
$ rpki-client -vvf rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
File: P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft (raw, json)
Hash identifier: JPo5ECak2x40eyA6om+pFys8uE3m/shK13j0rPdW8c4=
Subject key identifier: 4D:3C:09:94:C4:00:C4:35:B0:66:1C:CC:CD:7A:3C:1E:38:3D:61:46
Authority key identifier: 3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94
Certificate issuer: /CN=A914988F/serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094
Certificate serial: 0848
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
Manifest number: 0840
Signing time: Wed 18 Feb 2026 20:19:11 +0000
Manifest this update: Wed 18 Feb 2026 20:19:11 +0000
Manifest next update: Wed 25 Feb 2026 20:19:11 +0000
Files and hashes: 1: P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl (hash: VnhOGfbeCqqKBppHaavxa04EzPeFWhguGno5luPALZ0=)
2: 4ED5A00CFE2611EAA4F3424DC4F9AE02.roa (hash: jObAEaW9jlDTMyIb6A8JZqjslqhvlPIsAzJOzv+NnRY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl
rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2120 (0x848)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914988F, serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094
Validity
Not Before: Feb 18 20:19:11 2026 GMT
Not After : Feb 25 20:19:11 2026 GMT
Subject: CN=69961ebf-37e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:56:5d:6e:51:a0:73:ff:0b:ec:11:0c:4d:
51:8c:1d:57:dd:33:5a:32:db:0a:92:90:b2:26:cf:
d9:c4:45:ba:82:74:06:6d:3a:3e:36:cf:3c:70:4c:
07:b1:9b:88:82:e0:13:4d:b0:84:f6:ff:40:5f:80:
b9:37:94:93:7d:fa:3d:ed:13:04:77:5c:91:0b:3c:
b8:34:fc:d9:98:b0:4e:0d:70:d8:42:60:78:9c:7c:
19:f5:4a:6a:5e:51:30:cb:8d:ef:4b:78:df:1f:63:
eb:37:6c:a1:e3:7f:a5:be:3b:23:4c:c6:cb:97:dd:
62:96:6e:34:31:b4:24:48:ee:53:1b:65:91:35:bb:
63:60:0f:65:92:5c:84:69:83:49:b7:50:3b:0a:ae:
2a:d8:c1:1e:70:74:13:3f:07:7d:a2:3f:ad:45:d8:
be:1c:26:a2:4b:47:80:78:bb:5a:75:7d:d3:d7:bc:
18:e2:c1:b5:39:3c:b6:d4:ef:87:58:4d:0a:a8:00:
c7:5e:19:90:65:c1:21:68:ce:49:ef:5e:e7:d9:63:
d6:74:5a:a7:31:74:88:c7:81:aa:3d:bf:1e:f4:3a:
55:8b:22:62:51:b8:aa:9a:12:a7:a5:bf:ff:a0:70:
03:8c:17:3b:16:c2:d9:b8:5e:9f:1f:ae:01:7f:72:
7c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3C:09:94:C4:00:C4:35:B0:66:1C:CC:CD:7A:3C:1E:38:3D:61:46
X509v3 Authority Key Identifier:
keyid:3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:89:9c:e6:a6:16:d1:71:7d:82:ee:b7:0c:79:07:73:84:d6:
8f:fa:f7:5a:4b:4a:49:8e:b4:2c:83:9a:94:2a:68:e6:e9:b6:
68:b3:ad:c5:8f:81:7e:ef:f1:84:bf:55:64:0c:51:7e:ad:56:
9c:b5:0a:44:1e:38:ee:9d:0e:0b:19:32:dc:93:b0:88:1e:8d:
3a:4e:2f:43:50:26:51:05:70:a1:8e:85:a2:23:79:0c:b9:b7:
cb:21:fa:f7:13:73:23:9b:88:9c:db:a1:51:1e:15:3b:05:48:
51:27:11:9d:54:0c:5d:2f:af:70:ef:f6:b6:20:3a:f3:d3:1d:
1b:ce:49:a9:88:10:67:03:6f:64:ef:b7:c7:43:3d:90:4a:b3:
ee:b4:34:8f:91:28:d5:57:f4:dc:f9:43:44:c6:bd:99:2a:e6:
8c:36:87:ba:3e:3f:1c:44:e6:3a:25:46:30:e8:61:11:11:7c:
d6:88:55:b6:5b:c0:8b:55:b0:89:d5:8b:ff:43:c4:b6:ae:e8:
a9:a9:c7:f1:29:f5:4c:e1:18:45:05:ce:1f:7f:0b:00:4d:e6:
f6:6a:d9:fd:f2:ca:70:90:1d:a8:81:5f:32:e7:84:23:6c:f6:
13:29:fd:e2:4c:ff:f0:7b:50:a2:0e:95:c6:8c:06:2f:1e:79:
56:71:df:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDk4OEYxMTAvBgNVBAUTKDNGRTYwMzFGMjU1NjdBNDU0N0NERTE3MzFBMkQ4MTRE
Qjg2RTIwOTQwHhcNMjYwMjE4MjAxOTExWhcNMjYwMjI1MjAxOTExWjAYMRYwFAYD
VQQDDA02OTk2MWViZi0zN2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAveNWXW5RoHP/C+wRDE1RjB1X3TNaMtsKkpCyJs/ZxEW6gnQGbTo+Ns88cEwH
sZuIguATTbCE9v9AX4C5N5STffo97RMEd1yRCzy4NPzZmLBODXDYQmB4nHwZ9Upq
XlEwy43vS3jfH2PrN2yh43+lvjsjTMbLl91ilm40MbQkSO5TG2WRNbtjYA9lklyE
aYNJt1A7Cq4q2MEecHQTPwd9oj+tRdi+HCaiS0eAeLtadX3T17wY4sG1OTy21O+H
WE0KqADHXhmQZcEhaM5J717n2WPWdFqnMXSIx4GqPb8e9DpViyJiUbiqmhKnpb//
oHADjBc7FsLZuF6fH64Bf3J89wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE08CZTE
AMQ1sGYczM16PB44PWFGMB8GA1UdIwQYMBaAFD/mAx8lVnpFR83hcxotgU24biCU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTg4Ri8xOTI0N0ZCQUZF
MjUxMUVBOUNDMTBDNENDNEY5QUUwMi9QLVlESHlWV2VrVkh6ZUZ6R2kyQlRiaHVJ
SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1AtWURIeVZXZWtWSHplRnpHaTJCVGJodUlKUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OTg4Ri8xOTI0N0ZCQUZFMjUxMUVBOUNDMTBDNENDNEY5QUUwMi9QLVlESHlWV2Vr
Vkh6ZUZ6R2kyQlRiaHVJSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCeiZzmphbRcX2C7rcMeQdzhNaP+vdaS0pJjrQsg5qUKmjm6bZos63F
j4F+7/GEv1VkDFF+rVactQpEHjjunQ4LGTLck7CIHo06Ti9DUCZRBXChjoWiI3kM
ubfLIfr3E3Mjm4ic26FRHhU7BUhRJxGdVAxdL69w7/a2IDrz0x0bzkmpiBBnA29k
77fHQz2QSrPutDSPkSjVV/Tc+UNExr2ZKuaMNoe6Pj8cROY6JUYw6GEREXzWiFW2
W8CLVbCJ1Yv/Q8S2ruipqcfxKfVM4RhFBc4ffwsATeb2atn98spwkB2ogV8y54Qj
bPYTKf3iTP/we1CiDpXGjAYvHnlWcd8T
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:14 2026 by rpki-client