
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft
File: _YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft (raw, json)
Hash identifier: FR5sOHhi1f6MXiI6EaEsTmzxt8EV4S7+doTFSX70aR8=
Subject key identifier: 38:36:06:5F:82:41:EB:00:E4:23:07:9C:84:3B:66:BF:2B:5D:9E:15
Authority key identifier: FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30
Certificate issuer: /CN=A9171064/serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430
Certificate serial: 0CD1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft
Manifest number: 0CCA
Signing time: Wed 18 Feb 2026 17:56:35 +0000
Manifest this update: Wed 18 Feb 2026 17:56:34 +0000
Manifest next update: Wed 25 Feb 2026 17:56:34 +0000
Files and hashes: 1: _YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl (hash: Y4HEo73yWD2Bt29CIg2BMEdMNraTXEtGIqECuvEHSLc=)
2: A2A3D38A05CE11EA80526530C4F9AE02.roa (hash: f31uXjqb4DNcM+Zpb2Aaj4CME0IwegAYYNe/FOHZjWc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl
rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3281 (0xcd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171064, serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430
Validity
Not Before: Feb 18 17:56:34 2026 GMT
Not After : Feb 25 17:56:34 2026 GMT
Subject: CN=6995fd53-abf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:e3:7f:0d:6e:a0:de:fc:48:ba:9a:db:c8:
45:c2:7b:43:71:40:08:33:ce:27:e4:80:d0:05:1a:
71:9f:11:56:3e:db:a9:2b:1c:c5:30:de:43:97:4b:
bc:9e:75:ff:cd:19:5c:a5:5e:ff:43:31:d5:e8:b5:
41:65:83:ca:97:3c:ac:15:df:12:16:a7:cb:a2:c4:
3e:4c:15:47:a7:7c:ae:8e:9f:cb:2d:0b:30:4e:f7:
52:ed:12:c3:ac:04:0e:d3:33:5a:60:01:a1:ca:bb:
79:e6:57:29:04:f4:bc:da:c1:b9:10:27:ad:06:e4:
aa:83:27:77:8a:68:3e:66:ae:44:2a:54:a9:8b:2b:
45:d5:f4:ed:a8:b8:dc:06:4d:ec:34:15:d6:3d:94:
db:f5:73:ee:2c:84:8a:4d:aa:60:37:5a:5e:d5:7a:
95:c9:c2:90:48:9f:d4:ae:09:b0:4e:3c:b9:b1:f3:
a6:a3:b6:b3:11:f8:7a:7e:58:8f:9d:06:09:59:2f:
69:dc:b7:83:ac:b2:7a:39:cb:cf:8b:0f:d6:be:5f:
4f:bf:c3:9c:da:71:7f:48:a0:a1:28:12:26:ea:37:
87:09:3a:4b:b8:e2:b5:3b:de:8d:a3:11:af:8c:de:
d2:8a:49:65:bf:33:19:d9:56:ec:44:36:98:75:7f:
cd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:36:06:5F:82:41:EB:00:E4:23:07:9C:84:3B:66:BF:2B:5D:9E:15
X509v3 Authority Key Identifier:
keyid:FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6c:0b:59:d1:11:62:f7:3b:75:7d:75:a3:86:ed:a6:37:ed:
7a:8b:c8:75:0d:45:dd:ea:f1:b9:a3:10:06:95:e7:59:4d:8c:
39:ee:ce:31:8a:0b:95:70:bc:25:8c:42:19:0e:fb:69:9a:09:
e7:b1:b3:7e:28:af:46:13:2f:a2:6e:bb:f2:a0:de:c1:8e:46:
79:8a:d7:7f:68:f2:b8:24:c0:62:05:e9:3a:01:c3:22:c4:5f:
a5:97:20:2f:d2:d2:8b:21:b2:62:dd:e1:0c:f3:95:e3:58:0c:
4e:06:b3:9d:f9:e0:65:52:f5:9f:4d:7f:f5:4f:ab:77:ff:45:
10:7c:d2:8d:02:37:19:2a:52:d0:a4:ff:46:b9:51:ca:96:1b:
32:65:29:15:50:7b:f9:92:29:73:8c:09:e2:54:4b:3e:45:e8:
50:d5:47:90:63:3b:4d:47:53:6a:16:b5:28:f7:f6:ab:49:6f:
57:46:89:d5:79:17:19:10:5f:be:9a:cc:de:66:91:48:c0:73:
3c:75:01:c5:20:23:0a:ea:8e:89:41:c2:28:ff:84:b7:b8:4a:
a3:7d:14:20:a2:89:4c:1e:03:02:79:f7:96:db:f4:8d:06:89:
01:a8:a5:c0:3c:eb:17:a9:7e:22:f5:f7:ed:31:d2:55:21:49:
8e:60:8a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:57:00 2026 by rpki-client