
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
File: Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft (raw, json)
Hash identifier: BjaXAxyjmiKj2ajYubn5ze4oQCiD4fpSufkzQCmrtdo=
Subject key identifier: 47:F6:1A:05:D9:18:A8:C1:9D:B0:CB:8E:D4:E8:30:94:76:DD:86:A3
Authority key identifier: 63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00
Certificate issuer: /CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00
Certificate serial: 02F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
Manifest number: 02F1
Signing time: Thu 19 Feb 2026 00:27:46 +0000
Manifest this update: Thu 19 Feb 2026 00:27:46 +0000
Manifest next update: Thu 26 Feb 2026 00:27:46 +0000
Files and hashes: 1: Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl (hash: 3UctWOXpYxMmzOHYMbjd1hKCWsbIV8Kq7z+YYTonhM0=)
2: 9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa (hash: JWAO5OM1htkOqA8zsEncfXnArds8hOb3Z7zkeDNiSm4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl
rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 758 (0x2f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EE46, serialNumber=63515B364113848FA554D2842F5841877CF6AF00
Validity
Not Before: Feb 19 00:27:46 2026 GMT
Not After : Feb 26 00:27:46 2026 GMT
Subject: CN=69965902-6b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:03:81:ef:0e:69:75:a2:46:6d:f2:75:eb:
02:cb:5d:2f:b2:c7:e6:2e:39:2c:7a:48:8e:8f:e7:
b3:45:07:fa:bb:46:eb:59:18:1f:68:71:ed:59:1d:
c9:a3:a7:0d:f8:7e:89:49:e1:21:fb:f6:7a:8e:65:
63:62:66:8d:4e:cb:8b:aa:8c:ca:96:a9:ff:0f:67:
7e:05:c0:9f:a8:21:c0:9c:c2:c1:e1:e4:35:ac:f6:
59:58:0f:c4:a4:6b:d2:69:41:28:bd:03:9d:81:f0:
cd:74:3c:5f:d1:38:b0:b4:bf:cb:29:b3:9f:54:72:
7f:7b:61:3e:3f:a0:bc:bd:d6:ea:3a:09:d6:b8:64:
d1:c3:dc:40:0a:ea:51:a9:a3:09:b6:e0:96:ed:76:
ad:0c:09:c5:b3:79:68:c4:e9:e4:31:06:d2:9b:98:
c2:8f:39:71:fc:68:dd:9d:fb:cd:50:f9:53:c2:ac:
fd:1d:14:fa:d6:17:aa:78:42:62:76:2b:dd:84:ef:
10:82:4c:36:8e:7e:a2:08:0d:eb:76:c8:eb:87:66:
27:27:9b:2c:1b:23:3d:21:32:fd:5e:c8:25:00:2c:
30:f9:32:97:d1:9f:8c:78:79:2b:49:f1:00:86:cc:
c8:8b:21:a8:a7:7a:ae:29:cc:c5:9a:0a:e0:e7:a5:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F6:1A:05:D9:18:A8:C1:9D:B0:CB:8E:D4:E8:30:94:76:DD:86:A3
X509v3 Authority Key Identifier:
keyid:63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7c:b6:8f:0d:59:b4:8c:d2:83:9c:07:b4:50:4c:3d:a3:e1:
d4:de:2d:13:99:be:37:16:84:cf:60:56:26:03:88:3e:a2:ee:
d5:47:b9:2e:50:f9:44:27:2c:a7:93:83:c7:70:15:c3:c4:ac:
0b:c5:d1:f0:dd:20:7c:c0:d9:c4:92:a1:4a:a9:47:f3:0f:77:
29:ca:c3:2c:dc:09:b3:fb:cf:9d:84:c6:0d:d7:f0:a0:59:fc:
f0:10:31:86:65:3d:62:7d:fb:d0:d5:93:d3:46:04:05:e0:c4:
f9:b0:af:ac:2f:f0:60:f1:00:9e:c3:f7:c2:3c:a2:51:85:ac:
c6:e5:f4:50:a6:93:c4:92:0b:49:60:78:96:02:11:00:e3:4c:
8e:21:5c:b5:d2:1b:03:c0:f3:cd:85:96:30:da:19:09:dd:a1:
9d:0d:3e:56:7d:06:e0:ce:4f:58:6c:6b:b7:ee:0b:b5:dc:17:
17:33:d6:55:0b:71:87:fa:ae:2a:be:72:ee:19:a5:2d:6f:6e:
8f:8b:e2:89:fb:7d:8c:7f:4f:fa:ed:d1:24:4d:90:44:bc:7a:
ed:d6:b9:08:91:cc:9d:fe:0c:08:9c:8b:fa:6d:d1:c8:fc:5f:
41:5e:1e:aa:2e:bb:50:84:e4:2a:94:95:98:b7:6d:b7:aa:68:
8d:5a:df:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:54:14 2026 by rpki-client