
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
File: cx4n4S-z2wtszAsg8YaAm6CNCRU.mft (raw, json)
Hash identifier: jrVy7JhUgvqSaRBNtqhI4tpklt40DI09VQlTxd57nUM=
Subject key identifier: E4:A3:25:F0:9E:10:83:63:A0:B9:15:F8:FF:3B:1C:43:00:E1:9A:8E
Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15
Certificate issuer: /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915
Certificate serial: 0F97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
Manifest number: 0F84
Signing time: Wed 18 Feb 2026 17:17:18 +0000
Manifest this update: Wed 18 Feb 2026 17:17:18 +0000
Manifest next update: Wed 25 Feb 2026 17:17:18 +0000
Files and hashes: 1: cx4n4S-z2wtszAsg8YaAm6CNCRU.crl (hash: fZGbx+u2e4i0uFL59dFvV8kZHxof4dSyeau8EyY6jMo=)
2: 76C782CC836811E9B8830935C4F9AE02.roa (hash: QWXLnX5JVRbK1O6GJ1E6zIJRQka/yQDbO3hc7/6u/70=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl
rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3991 (0xf97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D58EC, serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915
Validity
Not Before: Feb 18 17:17:18 2026 GMT
Not After : Feb 25 17:17:18 2026 GMT
Subject: CN=6995f41e-e7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4e:e3:e6:25:83:6e:ca:cc:79:9f:9f:e2:ca:
42:48:4d:aa:05:81:56:78:bf:55:7b:cf:20:d9:32:
fa:3c:30:a8:4c:0f:ed:89:76:ca:ec:a7:2a:6c:dc:
70:9f:04:5d:2a:db:0b:33:db:9a:57:ab:06:e9:6c:
5e:22:d5:1d:93:80:6d:8f:c0:f3:b3:f9:85:59:1f:
d8:c5:bc:22:09:b9:a0:e1:d3:12:9e:5d:c0:11:a2:
eb:cb:56:99:b3:e7:8d:d1:03:63:69:bb:b4:28:78:
bc:ab:7d:b1:d0:0c:b8:50:bc:07:64:6d:2c:c3:8d:
ed:ef:43:1e:4f:61:66:ea:76:26:fe:ea:4f:e1:9a:
07:71:77:b3:ac:e8:94:13:b3:64:50:3b:52:74:74:
44:05:e4:0a:c9:76:a9:c8:5e:2f:26:d0:a7:b9:b4:
90:cd:c7:20:3c:3c:d7:d3:dc:c8:8e:d1:bb:7e:4e:
fb:bf:2e:9b:da:25:27:1d:69:6e:d5:c6:56:01:4a:
2a:43:24:d5:54:63:ae:3f:59:36:84:4d:66:0f:2d:
5d:69:17:b3:fd:a6:70:41:6a:fd:88:56:66:c0:46:
bd:32:49:11:e0:d3:eb:d0:5c:63:9b:9e:c7:53:c1:
f0:06:98:c3:e9:9e:b7:59:e1:1d:fc:dd:30:50:e1:
aa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A3:25:F0:9E:10:83:63:A0:B9:15:F8:FF:3B:1C:43:00:E1:9A:8E
X509v3 Authority Key Identifier:
keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f4:e8:89:9a:1c:61:20:d6:99:3a:f4:03:29:ec:a8:90:93:
2e:f1:8c:4b:45:69:ba:ad:7f:e8:a9:1e:fb:50:fc:45:ec:44:
42:22:ff:ec:41:bb:75:2a:a1:7e:c5:8b:6a:8b:55:d7:40:c6:
98:6c:88:5e:6f:3a:9b:39:27:39:a9:77:33:52:ef:1d:5a:73:
28:6c:77:df:3a:82:3d:87:af:27:f2:4f:4a:f7:d2:c0:55:15:
ef:48:d0:c6:ad:da:97:8e:90:90:12:56:29:29:63:fc:63:ad:
33:40:21:fa:21:36:d3:a8:74:0b:f8:a3:2c:79:d3:d3:d8:4a:
8f:2b:eb:3f:8f:6b:ed:78:10:71:e4:bd:72:78:50:7d:b1:c4:
7b:9e:e1:10:d9:21:3b:04:bd:d8:8c:76:b4:a7:ff:0c:fa:b8:
e6:ec:35:4b:76:fd:ee:44:dd:7a:15:57:02:86:22:37:ba:45:
2e:76:79:98:6e:40:b1:bc:b2:0d:54:b8:1a:3e:00:06:ec:a6:
4e:4a:7b:f1:6d:a8:91:d7:a7:e3:82:78:9b:7f:7f:db:2e:20:
5d:77:59:fa:3f:99:c9:49:85:d1:98:b6:c4:3e:95:50:0b:9a:
8e:35:10:b5:95:28:b4:b5:db:91:6a:60:f4:94:91:78:5b:56:
ab:36:a4:96
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RDU4RUMxMTAvBgNVBAUTKDczMUUyN0UxMkZCM0RCMEI2Q0NDMEIyMEYxODY4MDlC
QTA4RDA5MTUwHhcNMjYwMjE4MTcxNzE4WhcNMjYwMjI1MTcxNzE4WjAYMRYwFAYD
VQQDDA02OTk1ZjQxZS1lN2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApU7j5iWDbsrMeZ+f4spCSE2qBYFWeL9Ve88g2TL6PDCoTA/tiXbK7KcqbNxw
nwRdKtsLM9uaV6sG6WxeItUdk4Btj8Dzs/mFWR/YxbwiCbmg4dMSnl3AEaLry1aZ
s+eN0QNjabu0KHi8q32x0Ay4ULwHZG0sw43t70MeT2Fm6nYm/upP4ZoHcXezrOiU
E7NkUDtSdHREBeQKyXapyF4vJtCnubSQzccgPDzX09zIjtG7fk77vy6b2iUnHWlu
1cZWAUoqQyTVVGOuP1k2hE1mDy1daRez/aZwQWr9iFZmwEa9MkkR4NPr0Fxjm57H
U8HwBpjD6Z63WeEd/N0wUOGqNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSjJfCe
EINjoLkV+P87HEMA4ZqOMB8GA1UdIwQYMBaAFHMeJ+Evs9sLbMwLIPGGgJugjQkV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThFQy9BRjUwQTBFODgz
NjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3dHN6QXNnOFlhQW02Q05D
UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N4NG40Uy16Mnd0c3pBc2c4WWFBbTZDTkNSVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NThFQy9BRjUwQTBFODgzNjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3
dHN6QXNnOFlhQW02Q05DUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBq9OiJmhxhINaZOvQDKeyokJMu8YxLRWm6rX/oqR77UPxF7ERCIv/s
Qbt1KqF+xYtqi1XXQMaYbIhebzqbOSc5qXczUu8dWnMobHffOoI9h68n8k9K99LA
VRXvSNDGrdqXjpCQElYpKWP8Y60zQCH6ITbTqHQL+KMsedPT2EqPK+s/j2vteBBx
5L1yeFB9scR7nuEQ2SE7BL3YjHa0p/8M+rjm7DVLdv3uRN16FVcChiI3ukUudnmY
bkCxvLINVLgaPgAG7KZOSnvxbaiR16fjgnibf3/bLiBdd1n6P5nJSYXRmLbEPpVQ
C5qONRC1lSi0tduRamD0lJF4W1arNqSW
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:23 2026 by rpki-client