
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft
File: YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft (raw, json)
Hash identifier: epIJHoiV1iPPavrTEr6A2srpEt/ni4kESjeSfBLaxCA=
Subject key identifier: CD:EA:7A:DA:2B:2D:E3:4A:F0:D3:57:42:72:19:AA:4F:78:4C:23:B6
Authority key identifier: 62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4
Certificate issuer: /CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4
Certificate serial: 0D38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft
Manifest number: 0D29
Signing time: Wed 18 Feb 2026 17:44:58 +0000
Manifest this update: Wed 18 Feb 2026 17:44:57 +0000
Manifest next update: Wed 25 Feb 2026 17:44:57 +0000
Files and hashes: 1: YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl (hash: Owox8hEo5NuPLTG8SsJmRfa1H4F/1ysxCnGs+1isJWo=)
2: 4154E51AC91311EBA6226F45C4F9AE02.roa (hash: wB1sovbilxKTEjHlhwxxiGzC+zOOhC0FN6B3+See3J0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl
rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3384 (0xd38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120FD4, serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4
Validity
Not Before: Feb 18 17:44:57 2026 GMT
Not After : Feb 25 17:44:57 2026 GMT
Subject: CN=6995fa9a-a31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bc:28:42:f5:6f:6b:b4:df:c7:0f:3e:14:17:
03:0d:f2:a0:11:80:0a:6c:e1:9f:41:19:e3:16:f3:
01:ba:6f:df:3e:16:ed:7b:9a:35:5b:9b:2b:32:2a:
86:cb:81:af:33:2d:c9:82:fe:a9:01:f3:e5:44:57:
2b:9b:b9:9d:83:5e:72:b9:04:15:8c:0e:57:75:02:
a4:b7:71:17:38:f7:b7:be:b5:7f:40:93:ab:69:6e:
3e:1c:70:69:71:8a:a5:b0:9e:89:b7:e3:70:67:c5:
7a:c4:52:60:75:b3:42:b4:37:d5:8b:11:37:42:ea:
cd:76:b8:85:58:b0:d3:93:89:8d:6a:b0:8f:75:9e:
2a:1f:74:e9:13:69:f9:10:01:af:91:0a:06:bb:7a:
a7:bb:9e:7b:59:ec:9d:ee:4f:c4:70:74:21:3d:d1:
48:5f:2b:99:b3:97:53:c8:35:4f:06:51:25:bb:fc:
37:34:c1:f8:ff:c8:84:e2:3d:70:ff:a5:1c:2a:e2:
c2:40:3f:62:dc:98:7c:f4:76:3e:e4:ae:c7:f0:ae:
37:3a:14:1c:24:44:73:f0:55:c4:64:f4:93:27:00:
54:e1:c4:1a:1e:ff:84:f1:59:60:30:1e:06:14:16:
89:1f:19:1c:b1:5f:3d:60:8e:23:7e:43:08:10:ab:
ee:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EA:7A:DA:2B:2D:E3:4A:F0:D3:57:42:72:19:AA:4F:78:4C:23:B6
X509v3 Authority Key Identifier:
keyid:62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b7:01:ca:45:62:60:ef:2a:30:d4:81:f1:be:88:aa:d3:c0:
2a:60:f4:5a:f4:c1:21:07:5f:72:35:01:b3:84:f6:ce:98:57:
f3:f7:54:69:db:e3:25:54:f2:bd:81:6b:47:5c:17:b4:f1:68:
ac:a4:26:13:54:e1:2c:62:10:1c:08:22:d5:f0:4e:08:a6:fe:
38:78:7c:40:73:10:f9:1f:64:a7:2e:84:7f:ed:ba:9b:e9:a2:
70:01:eb:80:14:12:38:f0:f5:60:6e:b3:a7:5b:65:ca:d6:2b:
89:64:4f:0e:46:ed:ab:02:08:09:dc:92:80:bb:02:3b:1c:4e:
9c:1d:02:06:22:e9:9d:e6:38:fb:78:d8:33:25:65:9a:cf:6c:
1e:68:ea:cc:50:42:17:00:4e:bb:e3:3b:37:28:ce:e1:67:f3:
7a:10:61:38:d5:1c:ac:97:18:60:94:c3:0e:ef:57:20:36:ae:
ea:d7:32:84:a9:22:92:25:e0:bc:05:fb:18:40:29:44:a8:d8:
88:2a:ac:06:97:1c:5b:5f:34:76:bc:37:b9:b7:d3:c1:70:2e:
fb:59:4b:8a:31:43:6b:71:30:8f:e4:07:e5:21:cc:89:ab:da:
c3:10:07:fa:4d:df:e9:4b:56:9b:26:d3:71:5f:2b:89:4d:c8:
a4:8c:f0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:50:31 2026 by rpki-client