
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
File: kB-Ykfv38n1Bah7gazGwFlquHcU.mft (raw, json)
Hash identifier: rZsJd139bVuq5JrqKWV7bqEmUsen0qz1Vy4gXe24v7g=
Subject key identifier: D6:3B:D1:25:F1:70:10:F7:0A:2E:F2:A9:4D:FB:73:45:CA:0C:E4:EB
Authority key identifier: 90:1F:98:91:FB:F7:F2:7D:41:6A:1E:E0:6B:31:B0:16:5A:AE:1D:C5
Certificate issuer: /CN=A9132D93/serialNumber=901F9891FBF7F27D416A1EE06B31B0165AAE1DC5
Certificate serial: 046E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
Manifest number: 046A
Signing time: Wed 18 Feb 2026 23:22:00 +0000
Manifest this update: Wed 18 Feb 2026 23:22:00 +0000
Manifest next update: Wed 25 Feb 2026 23:22:00 +0000
Files and hashes: 1: kB-Ykfv38n1Bah7gazGwFlquHcU.crl (hash: v2kwt91hppm92kufTfkuz219GS9RSRWkOu5+0KH3wZc=)
2: 4E0503CA7F3F11ECBB0EA972C4F9AE02.roa (hash: zGO+SfCUiN93pLbUpzCLUs56wrah6tVni3k+tYi9qSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.crl
rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1134 (0x46e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132D93, serialNumber=901F9891FBF7F27D416A1EE06B31B0165AAE1DC5
Validity
Not Before: Feb 18 23:22:00 2026 GMT
Not After : Feb 25 23:22:00 2026 GMT
Subject: CN=69964998-f8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:62:8e:b4:04:7d:7d:b6:e1:bd:23:18:64:
29:cf:b4:06:0b:2c:d3:f9:e8:59:09:95:f3:00:2c:
0a:a3:ec:8b:3a:d0:83:e1:b8:01:9c:1b:29:35:f3:
bd:32:77:69:1b:0a:8b:be:4c:e1:0b:d5:9d:6d:52:
e8:2b:b3:6f:92:cc:39:f0:7f:34:0a:d4:e1:13:42:
e6:b0:c8:2a:c0:ba:01:c5:e2:9c:31:34:28:fb:82:
23:22:3b:ca:f8:e0:cc:95:dc:a2:98:c2:30:9e:7b:
93:48:cc:11:c7:2f:7f:10:c9:15:43:b3:6c:25:15:
df:6a:70:68:c0:fe:e1:3d:47:9b:8e:83:d2:8e:75:
00:ff:e8:de:07:2c:69:c8:97:b0:ca:8e:78:19:8c:
17:c2:9e:d8:31:d1:1b:42:7e:a9:6f:19:83:b0:53:
c5:4e:e4:9d:23:ee:10:45:a7:ac:38:1a:80:4f:76:
99:fe:91:81:32:dd:55:40:8c:91:67:1f:ff:ed:3c:
26:de:a7:cd:0b:be:70:30:e2:c1:23:12:2a:e1:85:
9a:6a:72:44:66:ba:b3:39:9e:7c:81:70:3d:42:22:
4c:66:26:b7:93:3f:1b:e9:27:8a:9e:fa:e3:c5:9b:
3f:a2:62:22:8a:7e:86:d2:9f:83:9d:1d:e3:69:d5:
51:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3B:D1:25:F1:70:10:F7:0A:2E:F2:A9:4D:FB:73:45:CA:0C:E4:EB
X509v3 Authority Key Identifier:
keyid:90:1F:98:91:FB:F7:F2:7D:41:6A:1E:E0:6B:31:B0:16:5A:AE:1D:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:51:42:bc:ba:d5:44:75:2b:8d:cf:1b:c6:44:d2:24:0d:3d:
43:f8:57:ca:30:f4:49:b9:fc:b3:66:d3:05:11:5a:17:76:1b:
d0:57:b6:6a:13:a6:4b:ab:e3:ef:62:cb:df:74:fb:76:59:bd:
14:2e:bd:80:cc:4f:42:73:00:bc:cb:a9:d9:c1:e7:de:e7:35:
62:cf:8a:f7:63:33:2f:ab:47:58:53:32:e2:0d:f4:7a:53:82:
a9:20:a0:c9:66:52:8a:cf:3a:fa:43:70:11:b6:32:78:8c:9d:
25:9c:87:c1:1a:6a:c1:d0:54:3d:2d:7c:2a:53:0e:7b:63:4b:
6f:60:d4:0b:4f:40:28:61:52:25:9c:47:52:a0:fe:58:61:7f:
7b:2b:85:01:0e:40:8c:90:5f:4e:5e:3a:e2:60:97:34:f9:d6:
2e:99:de:0d:2b:82:5b:33:6f:2b:6d:f7:db:b1:20:ca:85:62:
d7:18:0e:c8:f4:28:b5:34:e8:62:b8:6e:79:1b:d4:5a:6e:ad:
8a:dd:1b:8e:1d:4e:94:8a:9a:81:71:67:df:8c:12:c3:70:34:
dc:96:53:d9:47:c8:ce:9c:b0:f9:c5:f1:1f:9a:b1:fb:94:8a:
61:98:d6:d1:52:f2:a9:65:bc:eb:cb:81:d3:39:f1:cc:55:dd:
53:f8:de:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:18:04 2026 by rpki-client