
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft
File: XYnzqvmxOgelsmTy3rpk1cUAZRw.mft (raw, json)
Hash identifier: S51o2GpD8G36ccFRtLJyO60KTF7J6RU/p9wrtGidaTk=
Subject key identifier: A6:B0:1D:E1:DA:06:85:20:69:73:35:EA:A0:0C:AE:D0:2A:A0:94:EC
Authority key identifier: 5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C
Certificate issuer: /CN=A91D5240/serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C
Certificate serial: 024E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft
Manifest number: 0243
Signing time: Thu 19 Feb 2026 01:15:03 +0000
Manifest this update: Thu 19 Feb 2026 01:15:03 +0000
Manifest next update: Thu 26 Feb 2026 01:15:03 +0000
Files and hashes: 1: XYnzqvmxOgelsmTy3rpk1cUAZRw.crl (hash: 7twzTv5F7nhBLAJrUYDPRmTaNOcXwWGBYNLKPXbDRYg=)
2: 9FBA5FCCA63911ED874E6630C4F9AE02.roa (hash: lCV4Wc/C2vG49K6yvqo7KO+pzcjtBqjnxvlmY9cM+oI=)
3: 9EA7B7D8A63911ED874E6630C4F9AE02.roa (hash: 6o0EUZvJBerht1y6bzh1g89SRPPeQ5cLEU5AQhJzOAU=)
4: 5DCE1A1AA63C11ED9306165AC4F9AE02.roa (hash: QPGj0eJqXgnGukiRaT/QHSiAaiIAXjZCnZKqvteNQAI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl
rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:15:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590 (0x24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5240, serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C
Validity
Not Before: Feb 19 01:15:03 2026 GMT
Not After : Feb 26 01:15:03 2026 GMT
Subject: CN=69966417-409b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:05:de:d5:8f:12:83:3f:72:b6:d5:4f:b4:
d5:16:39:68:53:e9:f0:a8:65:fc:09:5d:a3:61:b1:
0f:b8:38:c6:77:da:5d:0a:a9:31:c1:93:32:41:26:
3f:ce:f3:45:f7:a7:a1:79:86:be:7a:be:84:71:3f:
f5:b5:76:5b:0b:81:5b:c9:3b:26:21:35:40:94:35:
1b:57:2b:57:ea:b5:b8:f2:30:0a:dc:a7:df:88:57:
95:c3:90:04:7b:b9:83:a5:31:6c:bc:8f:d1:4f:bd:
40:e9:3c:d5:7e:ba:c9:84:10:c7:0a:7a:b3:7e:83:
86:16:e7:08:47:2d:e4:94:db:4d:2e:66:00:d5:c6:
e9:16:09:6d:25:0c:95:df:a5:d6:01:92:88:7b:ec:
3c:77:3d:15:bb:34:a3:b2:3b:45:66:f4:d1:68:b3:
c4:0e:23:44:e3:7f:d7:c5:3e:c7:bb:61:29:3b:15:
55:1a:c1:cc:92:06:c8:71:92:32:17:ff:3b:fb:7a:
77:f1:67:95:4c:ce:6e:ea:54:ab:f8:18:a6:8c:29:
62:b8:41:a6:b7:df:93:f5:03:a8:6b:b1:fd:ad:bd:
50:2d:5d:b2:ea:ae:39:68:37:a8:5f:6d:2c:6f:17:
16:43:c8:7e:5c:7b:d9:57:8c:ec:1e:a1:4f:30:d3:
1b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B0:1D:E1:DA:06:85:20:69:73:35:EA:A0:0C:AE:D0:2A:A0:94:EC
X509v3 Authority Key Identifier:
keyid:5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:df:ae:d3:06:23:13:96:fc:86:85:33:0d:09:42:54:01:b3:
7c:3c:1a:50:1d:9a:8e:67:d7:0c:55:43:e6:05:0f:60:3f:70:
ad:a6:e3:41:20:62:12:78:93:d2:1f:83:19:1d:e1:bf:52:0c:
e7:ff:a8:59:93:da:9b:ba:e3:d2:09:10:b4:df:11:b8:35:da:
ed:e9:20:62:49:d8:1e:d8:b4:fb:5d:b2:1b:25:83:23:65:ff:
a6:b5:48:b2:b9:23:37:e1:c7:fc:74:21:c1:b7:71:3e:54:3f:
c8:27:90:59:3b:de:e8:01:90:dc:1a:b3:90:9f:c2:6c:45:3b:
af:fd:b9:75:39:84:ea:97:58:38:35:76:de:84:f7:25:10:0f:
d6:af:32:c9:38:04:07:7d:b9:bb:11:e9:41:2d:57:20:ba:fe:
e3:03:c3:a7:5f:12:aa:e0:a3:2f:6a:a5:91:47:9b:b1:47:8f:
8c:25:63:2f:a6:43:77:25:41:c3:95:ab:42:96:33:0f:e0:ab:
fe:da:ff:7f:b6:ff:c1:53:61:e6:b3:78:41:9b:b4:4e:5f:ce:
d1:9a:3a:47:f6:d2:41:35:c4:c9:f7:3a:3e:cc:1d:b5:d1:dc:
4b:7c:d0:c7:5c:5b:da:05:0b:13:71:00:5c:09:57:81:88:45:
26:53:f0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:18 2026 by rpki-client