
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft
File: XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft (raw, json)
Hash identifier: IDaBUQb2FmDR6qRfNVM5xLZYyYNeRBnAByX2DC39lDs=
Subject key identifier: 0F:73:88:8F:54:5B:93:58:23:07:36:6B:E4:D9:C0:BF:46:34:1F:5C
Authority key identifier: 5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00
Certificate issuer: /CN=A91D28E1/serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700
Certificate serial: 019F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft
Manifest number: 019B
Signing time: Thu 19 Feb 2026 02:50:24 +0000
Manifest this update: Thu 19 Feb 2026 02:50:24 +0000
Manifest next update: Thu 26 Feb 2026 02:50:24 +0000
Files and hashes: 1: XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl (hash: X/41tkyzrXvA4qNfmskL12FhMKdjIZxjxrqhcwl+P/I=)
2: 0A576F089A4C11EEBD557E12C4F9AE02.roa (hash: DEN1WpJkF7KEBPtyWLNA539o6YV36ND+eTTHH4uvqCU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl
rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:50:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415 (0x19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D28E1, serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700
Validity
Not Before: Feb 19 02:50:24 2026 GMT
Not After : Feb 26 02:50:24 2026 GMT
Subject: CN=69967a70-d3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:99:ff:51:88:32:a8:46:bd:1f:97:7f:27:
4b:a3:06:4f:56:5f:27:6e:29:df:ac:22:1e:07:0d:
3a:43:cd:78:4c:66:08:ac:75:16:79:aa:bc:85:55:
04:b4:a6:e1:93:fc:7b:53:6f:1e:68:06:f8:d6:a9:
8c:c9:86:05:d5:bb:e8:0f:4d:c9:23:8a:e1:54:8b:
6e:02:34:37:7c:47:94:cb:ea:25:c5:e5:40:4b:90:
0c:2a:0b:ce:07:4d:fe:41:9d:11:52:4f:16:6e:3e:
d4:d6:3a:4a:38:95:9f:a7:24:bf:28:a9:2c:55:49:
31:25:5e:a3:8a:ba:6a:1c:19:cd:fd:91:22:27:5a:
ef:80:1e:a0:50:21:f3:1d:43:8d:ee:fb:2e:ed:85:
d0:15:72:ae:c3:4f:13:5b:e4:f9:00:f2:fd:75:30:
7e:a3:02:c1:be:dc:f9:77:f1:1e:f7:2a:f6:01:18:
aa:c1:66:e9:f0:cb:8d:2b:e2:6f:7b:ce:bc:fc:81:
16:2f:3e:f9:1f:bf:48:56:cc:5e:29:fb:5b:e2:23:
e9:36:01:96:cc:64:e2:7f:3d:eb:27:bd:44:66:ed:
3d:47:d8:6f:c7:24:95:30:b9:72:95:9f:1a:5b:d1:
0a:dd:2a:ff:9e:1a:3e:69:a2:49:70:c4:14:4f:e5:
a8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:73:88:8F:54:5B:93:58:23:07:36:6B:E4:D9:C0:BF:46:34:1F:5C
X509v3 Authority Key Identifier:
keyid:5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:82:c3:10:3f:da:ed:04:cf:c4:86:5c:7d:c8:0f:3a:40:18:
20:8e:55:16:8f:d8:16:09:e9:09:15:31:59:04:87:65:50:3f:
5c:a5:5d:6d:22:0d:db:74:17:49:78:26:b6:9c:b3:ba:4f:30:
01:df:4f:c9:36:08:26:16:1c:a7:b3:09:ce:7f:f3:c0:ba:fb:
7d:98:d0:b5:fd:22:f3:ba:1b:02:99:18:cc:89:72:34:37:d3:
14:ae:ce:96:01:f7:48:1e:de:5d:f4:22:fa:0e:f4:24:49:60:
19:ee:a1:9e:6f:ca:06:0b:56:df:c7:58:dc:b2:4c:72:4d:29:
4a:60:62:1f:45:dc:94:69:ea:39:07:9e:1f:cf:d6:b2:a9:25:
cf:36:9d:d1:d3:8e:83:31:62:08:51:57:66:5b:f1:74:21:39:
cb:33:a1:09:99:39:29:a7:59:ee:d9:a6:4f:7e:85:fe:52:04:
9b:79:15:5a:37:d0:fe:af:76:b9:3a:c5:28:73:39:d0:7f:94:
48:f6:50:e7:38:8b:da:a7:bb:00:29:5a:3c:13:b1:49:07:e6:
0c:23:e4:26:91:34:41:a9:ff:3e:c6:54:29:ec:b1:c2:f4:32:
3f:9e:65:94:19:0f:8c:f9:eb:4e:c7:70:66:c5:6a:54:75:d7:
38:f7:5a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:13:19 2026 by rpki-client