
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
File: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft (raw, json)
Hash identifier: yGj8eacDted6Qp4A9wkG58Ilxk3VqcjebyKRakJkTLs=
Subject key identifier: EF:A5:9E:54:D6:D9:B9:B3:CB:DD:BB:3F:A9:EC:9F:6C:7C:F1:B0:F7
Authority key identifier: C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82
Certificate issuer: /CN=A912B2EE/serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82
Certificate serial: 1001
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
Manifest number: 0FEC
Signing time: Wed 18 Feb 2026 17:12:48 +0000
Manifest this update: Wed 18 Feb 2026 17:12:48 +0000
Manifest next update: Wed 25 Feb 2026 17:12:48 +0000
Files and hashes: 1: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl (hash: z0OH6joFEowr3d/4trcD4JrqO2I4WmqJCVKoknn/4ts=)
2: 05449490E17B11EC93AB7473C4F9AE02.roa (hash: TQO7DA2C+52oraPsdnjGz3A009856ZzetwGGv8/CUtg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl
rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:12:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4097 (0x1001)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B2EE, serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82
Validity
Not Before: Feb 18 17:12:48 2026 GMT
Not After : Feb 25 17:12:48 2026 GMT
Subject: CN=6995f310-c7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:66:7f:f9:32:11:10:13:0f:ca:76:10:d6:d7:
a1:5a:33:c7:f9:dd:ba:c8:61:57:d0:07:7c:3f:4a:
2b:be:7d:d9:10:14:25:d0:1d:00:55:4c:b5:dd:85:
34:4b:21:ae:1a:52:0b:51:8c:c2:e0:a7:06:8c:36:
ea:30:81:5b:6c:37:a6:03:5e:57:64:2a:48:80:d1:
42:c0:33:29:12:c4:48:5e:77:78:62:0c:90:83:07:
6a:eb:e2:7b:5f:c1:57:8d:99:62:f0:f7:7c:0e:05:
b1:7e:39:63:47:7a:53:1b:0e:15:ad:02:4a:31:3a:
7c:1c:cd:51:ed:58:8e:7d:46:8b:0a:24:f6:aa:0a:
65:2f:35:ee:ca:4b:71:ad:51:29:ed:b8:b0:a3:e2:
54:1f:bd:39:67:88:ee:8a:c1:15:e4:a6:ea:bb:8b:
94:a6:76:d9:a3:31:01:91:8c:b4:36:7c:9f:cb:b1:
4c:0e:c2:8c:8d:33:98:60:32:10:2b:e2:46:d1:51:
30:b4:52:5e:b1:f8:e4:72:b8:9c:fb:0d:54:82:26:
bd:01:6f:b9:35:0f:8a:3b:ad:6a:31:43:14:5c:09:
3e:ac:c5:42:14:71:b0:fb:2c:d6:ff:27:07:bd:4a:
16:3a:bd:4c:0d:2f:f8:b0:2c:d0:d2:24:70:00:07:
0f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A5:9E:54:D6:D9:B9:B3:CB:DD:BB:3F:A9:EC:9F:6C:7C:F1:B0:F7
X509v3 Authority Key Identifier:
keyid:C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:cc:73:0d:a4:a6:da:39:1d:85:6d:71:5f:af:0c:04:8a:da:
73:98:95:29:d8:1c:93:ad:ea:fd:dd:9a:1c:e7:45:e6:2d:b2:
77:ec:5c:7a:1d:e2:34:24:a7:6a:06:92:4a:56:f0:94:5e:b3:
39:d8:05:7d:95:d5:62:4d:e5:15:4b:01:aa:29:68:f3:1f:df:
5f:fd:89:6c:45:4d:6f:3e:69:34:cd:a6:71:e4:45:29:5c:a1:
28:f9:cc:23:1f:54:af:be:20:e2:37:44:22:52:31:27:23:54:
76:81:6c:71:80:44:2a:74:f4:b6:24:d1:26:ed:7f:57:f9:ad:
46:a3:a6:24:03:39:87:6c:80:54:de:08:d7:83:35:35:8e:a3:
0d:8b:06:6b:2e:98:e4:7f:8b:d0:c0:79:b2:72:96:d1:2b:22:
7e:65:fb:6e:bb:83:7f:21:64:d2:3e:01:4a:d0:76:1f:96:77:
e3:6a:83:b7:f5:23:ce:64:4c:c1:af:6c:17:e9:5b:eb:17:88:
1d:81:e7:94:b0:c6:c5:af:c8:28:c9:ab:85:52:ca:f0:2f:76:
f6:12:d0:5e:fa:e0:42:58:dd:72:a3:b0:c0:8c:d4:ef:b0:94:
94:ac:11:a2:ec:c2:89:b8:fd:d8:da:c7:9d:b6:a2:c5:d5:74:
d9:61:77:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:54 2026 by rpki-client