
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
File: ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft (raw, json)
Hash identifier: 77lFln8dq/cEzSoGAaDWdpXqD7ZdBwYtytLYCNZ5AU8=
Subject key identifier: 5C:6C:BE:C2:08:65:0E:1A:A6:C9:97:E0:AD:03:2E:E4:CC:CD:70:21
Authority key identifier: 93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45
Certificate issuer: /CN=A91CEF3E/serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145
Certificate serial: 0F12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
Manifest number: 0F00
Signing time: Wed 18 Feb 2026 17:20:03 +0000
Manifest this update: Wed 18 Feb 2026 17:20:02 +0000
Manifest next update: Wed 25 Feb 2026 17:20:02 +0000
Files and hashes: 1: ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl (hash: 0DUppUZRPqiCYpDR/OtRhQQ1zbn+7uNd2tPu0VArr7c=)
2: 5C154406988911E991B10838C4F9AE02.roa (hash: 3p0WjHEBpJpj8h8Z2IO+iO7ZAOODzHYWzNEv2oSXw+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl
rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:20:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3858 (0xf12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEF3E, serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145
Validity
Not Before: Feb 18 17:20:02 2026 GMT
Not After : Feb 25 17:20:02 2026 GMT
Subject: CN=6995f4c3-118f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:88:57:1a:e5:4d:d4:bc:32:a9:15:03:9a:48:
28:16:52:4b:bb:26:e3:44:b9:21:71:19:3b:e8:f6:
e0:6f:9c:1d:04:4d:b8:00:b0:bd:ed:6d:fe:a6:07:
f1:80:34:03:97:f2:14:da:54:d8:a5:36:28:e0:42:
05:0a:19:98:f4:02:c5:92:09:8c:0a:8d:4d:ff:f4:
83:92:64:5b:1d:b4:e4:36:85:e0:c3:5a:39:d0:6f:
25:58:5f:95:1c:c5:37:ff:01:48:c7:86:b1:35:87:
16:ed:0f:d3:9d:df:0f:76:b5:58:64:a8:1e:31:8c:
1b:d3:76:53:65:bf:74:55:ce:54:5f:12:4a:b5:b6:
e5:fc:50:b1:b0:cd:d8:9c:71:67:f7:4d:dc:1b:67:
9d:1f:f4:4e:ea:3a:b8:3c:e0:95:f8:d4:28:70:6d:
26:11:ad:e5:90:45:41:16:85:dc:cf:71:0a:cf:15:
94:2e:22:de:65:28:8c:93:46:01:02:56:06:ae:18:
dc:18:be:91:db:5a:32:10:40:17:e6:12:55:a1:cc:
d1:95:dc:13:d0:53:e4:24:77:01:8a:2d:0c:7c:9f:
ba:17:05:7e:69:32:e1:93:96:e5:87:af:63:82:d3:
db:4b:fe:b7:9c:73:c6:67:29:8d:45:38:f2:57:70:
57:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6C:BE:C2:08:65:0E:1A:A6:C9:97:E0:AD:03:2E:E4:CC:CD:70:21
X509v3 Authority Key Identifier:
keyid:93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:99:6f:56:30:5b:dc:d6:fb:80:ee:6a:0f:e6:47:4e:73:bb:
75:f0:72:55:41:8c:44:e6:0e:02:86:70:b0:8a:d7:51:02:95:
81:78:ba:e5:50:ee:72:d0:50:f3:20:25:f1:0c:af:f4:3b:9f:
31:45:4e:03:61:22:a7:a2:3c:10:f8:05:7c:0a:84:53:1a:40:
38:ec:a5:6a:f3:7e:ec:74:09:79:50:52:56:de:d5:8b:08:f4:
1a:b4:2f:34:af:24:44:e2:b0:c6:01:91:64:29:dd:c1:3d:00:
46:03:75:ef:2e:c1:59:5f:9c:ae:17:67:f5:64:c2:53:c3:be:
77:4a:64:5e:71:5c:7d:75:01:d5:85:f2:71:f7:b4:6e:db:d0:
ba:60:43:de:82:0e:54:89:50:bb:89:8f:2a:9b:db:a7:6e:76:
b8:af:0f:a0:c9:bc:68:cb:6b:41:07:e6:a3:ec:cc:78:21:0f:
8c:52:e9:df:b5:27:8c:2d:b3:7b:64:a3:86:c3:14:34:23:f9:
bd:f2:57:2d:ce:1d:3f:4f:2b:f8:b7:55:27:35:84:df:52:aa:
ed:95:97:24:bd:b8:3e:c1:6b:5f:80:e4:a6:4e:6f:7b:60:94:
e0:f5:42:b5:40:2c:83:82:a5:22:27:3f:45:67:e0:d4:04:f6:
5b:df:de:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:44:17 2026 by rpki-client