
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft
File: YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft (raw, json)
Hash identifier: bICXXZCbny6oPyiGweJZeywm0srZVOswaXzqRjQglfM=
Subject key identifier: F7:27:57:A0:4C:01:11:B8:B2:AC:15:0D:C4:0F:3B:3B:B5:AE:E9:A8
Authority key identifier: 60:06:B9:65:83:13:D8:64:99:16:19:D6:97:9B:0F:7E:01:E4:B6:68
Certificate issuer: /CN=A91E5A08/serialNumber=6006B9658313D864991619D6979B0F7E01E4B668
Certificate serial: 0216
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAa5ZYMT2GSZFhnWl5sPfgHktmg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft
Manifest number: 0212
Signing time: Thu 19 Feb 2026 01:39:58 +0000
Manifest this update: Thu 19 Feb 2026 01:39:58 +0000
Manifest next update: Thu 26 Feb 2026 01:39:58 +0000
Files and hashes: 1: YAa5ZYMT2GSZFhnWl5sPfgHktmg.crl (hash: lAqy5j9LcpVIpZSTE6M3E+UO6Yrcnxpk3RD8ufefdc4=)
2: EC9A7C9EE26811EDBB19B85EC4F9AE02.roa (hash: 1sa+ik65HDpM/qIP+SkfWWXEJCGddK6P6JEdVTcmfes=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.crl
rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAa5ZYMT2GSZFhnWl5sPfgHktmg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:39:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 534 (0x216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5A08, serialNumber=6006B9658313D864991619D6979B0F7E01E4B668
Validity
Not Before: Feb 19 01:39:58 2026 GMT
Not After : Feb 26 01:39:58 2026 GMT
Subject: CN=699669ee-4915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:09:73:2e:de:8c:31:3c:fc:40:94:5d:c0:
0b:cf:1c:34:e2:95:96:96:44:1e:9e:06:0b:dd:fd:
b1:a4:09:0c:25:b5:99:b3:da:a8:4a:3b:64:30:9a:
ce:f9:b1:02:3f:93:31:59:44:0b:f1:45:05:28:88:
39:dc:56:34:45:3f:9d:71:bf:87:c1:56:f6:86:c3:
95:1a:85:bc:2c:eb:d3:fd:25:1d:ef:73:44:63:99:
ad:64:01:34:39:65:75:7e:06:1d:3c:a1:12:9c:f1:
42:2f:0b:0b:a7:7b:5e:bf:5b:68:03:07:56:82:69:
26:78:b9:1b:36:09:ce:34:a1:2e:a4:ae:00:8f:cd:
07:c9:d8:fd:0a:2f:47:ff:39:af:d2:88:9d:c7:8c:
0f:f9:15:c5:f3:ec:51:28:2e:bf:f2:01:73:d6:5c:
df:ba:2f:39:1f:d5:bd:8b:a1:d2:ef:b4:4f:9b:96:
87:02:98:a7:4c:15:c0:f3:a6:eb:21:9a:3c:05:95:
b4:ef:bf:c4:de:b7:4a:d7:36:e7:34:ed:7e:2d:ba:
e4:c5:cf:90:75:18:fe:15:88:d1:72:ac:bb:60:9c:
08:ef:b3:39:35:7d:65:42:85:8a:3c:53:91:82:1a:
00:68:89:4f:d2:6d:43:9a:6d:ad:64:56:d4:dd:c7:
04:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:27:57:A0:4C:01:11:B8:B2:AC:15:0D:C4:0F:3B:3B:B5:AE:E9:A8
X509v3 Authority Key Identifier:
keyid:60:06:B9:65:83:13:D8:64:99:16:19:D6:97:9B:0F:7E:01:E4:B6:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAa5ZYMT2GSZFhnWl5sPfgHktmg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8a:2d:21:e1:68:a1:00:ee:41:aa:df:97:ef:85:6c:2f:f9:
e8:12:95:eb:1c:01:67:5c:b6:7d:39:4a:59:98:0e:11:e3:2d:
44:6d:28:2c:42:d1:ed:02:01:93:b9:1a:d1:77:64:96:1e:3d:
10:8f:3f:41:1b:73:c4:4d:4c:3a:34:17:a8:cd:e4:d2:35:5b:
42:6b:ce:0e:ba:f7:7a:9e:a3:c0:0e:87:77:ee:70:21:45:98:
75:1e:09:26:a5:db:eb:bc:2f:13:53:64:4f:2a:46:3c:0d:dd:
21:be:62:4b:16:27:4f:55:15:5a:20:c2:49:e2:1e:c5:dc:47:
12:cc:68:7b:ec:56:ec:0d:10:c6:09:16:86:f4:36:96:7c:70:
64:41:9f:81:39:9b:e7:59:48:12:da:f9:7c:71:4e:29:27:0e:
d0:b4:b4:cd:35:de:88:67:81:99:b4:14:aa:f8:00:68:b7:54:
93:9d:b3:1c:00:c7:70:19:65:18:7c:8e:2f:bc:c4:99:e0:41:
8d:1b:97:55:a0:0e:79:54:1b:8a:4d:9d:5d:9c:74:f5:92:7c:
47:10:a5:a7:b8:4f:cb:c3:9f:12:8d:ee:16:6d:44:ab:bf:e0:
63:5a:d7:07:e3:8e:08:ff:56:88:72:65:e3:5e:01:4b:1d:82:
25:6d:63:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:36:04 2026 by rpki-client