
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
File: XOe82cbkE4HMCvkJkN2gNpOF5lU.mft (raw, json)
Hash identifier: OfalZNS+DSaQ2hT3B+mAZjLPEsK15qdU+hfZMvGEeHs=
Subject key identifier: 88:E7:82:90:1B:66:11:9C:EA:69:54:B3:96:59:21:6B:E4:6D:E9:DB
Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55
Certificate issuer: /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655
Certificate serial: 04FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
Manifest number: 04EF
Signing time: Wed 18 Feb 2026 23:00:30 +0000
Manifest this update: Wed 18 Feb 2026 23:00:29 +0000
Manifest next update: Wed 25 Feb 2026 23:00:29 +0000
Files and hashes: 1: XOe82cbkE4HMCvkJkN2gNpOF5lU.crl (hash: yEmjRSCVWagurRoTmwATQIHm7sGeCtFp8j2zb2HXva8=)
2: C71919900BEE11EDBB84E711C4F9AE02.roa (hash: WK+phDZ3e+WuXd7GGXd/LXbz+tlV9m1b0anrW82wCDU=)
3: 11330A4663F611ECB344F979C4F9AE02.roa (hash: DUvw8XiBBG3P6wqdRebsbbeOkq3Va0FcHiVzE8M6sk4=)
4: 10A8D0E263F611ECB344F979C4F9AE02.roa (hash: sQNjxMd5LDqe0WyT4xvTJH/Ho0rkly0KR/Vbb2pkt5Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl
rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1278 (0x4fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC3A8, serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655
Validity
Not Before: Feb 18 23:00:29 2026 GMT
Not After : Feb 25 23:00:29 2026 GMT
Subject: CN=6996448e-ffc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f7:7c:78:d5:60:b1:41:30:1b:ac:87:04:69:
0b:9d:d7:a5:06:0f:fc:1d:40:7d:c5:ad:55:64:ce:
f2:2a:f6:3c:6f:27:4f:ee:64:3d:05:ac:b6:f8:2f:
e2:be:86:e4:e6:64:2c:2c:fb:99:e0:8c:19:61:35:
f2:53:83:9a:1c:ef:e1:ce:bd:68:86:4f:8a:06:2e:
f6:0c:88:99:39:7e:68:57:45:6d:e3:fe:03:ba:ca:
2b:7b:bc:bf:28:23:a5:0f:f2:dd:24:22:79:d3:9c:
cc:53:cd:94:f6:3d:fc:ec:af:58:76:df:0e:4e:eb:
75:19:40:67:f4:00:37:53:c4:cf:d3:88:aa:fc:57:
40:a5:52:4a:29:d2:c6:66:3b:5c:1c:69:f4:9d:25:
17:80:1e:80:8c:e0:ed:33:cd:f3:41:41:86:8e:21:
ff:c4:fb:91:48:f8:71:be:6d:34:03:2a:c8:2e:77:
44:b7:c5:54:4c:03:89:9b:81:d4:fd:a8:7a:f4:08:
ee:7b:58:a5:bb:87:17:30:0f:22:f2:ab:c3:73:2d:
54:41:0c:54:b5:96:5b:55:14:e6:02:8f:76:57:6a:
a2:01:90:1e:4e:2f:ea:6b:41:8e:d6:25:9b:04:a5:
d3:a8:15:5c:32:7a:57:59:e5:2a:9a:53:c5:d7:ee:
e9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E7:82:90:1B:66:11:9C:EA:69:54:B3:96:59:21:6B:E4:6D:E9:DB
X509v3 Authority Key Identifier:
keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:eb:62:c3:f7:92:c3:e3:4d:4d:c0:e9:71:83:75:21:55:9e:
a8:be:df:db:6c:4a:ed:32:d1:3d:43:d8:44:cf:d8:12:eb:c4:
ee:f0:eb:9f:de:5d:f5:4f:6b:10:2c:48:9b:69:2e:ff:a9:94:
cc:00:e8:13:04:e3:6d:f6:4b:f3:1a:90:a1:8a:80:bb:02:50:
4b:eb:77:88:14:2d:2d:ac:4f:44:12:55:84:7e:54:25:20:cf:
b7:bc:a3:fc:24:e5:a1:0a:93:7c:ae:b3:f8:ae:31:79:db:bb:
a1:5f:10:89:e5:fe:64:cf:20:68:6e:64:29:6c:8c:57:c3:4e:
a9:aa:fd:3b:bb:9d:5c:d6:0c:31:9e:31:bd:ac:b4:13:12:e6:
71:a3:d0:2c:94:8f:92:dd:8b:92:54:09:5c:20:65:c6:1c:0e:
31:79:7a:79:cb:9d:4d:f0:8f:2e:cb:90:b3:b0:58:ab:f2:12:
3c:e0:ef:7e:39:d9:89:d9:41:df:2d:d9:02:21:0e:87:2d:00:
7e:90:7f:25:52:8f:66:c7:71:e5:7b:cb:31:00:f4:66:33:d9:
8c:e1:30:83:d5:ed:93:f7:8e:95:2c:9a:35:5d:fb:62:39:18:
9e:09:64:2d:26:af:71:60:e4:3d:79:5f:24:3f:1f:6b:5d:ba:
8f:72:66:fe
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUMzQTgxMTAvBgNVBAUTKDVDRTdCQ0Q5QzZFNDEzODFDQzBBRjkwOTkwRERBMDM2
OTM4NUU2NTUwHhcNMjYwMjE4MjMwMDI5WhcNMjYwMjI1MjMwMDI5WjAYMRYwFAYD
VQQDDA02OTk2NDQ4ZS1mZmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Pd8eNVgsUEwG6yHBGkLndelBg/8HUB9xa1VZM7yKvY8bydP7mQ9Bay2+C/i
vobk5mQsLPuZ4IwZYTXyU4OaHO/hzr1ohk+KBi72DIiZOX5oV0Vt4/4Dusore7y/
KCOlD/LdJCJ505zMU82U9j387K9Ydt8OTut1GUBn9AA3U8TP04iq/FdApVJKKdLG
ZjtcHGn0nSUXgB6AjODtM83zQUGGjiH/xPuRSPhxvm00AyrILndEt8VUTAOJm4HU
/ah69Ajue1ilu4cXMA8i8qvDcy1UQQxUtZZbVRTmAo92V2qiAZAeTi/qa0GO1iWb
BKXTqBVcMnpXWeUqmlPF1+7pgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjngpAb
ZhGc6mlUs5ZZIWvkbenbMB8GA1UdIwQYMBaAFFznvNnG5BOBzAr5CZDdoDaTheZV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNBOC8yMUZBMDI3MjRD
NkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0SE1DdmtKa04yZ05wT0Y1
bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hPZTgyY2JrRTRITUN2a0prTjJnTnBPRjVsVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QzNBOC8yMUZBMDI3MjRDNkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0
SE1DdmtKa04yZ05wT0Y1bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBt62LD95LD401NwOlxg3UhVZ6ovt/bbErtMtE9Q9hEz9gS68Tu8Ouf
3l31T2sQLEibaS7/qZTMAOgTBONt9kvzGpChioC7AlBL63eIFC0trE9EElWEflQl
IM+3vKP8JOWhCpN8rrP4rjF527uhXxCJ5f5kzyBobmQpbIxXw06pqv07u51c1gwx
njG9rLQTEuZxo9AslI+S3YuSVAlcIGXGHA4xeXp5y51N8I8uy5CzsFir8hI84O9+
OdmJ2UHfLdkCIQ6HLQB+kH8lUo9mx3Hle8sxAPRmM9mM4TCD1e2T946VLJo1Xfti
ORieCWQtJq9xYOQ9eV8kPx9rXbqPcmb+
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:55:58 2026 by rpki-client