
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft
File: Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft (raw, json)
Hash identifier: UsIzp7Qzi4ataCfRgpd4vfnLjYCoHv4CBn7lT0mZXZQ=
Subject key identifier: 45:8C:6A:1E:65:7E:9F:E3:74:2B:23:02:5F:10:18:9A:B1:3B:82:FB
Authority key identifier: 63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A
Certificate issuer: /CN=A91D2706/serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A
Certificate serial: 07BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft
Manifest number: 07B5
Signing time: Wed 18 Feb 2026 20:51:56 +0000
Manifest this update: Wed 18 Feb 2026 20:51:56 +0000
Manifest next update: Wed 25 Feb 2026 20:51:56 +0000
Files and hashes: 1: Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl (hash: WpOdZkLBmGE8L3XgisAUoDfn8xMq0ziSnyL7tvMrGSQ=)
2: 35D4363E330711EB9D3AA60BC4F9AE02.roa (hash: Yh0VpmL2xaNSLKeY9uwOAgkPswKvx9eEvHJvYdloAEg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl
rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1980 (0x7bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2706, serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A
Validity
Not Before: Feb 18 20:51:56 2026 GMT
Not After : Feb 25 20:51:56 2026 GMT
Subject: CN=6996266c-1179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:37:91:8d:ef:9b:b2:4f:b1:f0:b4:75:44:d4:
2c:bd:52:04:58:96:31:77:25:f9:b5:c2:8f:cc:d3:
35:e6:44:be:c8:e8:6e:d9:34:11:28:ed:74:41:8a:
4a:9a:70:e1:5e:d4:d6:25:a2:87:ef:85:ac:1b:a5:
45:76:99:78:ab:b0:9e:22:d3:f3:1c:4a:4f:49:19:
52:5a:eb:c6:90:5c:6d:e5:ee:74:63:65:c6:da:c1:
d2:eb:83:ea:7a:cb:54:9f:90:c0:f2:75:fa:f3:31:
99:b0:69:f6:ba:ea:7b:88:76:bc:c5:07:3c:4c:76:
43:78:21:7a:45:ef:c2:04:b2:75:8d:41:58:40:15:
a0:3f:e2:35:59:b5:6e:5c:53:57:96:85:d7:44:9f:
fa:69:d1:1d:c0:df:c1:e7:06:59:8f:20:b4:d9:9a:
cf:d5:51:77:56:18:85:b1:a4:93:bd:98:f4:1b:2b:
4f:24:33:e4:9f:8d:18:98:d7:fc:4e:04:81:66:02:
b2:1e:fc:45:72:f6:ff:e8:ec:19:c4:78:f8:b9:a8:
b0:04:87:96:c7:99:cd:c0:f5:f8:8e:6b:f1:eb:26:
46:d0:eb:15:41:d0:23:76:e3:62:3d:b9:97:02:cc:
3b:93:e8:cd:56:bb:78:6a:73:67:0b:44:36:60:8b:
1c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8C:6A:1E:65:7E:9F:E3:74:2B:23:02:5F:10:18:9A:B1:3B:82:FB
X509v3 Authority Key Identifier:
keyid:63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:37:bc:9e:20:fa:98:fa:ff:fb:6c:a2:04:d6:93:53:11:5f:
34:f5:a3:c3:47:a5:fa:96:a0:4c:58:61:60:e2:b6:cc:fc:f9:
b9:3a:90:39:ba:35:64:4c:7b:b9:4b:06:5c:ea:1e:59:86:28:
65:db:af:c3:4d:6f:13:ae:bf:0f:27:1f:f5:eb:c6:c6:c5:a1:
dd:49:a3:d4:b1:6f:aa:83:17:c9:4e:2d:59:44:27:d9:58:af:
67:63:e8:60:70:29:c6:a6:82:f6:64:b1:77:35:c6:af:24:68:
a9:c0:f0:cd:76:8d:be:3a:10:25:2d:62:df:2f:02:49:f7:35:
19:55:9f:a8:08:b5:d0:42:bc:2e:3b:6a:f8:78:c4:7f:fa:c0:
fe:f3:c8:dd:d2:1c:9d:6e:77:7f:6c:8a:e0:f3:69:fa:e2:d9:
93:8e:fe:58:fe:59:91:37:23:ee:5a:62:a4:e8:40:20:eb:4b:
bf:38:e1:b0:f9:8d:40:2a:04:12:70:d1:84:43:19:6e:04:af:
df:7c:7e:76:df:27:4d:3d:7c:c5:db:02:89:92:46:2d:c7:af:
4d:b0:2d:73:ce:e0:d5:b1:fe:97:ac:a2:39:a7:b1:c3:03:b4:
e3:05:c2:fd:0a:2b:72:d2:58:9f:b9:13:8c:e7:68:96:a1:25:
87:43:5f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:55:33 2026 by rpki-client