
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
File: 2Y9v2wB__4PhEwj61Voer6g4dM4.mft (raw, json)
Hash identifier: SF3l3U9qMZ+5tang0geNFJHkKo/wxjMkj4v7BfxzmJQ=
Subject key identifier: 5D:34:33:AE:6F:4D:72:82:3B:89:B9:BA:23:1D:8B:F8:6B:85:D3:BD
Authority key identifier: D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
Certificate issuer: /CN=A91D8601/serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
Manifest number: 11
Signing time: Thu 19 Feb 2026 07:16:38 +0000
Manifest this update: Thu 19 Feb 2026 07:16:37 +0000
Manifest next update: Thu 26 Feb 2026 07:16:37 +0000
Files and hashes: 1: 2Y9v2wB__4PhEwj61Voer6g4dM4.crl (hash: ufuSNaS3KygULvD0II6XwT9+OikYlOGJ1d7X0p4y2Jk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl
rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8601, serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
Validity
Not Before: Feb 19 07:16:37 2026 GMT
Not After : Feb 26 07:16:37 2026 GMT
Subject: CN=6996b8d6-89fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:4a:5e:de:1b:e8:13:e4:bf:45:c0:1e:1d:
67:55:46:17:f3:21:db:6f:7a:7d:b6:06:ed:eb:4e:
64:13:95:15:95:0b:e1:89:4b:36:ec:8e:bd:5c:0a:
9c:d3:05:96:30:45:60:15:b4:f7:19:b2:1a:0c:90:
d8:18:f4:9b:6c:90:40:7f:cb:19:81:88:d3:d8:c3:
3c:16:ff:12:34:4f:fc:94:11:b6:40:5c:0b:25:b4:
6f:74:90:9d:5f:be:82:5b:c9:27:c1:eb:0d:f4:c9:
1b:da:cd:0c:66:5a:60:bf:93:43:3e:1a:06:ac:ce:
ee:19:ba:ee:6d:60:62:70:66:c7:ea:3c:21:b2:32:
ca:66:33:89:da:3f:30:da:14:1c:f2:0f:c2:17:f4:
a5:f5:e7:ad:b1:aa:fc:08:77:91:4c:68:7c:a3:a3:
2a:02:2f:4d:87:83:f8:65:56:41:cf:9e:f3:77:a7:
19:1e:30:46:18:74:c6:a6:c4:f1:5d:4e:ca:bd:a4:
2c:a2:bf:3c:37:4d:aa:f6:81:6d:51:e4:aa:d0:55:
4b:82:75:00:d1:4a:bd:4b:53:13:68:a0:97:e4:a3:
50:d8:82:60:e1:ac:5e:b9:60:37:55:b2:04:08:45:
7d:28:5d:0e:78:27:a9:1c:d0:a8:99:15:91:06:6c:
a7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:34:33:AE:6F:4D:72:82:3B:89:B9:BA:23:1D:8B:F8:6B:85:D3:BD
X509v3 Authority Key Identifier:
keyid:D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:2b:d7:56:00:49:a2:90:67:c9:77:94:d8:7c:85:b5:c0:c6:
2f:37:13:01:51:e6:5f:7e:92:ec:4e:db:03:d0:ae:fb:21:3d:
01:83:df:e1:13:12:dd:78:14:63:34:93:3b:24:9f:dc:3a:c4:
9c:88:ac:b5:d7:4a:9b:1a:f0:b5:18:f9:36:b2:df:3e:17:6f:
9b:f2:47:c1:4e:26:65:bf:5e:66:68:13:84:54:28:ec:67:40:
04:42:74:0c:f2:20:c9:c8:80:a8:bb:1a:40:c9:0c:d4:42:47:
1d:af:32:cf:54:bf:89:be:48:2b:9c:93:c3:41:a6:23:ca:6a:
fe:10:5d:00:38:c2:e2:1f:4d:72:bf:53:5d:8e:a1:63:df:19:
cb:aa:37:f3:c2:01:c1:bd:e8:80:05:11:21:f1:02:f3:70:75:
21:bb:99:23:9e:ae:b4:49:5d:19:7f:82:04:31:8a:6e:76:40:
62:e9:9f:28:1d:b6:05:45:59:bb:30:39:ff:4e:ee:87:41:a2:
80:4d:a8:77:e8:71:20:43:11:d0:46:0e:04:f0:1c:cd:85:14:
86:c4:0c:0b:2b:bf:ed:5a:99:ac:47:b5:01:78:6e:78:bd:0c:
a5:9b:69:f8:94:d3:2c:7e:98:60:1d:2f:1e:b5:70:db:e4:a5:
11:9f:e1:88
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFE
ODYwMTExMC8GA1UEBRMoRDk4RjZGREIwMDdGRkY4M0UxMTMwOEZBRDU1QTFFQUZB
ODM4NzRDRTAeFw0yNjAyMTkwNzE2MzdaFw0yNjAyMjYwNzE2MzdaMBgxFjAUBgNV
BAMMDTY5OTZiOGQ2LTg5ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDF0pe3hvoE+S/RcAeHWdVRhfzIdtven22Bu3rTmQTlRWVC+GJSzbsjr1cCpzT
BZYwRWAVtPcZshoMkNgY9JtskEB/yxmBiNPYwzwW/xI0T/yUEbZAXAsltG90kJ1f
voJbySfB6w30yRvazQxmWmC/k0M+Ggaszu4Zuu5tYGJwZsfqPCGyMspmM4naPzDa
FBzyD8IX9KX1562xqvwId5FMaHyjoyoCL02Hg/hlVkHPnvN3pxkeMEYYdMamxPFd
Tsq9pCyivzw3Tar2gW1R5KrQVUuCdQDRSr1LUxNooJfko1DYgmDhrF65YDdVsgQI
RX0oXQ54J6kc0KiZFZEGbKexAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXTQzrm9N
coI7ibm6Ix2L+GuF070wHwYDVR0jBBgwFoAU2Y9v2wB//4PhEwj61Voer6g4dM4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4NjAxLzU5NEIyQzNDRjZB
RjExRjA4OTZBQkM1RjQzNkY1NkJDLzJZOXYyd0JfXzRQaEV3ajYxVm9lcjZnNGRN
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMlk5djJ3Ql9fNFBoRXdqNjFWb2VyNmc0ZE00LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4
NjAxLzU5NEIyQzNDRjZBRjExRjA4OTZBQkM1RjQzNkY1NkJDLzJZOXYyd0JfXzRQ
aEV3ajYxVm9lcjZnNGRNNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAAr11YASaKQZ8l3lNh8hbXAxi83EwFR5l9+kuxO2wPQrvshPQGD3+ET
Et14FGM0kzskn9w6xJyIrLXXSpsa8LUY+Tay3z4Xb5vyR8FOJmW/XmZoE4RUKOxn
QARCdAzyIMnIgKi7GkDJDNRCRx2vMs9Uv4m+SCuck8NBpiPKav4QXQA4wuIfTXK/
U12OoWPfGcuqN/PCAcG96IAFESHxAvNwdSG7mSOerrRJXRl/ggQxim52QGLpnygd
tgVFWbswOf9O7odBooBNqHfocSBDEdBGDgTwHM2FFIbEDAsrv+1amaxHtQF4bni9
DKWbafiU0yx+mGAdLx61cNvkpRGf4Yg=
-----END CERTIFICATE-----
Generated at Thu Feb 19 15:04:17 2026 by rpki-client