
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft
File: YfjH66e1XnGy5rF3QJFCUdiM8KY.mft (raw, json)
Hash identifier: mPTCd5uQN8Ypq9K5dZKyW3M8pJSpCCwi8NSjC9fuvgw=
Subject key identifier: E6:C1:2F:32:D7:C8:51:77:4C:64:D4:EF:18:49:55:C1:0C:C7:4B:8F
Authority key identifier: 61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6
Certificate issuer: /CN=A9158491/serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6
Certificate serial: DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft
Manifest number: D3
Signing time: Thu 19 Feb 2026 05:15:07 +0000
Manifest this update: Thu 19 Feb 2026 05:15:06 +0000
Manifest next update: Thu 26 Feb 2026 05:15:06 +0000
Files and hashes: 1: YfjH66e1XnGy5rF3QJFCUdiM8KY.crl (hash: hBSVmaWE+y0DbGEy1wlsONY8gA0A8kBol1T3k+lu7TE=)
2: 5FDDEE1CE34211EF8EA0CA77C4F9AE02.roa (hash: mzE4Rj9TzgxYoPFC7hLQmMNdU4o1ATX8k/0uu+bhb9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl
rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158491, serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6
Validity
Not Before: Feb 19 05:15:06 2026 GMT
Not After : Feb 26 05:15:06 2026 GMT
Subject: CN=69969c5b-633c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:c3:0b:bb:67:b8:94:71:97:95:e4:f1:d0:
0a:68:aa:36:67:42:65:3e:06:6b:ac:8b:ea:57:b0:
e0:61:29:b0:be:46:b8:f7:2a:7d:74:8f:63:46:50:
bf:da:ca:27:f7:e6:9f:c2:22:88:6c:ec:2c:e8:43:
19:d3:f8:6a:e0:9c:17:02:37:11:a6:9e:38:12:11:
24:ae:d2:3b:e3:4b:3a:70:d5:e3:28:10:ba:f9:12:
4a:c5:f7:1c:55:4a:e3:35:60:ae:b3:04:09:e3:a8:
77:df:43:ce:01:cc:bc:df:b6:24:41:ef:95:db:05:
f2:8d:f1:83:b1:19:4a:e8:94:54:56:0d:31:d8:d2:
32:40:63:bb:3e:b5:08:16:03:7a:8a:c4:b1:87:c9:
35:66:a8:10:de:a1:85:7a:e5:4c:98:8a:0e:1c:52:
08:e4:80:71:8d:a9:ec:8c:05:3f:9e:f4:e7:02:ad:
c7:9f:27:25:9d:03:91:0c:87:6d:d9:53:b0:14:17:
0d:5f:41:34:01:f6:66:e9:3c:4b:77:cd:68:68:52:
9a:a6:4c:6f:d1:c7:82:9d:f0:f8:d5:4f:4b:b4:89:
4d:7d:ea:55:29:cc:c8:ec:1d:5b:fa:48:0b:37:0b:
6f:1e:6d:1f:3a:0f:f5:e0:53:72:37:06:84:7d:ef:
8b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C1:2F:32:D7:C8:51:77:4C:64:D4:EF:18:49:55:C1:0C:C7:4B:8F
X509v3 Authority Key Identifier:
keyid:61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:c3:66:94:24:ba:11:90:a8:3d:12:41:01:66:d9:bc:5f:ec:
da:ce:36:90:b1:15:ae:a0:45:2c:e6:77:ca:f0:80:fd:e0:9c:
50:3d:69:4d:c1:21:57:48:8c:09:3d:63:23:93:41:90:dc:fd:
f1:06:68:bd:8e:63:f2:fd:ff:06:8b:09:3f:4d:7f:ec:1f:fa:
2d:34:b0:ce:f8:e1:5f:b3:70:a1:43:0e:f8:56:db:d1:08:0a:
a7:e1:35:b1:98:6d:96:c3:54:38:c5:5b:51:0e:aa:01:af:d9:
ca:4b:c7:aa:5b:17:06:62:99:b7:28:1e:8c:ce:65:b1:88:73:
da:76:85:04:20:aa:9a:7e:fe:af:49:f8:29:46:c4:91:f8:c3:
8d:93:3e:cf:d4:51:be:9b:15:b1:f8:3f:7f:de:35:0a:87:6a:
cd:d2:34:14:4a:08:55:85:cd:55:3f:d4:38:1d:be:54:fe:7a:
0c:59:ff:86:30:d1:6c:60:b3:1f:f1:46:77:f8:82:3a:ff:d3:
a1:f2:34:cc:26:63:e4:99:21:26:72:ca:f7:1a:9d:1b:fe:64:
a3:bd:e0:e0:63:71:fd:c4:cb:03:71:b2:9d:5a:80:bd:2a:9b:
92:ee:a9:92:fd:e5:2b:57:c2:43:98:ed:97:3a:aa:cc:9a:06:
63:69:c9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:00:09 2026 by rpki-client