
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft
File: 1Ycen8b73n3HG36JXIoEw9ACHYU.mft (raw, json)
Hash identifier: 2QWQQA94w182/RXWCG64Z+4ujivPu/Xsq5jImCV5U8w=
Subject key identifier: 3B:A0:69:15:27:35:B1:9F:DE:75:3E:B7:BD:90:09:3D:E1:11:67:BE
Authority key identifier: D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85
Certificate issuer: /CN=A91F8A49/serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85
Certificate serial: 01DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft
Manifest number: 01D7
Signing time: Thu 19 Feb 2026 02:16:58 +0000
Manifest this update: Thu 19 Feb 2026 02:16:58 +0000
Manifest next update: Thu 26 Feb 2026 02:16:58 +0000
Files and hashes: 1: 1Ycen8b73n3HG36JXIoEw9ACHYU.crl (hash: ra5gEfmKETHr1s1sMRgo4ZtmRje9bvSnsePO3L8M6v0=)
2: A355C1A8B6D511F089793D6DC4F9AE02.roa (hash: 0SnBjCkd1/QSiUJjvI651mo+kVttGehwO0xz/nqsNeY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl
rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:16:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477 (0x1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8A49, serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85
Validity
Not Before: Feb 19 02:16:58 2026 GMT
Not After : Feb 26 02:16:58 2026 GMT
Subject: CN=6996729a-965f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:f6:fd:44:cf:91:17:a8:ef:0d:de:18:b9:
2d:dd:b5:bf:69:6f:29:f3:78:bd:c1:df:0d:fd:be:
0b:23:b4:09:bf:37:96:68:be:7c:7f:0f:22:81:8b:
68:10:1f:6c:80:35:3d:5c:e0:d4:74:eb:d6:76:0c:
29:9e:ae:c2:76:5a:52:c3:3d:04:5c:b8:1a:83:f0:
8b:27:05:b4:05:7d:4a:31:28:60:a2:43:df:7c:54:
67:03:cc:9d:34:dd:dc:6f:70:9b:6a:09:5b:6e:c6:
dd:00:52:2d:31:fd:33:1a:22:9c:c9:d0:f1:e9:18:
dc:f1:10:8d:16:5d:24:bc:4e:34:6f:cc:33:cf:2b:
66:45:8b:40:92:3b:dd:09:e0:9c:f0:5d:63:30:07:
b3:fe:9c:b5:68:21:ab:49:2a:cc:9e:6b:10:19:42:
3c:b1:e0:87:f0:83:2c:ae:b0:34:9f:29:a7:c3:72:
d8:0d:e5:96:0e:9e:d9:b2:3b:56:e2:22:82:0a:7c:
05:0c:e1:73:14:7a:fe:89:6c:ca:eb:24:62:1c:3c:
62:f2:db:46:0a:f5:a3:18:68:bf:7c:ff:36:61:92:
59:ab:14:37:58:e9:f1:43:ef:ab:5d:1e:64:be:cc:
95:e0:6f:bf:24:66:18:0a:96:78:5c:d9:c8:6f:12:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A0:69:15:27:35:B1:9F:DE:75:3E:B7:BD:90:09:3D:E1:11:67:BE
X509v3 Authority Key Identifier:
keyid:D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:63:ca:47:77:b2:84:8c:8a:18:b4:97:72:93:7c:fd:ff:9a:
55:c4:53:62:6a:bb:4a:b3:93:09:ac:99:84:2c:2e:c1:97:12:
4a:58:23:70:99:d1:da:79:63:62:eb:3d:80:b9:e8:42:a1:3d:
d4:d2:ca:4c:2f:ab:4a:3e:fc:3f:65:39:d1:33:c8:07:d8:3e:
5a:f2:2d:b3:dd:65:f8:7c:cf:38:57:5e:71:10:37:45:f7:a1:
1a:53:3f:54:c2:c8:5a:d9:31:96:da:73:40:81:39:65:f1:5d:
1b:fb:9b:8c:35:a4:0c:af:09:63:29:87:9a:72:4b:80:c9:0c:
31:59:5b:4f:4e:b2:f7:98:bd:80:14:10:4e:f2:d1:d1:da:37:
45:b5:0d:56:53:f3:cc:43:95:7a:fd:3e:42:77:38:f6:d8:f1:
24:f6:fb:06:5a:31:42:14:28:b2:77:4b:2a:18:bd:b3:68:5c:
8d:7f:cf:c1:b0:ab:c1:46:88:56:73:3e:ef:00:21:9d:7a:fe:
15:81:c4:45:aa:57:7c:db:97:91:3a:3e:af:a1:8c:25:76:39:
ee:33:36:34:73:db:8a:15:33:d2:aa:e4:a2:8f:22:ca:8d:46:
f9:49:7e:c9:8f:ca:59:9a:f3:81:f4:c5:d3:d6:83:45:bd:14:
10:95:e8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:54:00 2026 by rpki-client