
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
File: gYkRn4AeKAprTdViZT7xA2lh0Js.mft (raw, json)
Hash identifier: 11hZwQa47HjdHJ8K6dKYNohZop7hDhDlO87+ZKTiZ0g=
Subject key identifier: AA:71:90:4A:C9:17:36:DC:C5:8E:3B:21:7B:FC:F2:C1:CB:ED:42:14
Authority key identifier: 81:89:11:9F:80:1E:28:0A:6B:4D:D5:62:65:3E:F1:03:69:61:D0:9B
Certificate issuer: /CN=A91D9CAE/serialNumber=8189119F801E280A6B4DD562653EF1036961D09B
Certificate serial: 050D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
Manifest number: 0508
Signing time: Wed 18 Feb 2026 22:55:43 +0000
Manifest this update: Wed 18 Feb 2026 22:55:43 +0000
Manifest next update: Wed 25 Feb 2026 22:55:43 +0000
Files and hashes: 1: gYkRn4AeKAprTdViZT7xA2lh0Js.crl (hash: Ip2RCSwd6LbQ4MXKupVokgTwDWYewbY05g1KxW9NuBI=)
2: D30098F6413111ECB71E086AC4F9AE02.roa (hash: Vt6tO0X/X1UwDMUAdETQmDLxSBvUfwttK8IaifttuUE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.crl
rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 22:55:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1293 (0x50d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9CAE, serialNumber=8189119F801E280A6B4DD562653EF1036961D09B
Validity
Not Before: Feb 18 22:55:43 2026 GMT
Not After : Feb 25 22:55:43 2026 GMT
Subject: CN=6996436f-70a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:74:1f:a5:e3:9d:7b:b1:5e:46:9c:75:b2:2e:
0c:9f:c7:3f:54:f5:0c:3c:dc:fe:19:12:94:6a:cb:
1e:2f:e2:77:9b:4c:5a:ee:5a:c2:b4:9b:f0:0b:8e:
e8:93:8a:8d:31:a4:65:aa:e5:8f:23:7e:17:23:1f:
74:5c:26:60:64:ac:17:9d:3b:25:61:a2:05:2a:59:
13:1d:f6:ef:1b:a0:2c:f6:71:86:1e:71:f6:4d:8c:
ff:2d:65:8b:04:ab:72:7b:bb:5a:8f:ca:cf:1d:ce:
4b:9f:68:5a:a9:0c:2d:d1:55:5d:64:7b:09:f7:1e:
fa:22:31:1b:5f:76:6f:32:96:89:4e:65:2e:4a:f0:
b4:9d:46:01:b6:b7:fa:3e:57:2c:3a:59:b2:43:4d:
02:a8:35:a4:cb:93:4e:41:0a:b5:a3:06:2e:c7:39:
a4:4e:7d:95:c1:af:03:0a:dc:3b:16:37:f8:dc:9e:
b3:32:fa:7c:58:9b:49:5b:45:7a:fa:21:3b:03:93:
b6:9e:12:3d:b2:97:9d:31:7f:3e:6d:3d:1f:0d:ef:
b7:39:88:b9:ad:06:e3:90:1e:2a:92:6d:04:8a:c1:
77:79:bd:02:68:71:b9:f4:43:cf:53:80:5d:91:b6:
54:26:75:3a:b0:27:8c:dd:35:b8:c6:1c:95:95:c0:
cd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:71:90:4A:C9:17:36:DC:C5:8E:3B:21:7B:FC:F2:C1:CB:ED:42:14
X509v3 Authority Key Identifier:
keyid:81:89:11:9F:80:1E:28:0A:6B:4D:D5:62:65:3E:F1:03:69:61:D0:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9c:a9:8b:bd:8d:b0:f8:97:83:21:58:23:94:67:73:69:74:
cb:02:1f:be:01:60:ce:1e:ef:d8:9b:38:79:41:b4:34:66:f0:
a4:0c:1a:61:1f:e8:63:2b:b4:a8:75:22:0a:db:62:e2:08:09:
4c:e3:26:24:cc:af:bb:d2:67:d4:aa:29:cf:0f:16:0c:29:16:
b1:80:50:52:4f:02:69:ab:b2:17:44:cd:ec:78:25:db:b4:26:
bf:85:c3:0a:ff:3c:40:5c:19:06:51:7c:85:9a:af:18:97:7e:
2e:3a:88:55:77:3b:16:1f:d3:2b:40:cc:b9:8d:32:f0:0f:f0:
97:92:d3:bd:2d:a5:41:21:d4:f6:4e:30:f6:94:c9:39:6c:49:
4e:e3:ae:02:41:fa:4d:36:b4:12:1b:a0:19:2e:9d:4a:bb:c1:
82:6b:51:b8:a4:1e:5a:22:df:f9:4c:98:07:fd:ee:a7:b7:a5:
bb:e4:a4:83:64:bd:86:de:e4:4b:33:a3:f3:2a:75:b3:ae:a8:
12:54:d5:74:23:3b:69:c5:11:52:a7:8f:ad:b4:49:db:ac:74:
15:e0:08:9b:fe:c9:03:0c:2f:56:2f:05:8b:41:a4:c2:bf:8b:
59:7c:6a:7c:97:b0:e8:02:77:85:60:3e:08:dc:cc:87:f8:83:
1c:db:86:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:40:05 2026 by rpki-client