
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
File: Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft (raw, json)
Hash identifier: 3gt3Zmqh8goAPu4gceoCf0WPLr6OB66fd1i2XUjgf88=
Subject key identifier: 21:5F:20:E9:C3:A9:8E:CB:76:C4:77:AF:71:99:9A:FC:5C:E8:97:32
Authority key identifier: 63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D
Certificate issuer: /CN=A9147B58/serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
Certificate serial: 063C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
Manifest number: 0635
Signing time: Wed 18 Feb 2026 22:06:56 +0000
Manifest this update: Wed 18 Feb 2026 22:06:56 +0000
Manifest next update: Wed 25 Feb 2026 22:06:56 +0000
Files and hashes: 1: Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl (hash: CGty1ZH4Z7tNk4mYLAlpWmei1Gx02GcPmligYi3oKz0=)
2: 657BCA62CABC11EB8D6D063BC4F9AE02.roa (hash: W1fkw/mYSuTpBkq23h73Gt2ZtwtQaM95I1fyF0uTlto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl
rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 22:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1596 (0x63c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147B58, serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
Validity
Not Before: Feb 18 22:06:56 2026 GMT
Not After : Feb 25 22:06:56 2026 GMT
Subject: CN=69963800-0a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:87:87:fd:81:23:cc:e6:4c:d8:80:2e:ce:
01:8d:01:a4:cf:18:e7:e3:05:5c:36:3d:9d:9b:5b:
2e:39:06:39:7d:87:ad:a2:8f:46:b2:d8:c3:14:2a:
c5:fe:f8:d9:e5:7f:62:7b:85:53:38:e2:88:96:38:
19:e6:b7:61:c9:07:f8:c9:11:41:26:8e:9d:ed:c1:
55:45:bf:5b:4b:66:1f:60:e3:09:54:ee:99:61:84:
c7:ba:09:5f:38:28:fc:fc:0a:99:4b:09:8d:7e:67:
02:d5:f7:bb:e4:39:8e:aa:b7:e7:fb:1d:8f:f4:8e:
a5:3c:7b:78:dd:e3:28:35:cd:5d:3b:5c:5b:55:9b:
ad:fa:c9:31:f6:e8:9f:0a:55:ce:b4:12:49:4d:f5:
02:da:12:b4:29:fb:b1:7f:a7:ad:78:dc:ff:4f:28:
6f:cd:9c:c7:c3:8b:c2:86:03:84:e9:cb:5c:c6:fd:
81:ac:c3:80:4e:98:4e:5f:dc:24:43:cf:0c:c3:93:
29:8d:47:be:52:18:e4:ea:af:5f:a0:ff:6e:40:0f:
23:5f:6a:b2:af:c3:05:8d:43:d4:2c:52:15:5c:ec:
c6:26:0e:84:47:2e:97:26:e0:51:27:a4:57:80:1e:
26:38:a7:18:59:d1:49:8b:3b:99:e6:03:0d:85:2b:
58:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5F:20:E9:C3:A9:8E:CB:76:C4:77:AF:71:99:9A:FC:5C:E8:97:32
X509v3 Authority Key Identifier:
keyid:63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f6:ef:48:ab:24:6e:28:94:51:08:a0:a2:25:e8:48:07:58:
d2:90:f2:49:aa:59:05:bb:60:98:5d:f7:5c:13:99:24:65:ff:
60:3b:8a:bd:bd:84:87:ab:d7:5e:fd:b9:59:18:71:f1:bc:5a:
8c:eb:41:bb:0d:4d:1e:17:6b:62:cf:ec:98:10:7d:05:67:48:
7f:45:51:cd:77:a2:c1:00:42:8c:8e:53:ca:82:38:99:df:b3:
9e:4a:41:7a:8b:dd:58:a4:28:50:40:fd:9c:5b:5c:70:f9:00:
dc:08:e8:b5:d3:f3:6a:1f:1d:b4:6d:9c:e6:97:60:43:3d:3b:
3b:e6:d1:32:18:cd:6b:f5:1e:44:a5:29:f5:b5:a2:8a:1d:6b:
d4:db:f1:fb:2d:3f:7f:79:50:c1:c3:93:57:ed:f0:b8:02:f8:
a8:e8:3f:0b:1a:28:95:c3:84:6c:3c:9e:da:f9:07:68:43:2e:
cb:2d:9b:5f:25:4c:e6:75:2d:88:53:ea:cb:04:59:2d:0e:d9:
2a:d8:5a:a2:2d:50:5d:a0:05:a4:1d:6a:c3:d4:f9:53:27:79:
26:8a:c3:bd:69:3f:55:16:07:c6:9e:27:b0:5f:dc:54:29:c5:
cf:c9:f8:c8:42:2e:a5:ab:bf:5a:b8:c9:50:bb:ea:7e:bc:a5:
84:9d:0c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:03:26 2026 by rpki-client