
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
File: Yja2yVcFRCapTOamlDI45v5tH1Y.mft (raw, json)
Hash identifier: 8IX30tbWIKsDEDOO5egOrYDY4O4TBrocEW6ikn9nobo=
Subject key identifier: CF:05:7A:B4:6F:F0:26:91:63:F0:76:EB:6F:D6:88:7E:1E:7E:47:FC
Authority key identifier: 62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56
Certificate issuer: /CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56
Certificate serial: 045A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
Manifest number: 0455
Signing time: Wed 18 Feb 2026 23:26:13 +0000
Manifest this update: Wed 18 Feb 2026 23:26:12 +0000
Manifest next update: Wed 25 Feb 2026 23:26:12 +0000
Files and hashes: 1: Yja2yVcFRCapTOamlDI45v5tH1Y.crl (hash: TT92d2fP8sIIWkiN6kR5vIxcOLBmPSplT/djkYg2CVg=)
2: 8B626F5487C911EC908CE327C4F9AE02.roa (hash: 4ePFqqTPP+4ZfS7bacR18941px2N5kQ0emROx+NaWmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl
rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1114 (0x45a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D655, serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56
Validity
Not Before: Feb 18 23:26:12 2026 GMT
Not After : Feb 25 23:26:12 2026 GMT
Subject: CN=69964a94-bf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:74:e2:d5:ba:dd:e8:24:a0:fd:5d:d6:b0:
eb:7c:6b:14:c6:c9:ed:97:7f:d9:f7:0c:2a:29:8d:
bd:f7:cd:6f:0b:32:d0:f9:e7:14:19:2b:88:b4:42:
fb:4c:3d:71:3f:41:d8:33:67:5e:f9:65:2c:40:7a:
b6:45:92:15:87:c7:05:71:94:02:7a:47:6c:7e:97:
39:55:42:36:71:70:b9:ab:11:79:9d:3e:1e:9f:d8:
e0:c5:d1:85:94:b7:bc:49:33:ed:ec:b2:40:37:85:
3e:28:f9:1c:66:a9:47:35:37:1e:2a:50:d7:cb:b9:
ec:47:80:c8:8f:ca:0c:26:79:aa:49:55:00:2f:8b:
65:ad:5e:78:24:ad:a2:a2:86:1d:e5:9f:e1:36:ae:
41:cd:fd:f4:4c:bb:55:92:f5:f0:4e:f1:dd:0a:7a:
d4:67:8d:77:c7:ed:8a:ff:66:a3:63:4d:2c:0b:0c:
7e:2c:54:fe:1e:66:48:46:41:9e:7a:46:a7:0c:0f:
5e:44:a3:2d:b7:5d:95:c0:a3:43:a8:39:7f:69:76:
aa:a9:48:5c:97:a9:35:4c:17:2e:4f:1a:6b:df:45:
5b:7e:c8:56:95:b9:22:7c:51:d1:5a:60:cf:26:4b:
8d:d9:35:a5:e2:ab:62:01:14:38:60:03:d1:84:ad:
37:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:05:7A:B4:6F:F0:26:91:63:F0:76:EB:6F:D6:88:7E:1E:7E:47:FC
X509v3 Authority Key Identifier:
keyid:62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:49:05:a5:fe:fc:d4:c8:b5:f4:88:62:c4:37:be:37:ad:0e:
67:a4:be:9a:b1:ff:da:05:3a:02:72:75:bc:ca:d4:86:e0:92:
04:37:dc:02:b7:9f:b5:1a:d3:ec:a6:3c:da:4a:0b:54:9b:3b:
d1:76:8b:3e:cd:53:0d:3f:9a:1b:a5:0d:d2:68:eb:07:83:81:
de:e8:7c:34:fe:a2:a7:db:5e:be:b5:e2:69:f8:e1:5d:6b:02:
59:4a:97:a9:ae:f5:97:12:a2:95:f0:68:f7:d5:b2:de:84:19:
69:8c:e3:a2:46:ad:95:7e:e3:8e:e2:13:1a:4c:5a:ad:c0:8c:
04:7b:59:48:1b:04:e1:2f:a0:7a:01:65:d6:68:f3:e6:aa:ad:
f4:8d:89:59:55:a1:45:06:78:9a:7b:6e:84:5f:16:68:d5:ef:
fb:70:09:47:7e:22:1d:e4:26:79:d9:b7:a7:e7:3e:35:c0:68:
65:91:32:c2:5d:9b:c0:c4:00:75:c0:a1:51:ec:36:9b:86:07:
ee:c4:f9:77:17:66:29:d4:af:c2:1d:54:c2:68:2e:c8:17:de:
5a:2c:be:3e:f7:bb:04:56:17:aa:bc:c3:6e:44:41:30:6d:8d:
80:5a:fd:97:8f:f4:7a:f1:6e:3c:46:c5:5b:13:22:18:ed:7a:
ca:53:3c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:31:21 2026 by rpki-client