
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft
File: Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft (raw, json)
Hash identifier: wQq7oo5qqpAjm6o36ARssmNo29XtRzXaRQiYaE/wLKk=
Subject key identifier: CF:FE:47:3D:88:EF:B2:E7:0A:83:B9:5B:EF:93:1B:4B:61:0B:11:6B
Authority key identifier: 63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00
Certificate issuer: /CN=A91AB238/serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00
Certificate serial: 0848
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft
Manifest number: 083F
Signing time: Wed 18 Feb 2026 20:19:05 +0000
Manifest this update: Wed 18 Feb 2026 20:19:04 +0000
Manifest next update: Wed 25 Feb 2026 20:19:04 +0000
Files and hashes: 1: Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl (hash: 3/NvhHloBk1YyzoxwdAJMSTRA7Ao5FURGm58d6DALhM=)
2: 7634D328351411EBBF864670C4F9AE02.roa (hash: gJ6rfZA4kdz2sP4zhVk5qWSiiFvdYYEjJ3d1LC4TVQU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl
rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2120 (0x848)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB238, serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00
Validity
Not Before: Feb 18 20:19:04 2026 GMT
Not After : Feb 25 20:19:04 2026 GMT
Subject: CN=69961eb9-7922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c2:84:77:2f:22:31:1c:46:8e:f8:f3:03:b4:
01:7b:e9:75:a1:a8:0c:67:87:24:64:52:ca:51:bd:
4b:26:25:86:05:87:a2:4e:db:e8:85:5e:34:9c:43:
51:07:fe:82:3f:53:b8:9a:73:84:bd:52:0b:e4:6c:
96:7e:c3:38:c9:e0:39:63:39:dd:0d:75:2c:61:fc:
78:e2:36:de:e0:c0:b6:58:74:78:93:ee:14:19:38:
23:e6:f9:71:10:a8:d3:48:01:f4:73:fd:dc:e6:e9:
00:0d:20:62:b1:6e:06:98:d8:92:cb:94:0e:ba:f5:
53:e7:26:fe:fd:7d:ed:7e:96:b6:a9:5b:af:f5:dc:
ad:81:c7:f0:91:9d:2f:6a:8d:0c:2c:ce:76:d5:33:
29:82:1a:54:3f:b8:20:f7:ae:5c:59:73:e6:44:01:
17:d7:98:d0:f7:09:f7:e2:fd:32:e6:5d:e6:51:59:
00:4f:13:5a:09:96:a2:50:c0:95:3b:dc:ca:ca:1a:
67:89:e7:02:0f:01:66:a9:e2:a6:38:ba:e4:d5:62:
d6:30:27:66:e5:ae:5d:f6:d1:fb:d5:56:96:b6:81:
d0:f1:6c:38:c9:6c:0c:04:8d:5e:3e:9d:97:09:fc:
76:6c:f6:74:14:ac:f1:9b:8b:ac:73:b6:ea:3b:28:
d8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FE:47:3D:88:EF:B2:E7:0A:83:B9:5B:EF:93:1B:4B:61:0B:11:6B
X509v3 Authority Key Identifier:
keyid:63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:70:7e:0d:ed:51:5e:85:1a:35:bb:e1:8a:e3:e1:d3:af:90:
02:75:8b:cc:c3:62:f7:92:07:d4:e2:11:42:3f:b2:da:0d:f3:
a1:e4:f5:17:3f:9f:9c:3f:54:3a:91:01:2f:2e:cd:4a:1f:54:
f6:cf:bf:72:fb:db:80:2a:26:58:74:5a:21:a2:fe:03:14:b8:
75:e0:aa:68:3e:5c:df:3a:b8:ce:41:01:38:13:30:73:b1:ff:
2e:ca:f3:dd:cc:1a:39:3d:7c:59:4c:4c:fb:38:24:03:95:f7:
7b:16:c7:07:94:9b:30:c6:71:96:a2:88:41:b8:4e:d6:50:a6:
31:2e:d8:04:d3:8b:03:9e:27:f6:37:cc:03:a4:4c:c0:6f:df:
27:43:ef:bc:65:2f:ac:d9:fa:42:cf:a3:53:63:63:c2:57:41:
aa:5f:d7:f3:7d:e1:23:0b:7b:cf:90:33:0d:d0:b8:6d:91:da:
21:48:ad:f9:3c:90:eb:38:13:3e:cb:85:6d:df:4e:df:24:6b:
67:b7:c7:b6:bf:a1:3b:e5:79:5b:d0:94:10:27:95:f1:a0:94:
b1:7d:99:30:e9:0e:53:fc:38:5e:99:19:dd:95:2b:0f:38:89:
a9:21:a6:92:f8:05:73:28:a1:ab:b2:be:34:a5:f5:de:0a:05:
9b:21:29:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:37 2026 by rpki-client