
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
File: yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft (raw, json)
Hash identifier: AZv53BScSIaNTWC7snLMT6m8Kx+vGSGTq46TsHjtyK0=
Subject key identifier: E7:22:17:A3:F5:8D:E4:EF:8C:CA:4D:43:F7:4C:9B:DF:C6:B0:DA:2D
Authority key identifier: C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54
Certificate issuer: /CN=A91B49F2/serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54
Certificate serial: 0ED8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
Manifest number: 0EC2
Signing time: Wed 18 Feb 2026 17:24:26 +0000
Manifest this update: Wed 18 Feb 2026 17:24:26 +0000
Manifest next update: Wed 25 Feb 2026 17:24:26 +0000
Files and hashes: 1: yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl (hash: 0qjfssSzceo3hF/l9TOffqJTmwwnPtJURTlxcNMdTkc=)
2: 79395BE68EB311EF9A8DFC3CC4F9AE02.roa (hash: RU2Bp78eGDXSscZxxDiygRwZ64V3JmS10+rUng9roo8=)
3: BB0AA59C0A3D11EB82ECEA4BC4F9AE02.roa (hash: ecUYAzKP1VHNDV8/DURQ3XmWYJTnzDR9mLUMMYKH7wE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl
rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3800 (0xed8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B49F2, serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54
Validity
Not Before: Feb 18 17:24:26 2026 GMT
Not After : Feb 25 17:24:26 2026 GMT
Subject: CN=6995f5ca-79c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:af:3b:b3:80:55:f0:56:f7:e6:42:b9:e6:3a:
aa:64:4c:22:2e:1d:34:69:50:f2:bb:c0:46:59:76:
30:3c:b8:42:62:fd:b6:fa:f3:3b:40:72:a9:66:3d:
97:29:92:01:bc:d1:80:b1:4d:e3:fc:c1:70:7d:8a:
b0:2a:05:88:d5:2e:3f:d2:7c:d4:4b:ec:58:f0:1b:
3b:9f:31:93:6d:1d:47:61:9d:dc:4e:65:7f:19:9a:
2c:52:fa:55:85:61:52:35:30:2f:a3:ba:5d:69:ec:
71:7c:e7:0d:7d:7f:07:d2:4f:0b:bd:ba:4c:e0:30:
6e:05:47:90:0a:cb:95:79:64:7f:3e:0d:0d:3d:88:
9e:7a:20:18:54:1d:a0:00:30:b8:72:6e:40:dd:1d:
d6:f0:0c:ec:6e:f7:4c:34:9b:7e:89:b9:32:00:94:
3e:3c:b6:2e:c9:41:6f:2c:c6:43:64:12:3d:b8:0c:
38:78:d9:ee:73:6f:f3:b6:8e:b4:bc:2e:85:44:22:
c3:54:e2:7b:e3:a3:11:8c:c0:1c:5d:ce:4c:39:0b:
aa:4c:84:ce:58:e5:df:be:1b:21:22:4c:ca:5c:48:
ef:dd:9a:a4:60:1c:44:d3:cb:6c:ae:fa:b8:0c:e6:
02:d8:15:95:15:55:05:03:b2:4e:2d:15:af:55:7a:
d1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:22:17:A3:F5:8D:E4:EF:8C:CA:4D:43:F7:4C:9B:DF:C6:B0:DA:2D
X509v3 Authority Key Identifier:
keyid:C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3e:57:f9:e4:e0:f9:64:26:60:76:fe:d0:03:23:c8:2d:d6:
70:b8:c1:48:1d:cb:57:39:1f:8c:06:e4:35:89:73:e8:fa:fd:
b1:c8:2f:6a:c8:83:72:2b:7b:06:84:30:d4:d4:23:20:be:c1:
b8:8a:8c:ab:2f:c6:d3:66:6a:6a:2d:5a:17:0c:f6:f1:c5:da:
8d:3a:75:63:76:34:9f:58:da:91:79:7c:f7:48:6e:5f:63:c5:
a9:f9:a0:55:7b:8e:8e:8e:31:b2:53:d6:b5:b7:3a:90:f5:ad:
f1:7e:10:77:69:58:bf:f5:25:c8:ce:9d:38:ae:3d:09:61:50:
7d:ca:5d:87:50:1d:ac:76:a3:82:20:87:95:57:12:9d:21:69:
66:59:cc:0b:a7:d4:83:78:14:0b:62:a8:e6:76:2f:44:5e:dd:
1e:d2:10:72:c5:e1:ab:5d:e1:0c:2d:8b:59:63:93:24:06:54:
8d:4e:13:64:66:cc:08:de:cb:a0:bd:6a:fa:4d:3f:63:70:d1:
bf:2e:eb:ab:7f:a4:67:7e:7a:95:6b:d7:95:b2:0c:d4:a5:3b:
68:ab:a4:e2:b1:3b:5a:a7:5c:e5:cf:cc:94:e2:8d:f5:45:49:
b5:8b:73:e0:68:43:11:f2:cc:33:a1:ea:01:f7:21:27:50:c6:
c3:9e:93:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:41:53 2026 by rpki-client