
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.mft
File: YX8FTjzkUeDD5_RG3Qn3hkZStlY.mft (raw, json)
Hash identifier: I/7dBvgPFxVjM3xsmjhxIbuA9+WbrsF9yY4h1TdFk48=
Subject key identifier: 05:77:BC:3E:80:C1:AE:CF:1D:57:2D:22:E6:17:1E:DD:CD:51:7C:CE
Authority key identifier: 61:7F:05:4E:3C:E4:51:E0:C3:E7:F4:46:DD:09:F7:86:46:52:B6:56
Certificate issuer: /CN=A91A1CAA/serialNumber=617F054E3CE451E0C3E7F446DD09F7864652B656
Certificate serial: 017A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YX8FTjzkUeDD5_RG3Qn3hkZStlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.mft
Manifest number: 0177
Signing time: Thu 19 Feb 2026 03:12:02 +0000
Manifest this update: Thu 19 Feb 2026 03:12:01 +0000
Manifest next update: Thu 26 Feb 2026 03:12:01 +0000
Files and hashes: 1: YX8FTjzkUeDD5_RG3Qn3hkZStlY.crl (hash: Xr0RbYFrrGoZCdLalctKUxV0qpe3GOw7PGAmtdfHYes=)
2: E75FB4F0CE4A11EE95C15E20C4F9AE02.roa (hash: utq11zi2cO+ldR8mXOv++lb25ZgD5tUSUW03iRiwBL0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.crl
rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YX8FTjzkUeDD5_RG3Qn3hkZStlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1CAA, serialNumber=617F054E3CE451E0C3E7F446DD09F7864652B656
Validity
Not Before: Feb 19 03:12:01 2026 GMT
Not After : Feb 26 03:12:01 2026 GMT
Subject: CN=69967f82-261e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b0:53:b8:96:a4:1d:93:f9:eb:ac:1a:b9:f4:
18:eb:68:85:dd:3b:87:ab:49:28:fd:ca:c5:12:32:
d9:25:6c:ed:a8:a9:9b:bd:5f:7e:e9:cf:78:8f:cc:
86:6d:bc:c4:c2:e7:ff:a8:76:b0:70:42:a1:c6:5b:
f0:a5:ac:5b:ca:e4:8a:49:70:94:07:7e:b3:63:67:
91:ea:54:b1:a7:fa:21:c8:7f:cd:54:28:29:61:24:
2a:7f:ec:8d:3b:8d:3c:3f:1e:78:df:0b:4e:dd:56:
d4:8d:c2:c6:f8:47:2c:5d:6f:84:4d:78:88:1f:c5:
e4:4d:b6:79:59:35:da:c7:b5:67:5e:8c:30:da:9d:
85:2a:e8:d8:6b:b3:17:6b:1e:d0:77:79:f0:30:4c:
4f:c6:b7:d9:f4:90:67:94:0f:5e:87:90:65:ab:88:
4d:95:c1:b4:6e:ad:64:f0:f4:c2:64:46:dd:79:75:
62:fe:e1:6b:ae:97:78:61:dc:7f:0d:55:f8:53:50:
86:c3:87:f5:90:c7:55:54:f7:6e:a7:1f:ec:5d:af:
5c:67:39:86:3e:f3:a1:f3:57:f7:50:7e:c3:1d:5d:
b3:9f:18:dc:5b:6a:1e:b4:03:f9:1b:d0:1c:92:55:
9e:ba:ed:06:e3:e6:c3:49:ce:58:b9:4a:64:59:88:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:77:BC:3E:80:C1:AE:CF:1D:57:2D:22:E6:17:1E:DD:CD:51:7C:CE
X509v3 Authority Key Identifier:
keyid:61:7F:05:4E:3C:E4:51:E0:C3:E7:F4:46:DD:09:F7:86:46:52:B6:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YX8FTjzkUeDD5_RG3Qn3hkZStlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:a0:8b:8a:aa:4f:d8:a3:cf:78:e8:26:27:20:7f:24:ba:b9:
7f:65:5a:9e:40:eb:eb:5f:48:1f:36:7d:a0:e1:87:03:a4:b1:
83:c3:b0:7c:ae:a9:99:61:80:16:fd:42:6e:b5:26:7a:db:8c:
1d:6f:6d:72:46:d7:90:52:4f:20:c9:cc:e2:94:e3:ac:c9:40:
e3:7a:38:e2:ce:6a:f1:69:ed:c0:72:82:b8:ce:32:c3:b0:66:
61:a2:69:27:71:f9:8e:c9:68:df:6b:4c:cf:58:dc:ae:32:a9:
1f:a1:cc:eb:e8:89:b9:0e:f9:3a:7c:f8:68:fc:9f:59:2b:b9:
ec:c7:23:a7:80:4b:82:ba:0b:86:88:67:36:c5:9d:a4:b8:af:
a1:1a:95:d3:09:84:63:08:a1:87:a9:3f:da:b3:09:fb:6d:8c:
31:54:c1:e8:d5:fc:8a:ae:9f:98:4d:c3:6b:13:44:bf:b7:8e:
fa:34:1a:df:c0:50:40:5a:b2:77:4f:fb:be:3f:4b:64:41:81:
f6:54:5d:50:59:f0:27:1c:27:06:6e:2e:01:90:bf:f1:d0:5a:
b6:fc:9c:00:c8:41:cf:13:d8:6f:b1:72:6e:36:d2:7f:ae:e0:
90:d9:0b:0e:94:1d:04:79:16:9c:4d:8c:ce:60:96:99:01:90:
b3:85:cf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:37:57 2026 by rpki-client