
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft
File: yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft (raw, json)
Hash identifier: cF78feA57/Gk7UScaDoCm9VWHNq8PWyv8L7GuxTeiB4=
Subject key identifier: 72:F6:FC:78:CE:43:6E:F9:97:39:3A:74:2E:8D:00:CC:C3:44:F3:DF
Authority key identifier: C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B
Certificate issuer: /CN=A91CC8B1/serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B
Certificate serial: 0CB4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft
Manifest number: 0CAC
Signing time: Wed 18 Feb 2026 18:04:12 +0000
Manifest this update: Wed 18 Feb 2026 18:04:11 +0000
Manifest next update: Wed 25 Feb 2026 18:04:11 +0000
Files and hashes: 1: yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl (hash: vKiG2otIfXyogFofzI/lXavSDnNDThSRoFSJvQgGbnU=)
2: 69308C200A9611EABF034172C4F9AE02.roa (hash: UpR8nuBc/YxAqJ5KwZdD471HRL+h2X0H2SIoY13S/74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl
rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3252 (0xcb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC8B1, serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B
Validity
Not Before: Feb 18 18:04:11 2026 GMT
Not After : Feb 25 18:04:11 2026 GMT
Subject: CN=6995ff1c-ac52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:e3:ed:20:ac:b1:74:70:8d:b5:0e:8d:54:
f7:4b:55:e5:55:aa:c8:f1:ff:56:4c:97:d7:90:21:
45:40:35:36:07:34:f0:43:81:fd:fd:9f:a5:69:41:
7e:9c:5f:c4:1b:b1:26:1e:25:7e:4e:d4:5d:b8:01:
6c:0d:ce:d1:44:2c:54:07:b7:06:4d:90:21:0f:73:
a8:69:36:81:7d:48:83:ea:b0:80:14:db:ab:d3:76:
b0:7f:d6:c2:e9:64:15:ce:98:0d:ba:31:4e:83:af:
c1:be:da:76:c2:78:37:46:44:89:90:7d:f4:fc:b4:
9b:2a:8e:d8:ca:83:5e:4d:b3:1c:90:0a:ed:47:3a:
ab:03:b4:f3:40:64:cc:9c:52:c7:74:b9:2f:ca:e0:
4a:50:7b:d9:95:e1:f4:be:63:2e:7a:cd:ff:e9:31:
84:38:d0:d1:23:55:49:35:c7:e1:23:1c:bf:a0:09:
c0:99:1b:83:4a:5b:2b:a0:80:94:fa:f0:11:42:b0:
dc:2c:d0:e4:fc:2b:99:cd:03:90:6d:67:44:f3:b0:
85:f2:56:db:67:01:04:4d:b1:1b:aa:0d:9b:01:4d:
24:4f:61:94:d0:53:5d:07:ef:59:c1:3a:1d:44:a5:
87:6a:22:41:0c:a0:7b:44:7b:d0:63:ed:ee:82:89:
8d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F6:FC:78:CE:43:6E:F9:97:39:3A:74:2E:8D:00:CC:C3:44:F3:DF
X509v3 Authority Key Identifier:
keyid:C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:36:74:c5:46:80:74:9f:7f:a6:c5:a3:d0:b7:08:74:95:62:
2e:4b:a8:e2:e9:66:a1:d3:6d:46:eb:71:41:90:4b:f9:ee:59:
d7:59:c5:94:11:a4:c3:4c:32:db:5f:b2:6a:d6:76:85:45:9f:
88:aa:f3:fb:b1:80:5e:10:aa:18:7b:ef:ae:d2:02:9e:02:1e:
b8:88:41:dc:63:88:a0:33:28:c3:e4:af:d2:8f:2f:3e:2b:60:
a5:1e:f3:cc:d7:ca:85:a5:09:0f:40:4b:11:8d:69:4a:ca:d2:
d0:00:7f:01:83:26:ad:a6:68:bb:a6:15:5d:0d:80:c5:e7:fd:
2c:77:09:72:82:d5:ff:0e:fd:92:93:42:77:b1:7b:d7:0d:b1:
8a:b8:d6:73:c0:8e:cf:9f:6f:58:04:be:ff:a9:68:1b:dd:8b:
82:2a:9b:f6:fb:f6:1f:e3:63:9e:84:13:70:26:6a:4b:91:6e:
d4:08:6f:a1:d1:79:11:7f:cc:8d:96:78:ed:f2:37:c1:05:da:
c7:82:a8:fe:c7:94:70:0a:d6:bb:65:05:d4:a8:3a:bf:81:0c:
ab:81:43:d9:8d:98:c3:f7:5a:e6:ad:04:54:47:85:ea:e0:17:
bf:3a:85:ce:48:06:46:15:bf:e1:d9:bd:5f:ef:08:d3:22:e8:
78:86:c8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:58:33 2026 by rpki-client