2e:a7:
d8:6e:a5:a4:ce:f1:4e:0a:e0:fb:4e:30:5c:39:dd:2a:40:fb:
09:de:fa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:18:08 2026 by rpki-client