
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
File: ysNNxbjd0zsX7HVcldRdD3YlD6g.mft (raw, json)
Hash identifier: DdnwVytm1lGiezc5oQqbxnh4dzcKPYYUX5XOyv5Ixrs=
Subject key identifier: 5B:2B:CB:D5:11:EE:8B:BD:69:0C:50:54:9C:39:F2:CE:2A:2D:BE:25
Authority key identifier: CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8
Certificate issuer: /CN=A91C9B39/serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
Certificate serial: 0258
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
Manifest number: 0254
Signing time: Thu 19 Feb 2026 01:05:05 +0000
Manifest this update: Thu 19 Feb 2026 01:05:05 +0000
Manifest next update: Thu 26 Feb 2026 01:05:05 +0000
Files and hashes: 1: ysNNxbjd0zsX7HVcldRdD3YlD6g.crl (hash: nMKVYskFhqi7q66Wmjk1d1pd6RTpAKfRrgOibe9S5+c=)
2: E21DEF607B5E11ED98247D60C4F9AE02.roa (hash: sHBWYK9XVEHZv+A/fyqhHjEvweQybzBfh5wreKa0iZw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl
rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600 (0x258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9B39, serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
Validity
Not Before: Feb 19 01:05:05 2026 GMT
Not After : Feb 26 01:05:05 2026 GMT
Subject: CN=699661c1-f44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:f0:c5:6a:5a:8a:b1:de:70:2e:6e:68:b6:
02:2b:67:d6:5f:53:1e:c1:1d:19:24:f9:26:4c:51:
e8:03:5b:c0:6b:ea:a0:3d:75:b0:05:b9:97:c6:6b:
78:c4:d3:c9:25:b9:85:94:a2:c4:66:5d:69:d5:18:
e7:40:87:f3:47:66:d4:85:66:8a:24:f2:8f:7e:e4:
42:d4:68:e2:21:49:c8:f2:13:d0:a7:e0:89:0f:15:
a8:51:ca:3e:be:27:65:95:a4:61:28:1f:2e:d2:a7:
75:45:fe:d2:5b:80:b4:1c:c8:99:51:7d:a4:dd:f9:
f3:7d:f7:99:14:95:a5:51:71:06:df:d7:7a:c7:3a:
80:a1:d3:02:ae:e5:13:d4:c4:b5:17:73:87:68:a7:
49:ea:7f:f3:60:49:83:05:50:de:22:cc:c3:52:1f:
c5:76:20:83:a4:7b:22:1b:9f:28:23:7c:48:5e:06:
16:6b:7d:db:40:28:76:cd:b9:76:36:6d:57:94:84:
1e:d7:ca:45:83:55:6f:e7:b3:24:b6:8d:fc:2f:18:
9f:60:82:a2:a9:f4:e0:c2:e5:d3:2e:bf:db:2e:99:
dc:c0:b0:11:29:ce:d4:b7:b3:cb:80:1a:fa:90:05:
09:78:05:75:79:33:b1:7f:3f:d3:12:fb:f8:57:d8:
e1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2B:CB:D5:11:EE:8B:BD:69:0C:50:54:9C:39:F2:CE:2A:2D:BE:25
X509v3 Authority Key Identifier:
keyid:CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:69:f3:80:b0:c8:71:77:18:9b:18:41:a1:2d:78:75:d2:2a:
a3:a7:e9:1d:3e:ef:d7:87:d0:2f:ab:b5:08:f9:4b:48:e1:23:
ae:3d:ad:db:4b:ea:da:58:40:0b:f4:23:a3:73:ea:81:56:2f:
c0:72:d1:a8:bc:e6:12:38:1c:93:12:d8:73:13:26:66:76:21:
0a:67:44:10:dd:2a:03:e9:58:ae:02:de:91:ca:fc:c8:ac:07:
e9:a4:9a:12:3a:a0:72:0c:25:e5:2f:01:df:e1:5a:10:6b:c4:
d9:94:64:2c:ba:9b:0b:c5:a9:b9:d1:26:8a:b4:ce:4f:8e:9a:
7b:80:23:19:44:3b:77:dd:bc:b4:5e:30:2a:f0:7c:a8:ec:35:
be:79:51:e7:b6:af:c7:a5:e8:0f:61:2d:47:d5:cf:84:a0:3a:
83:93:96:be:99:39:41:38:a3:09:19:19:16:fa:f3:7f:9a:47:
48:78:a0:ee:8c:6b:4a:f0:f6:da:28:2d:09:08:d1:12:c7:c4:
1a:85:92:50:12:78:1e:04:c1:73:55:65:b0:85:cb:2f:3d:f0:
d5:3c:37:ae:f4:51:ad:ec:20:e1:85:1c:7f:aa:0b:14:9c:c7:
7b:88:e3:7d:f5:02:c6:02:1c:e8:82:f3:85:33:e0:09:de:71:
47:bf:d7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:12:54 2026 by rpki-client