
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
File: YykwQRnxpH9dBkCy33Xe8fZMe68.mft (raw, json)
Hash identifier: HvkX7N52SKfxhsfiyQ0K1TrnBV6PFBkByZef1MxKfzc=
Subject key identifier: BF:1C:78:F4:CF:D0:50:0E:F1:2C:35:A6:C4:3D:7D:77:D4:F6:C0:7E
Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF
Certificate issuer: /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
Certificate serial: 07EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
Manifest number: 07DE
Signing time: Wed 18 Feb 2026 20:43:40 +0000
Manifest this update: Wed 18 Feb 2026 20:43:40 +0000
Manifest next update: Wed 25 Feb 2026 20:43:40 +0000
Files and hashes: 1: YykwQRnxpH9dBkCy33Xe8fZMe68.crl (hash: oqEsLzG92zyZRjszG0PP7Cb/RyyC4bdsZ9DbZRr+eWs=)
2: 261A4C3432B611EBBB18F11EC4F9AE02.roa (hash: 6VCktPY0Y/VVY9wKy7mnkatZ5tFS2gKEFeVDjxPVHEo=)
3: 4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa (hash: ae/KpKHVYIp48jLRoLaAXZhQ2bpbYIXVEw1zOqGKhNs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl
rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:43:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2030 (0x7ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBAF1, serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
Validity
Not Before: Feb 18 20:43:40 2026 GMT
Not After : Feb 25 20:43:40 2026 GMT
Subject: CN=6996247c-5acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:87:3a:fa:00:bd:2b:84:3f:b0:11:29:10:f1:
2b:b3:df:4d:92:fe:5b:14:47:e9:82:a8:64:3f:6e:
6a:47:9a:18:e6:d0:bc:6b:cf:e0:9c:1f:32:6b:4c:
aa:41:6c:a5:b2:6c:a6:47:5a:63:32:40:8c:83:2e:
d9:e5:4e:ef:c7:47:d1:b8:6d:44:ec:24:b0:4d:59:
35:8b:42:1f:f9:6b:79:19:9b:69:0d:98:52:45:3a:
ba:9e:6a:25:6a:38:1b:6d:10:ce:e9:23:f3:bb:9c:
38:d1:90:fd:d4:17:27:38:8e:06:1b:c2:b2:a7:ee:
44:17:f3:48:98:46:cd:ea:6f:a2:e7:26:94:5c:f5:
79:1e:8c:03:b8:8c:3b:13:e6:fb:90:c2:f5:a6:c9:
1c:92:ce:9c:57:ae:67:94:30:f4:16:a3:94:5d:50:
85:81:99:d0:af:5d:c8:39:1e:ca:45:d9:87:07:f5:
20:b8:4f:4d:76:82:2e:83:bc:bf:4b:77:59:2e:3f:
6e:eb:1f:e9:69:c7:76:b9:c9:b2:f5:54:ac:ab:26:
90:cd:81:13:7b:fb:2f:0f:00:b6:85:08:22:e4:ed:
52:b8:82:31:d7:61:b7:bd:61:f9:cb:19:5e:f6:21:
40:17:ec:76:f5:98:db:b4:5a:63:1d:20:9a:5a:06:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1C:78:F4:CF:D0:50:0E:F1:2C:35:A6:C4:3D:7D:77:D4:F6:C0:7E
X509v3 Authority Key Identifier:
keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c6:ff:58:35:5e:b5:af:b1:89:84:46:d0:19:49:eb:2e:77:
18:1e:3e:80:c1:9e:38:61:2b:01:64:76:34:f8:7c:6c:d6:c3:
a1:87:d5:3a:2d:9b:b2:7b:b2:55:4f:82:2d:b1:ed:11:f3:f2:
cb:f6:03:6b:46:bf:ae:3f:b6:fc:27:fe:19:ad:62:90:c4:14:
f6:d4:9c:c6:c1:a6:86:32:79:5f:ac:c2:8f:4b:38:84:65:5c:
d6:64:4f:4c:65:2c:c3:97:76:04:21:5b:6c:4e:0f:09:21:7a:
1d:5a:2a:13:d7:8a:f6:28:79:c1:6b:3b:1e:74:91:24:04:56:
79:7a:0a:58:37:ff:ea:f0:bf:3b:b9:6b:63:da:ec:d8:fc:55:
6f:c0:66:54:58:39:46:ca:28:dc:75:1f:73:65:b4:cf:3e:f2:
52:9e:bf:8b:a2:10:a9:0b:85:69:6f:ec:0b:e6:19:34:04:ce:
ad:b7:0d:ee:13:31:04:eb:ff:17:72:b6:e6:d4:da:ea:0a:e9:
23:c1:7a:34:1c:e9:68:39:a9:d7:38:16:22:5f:5c:a6:c2:fd:
60:2e:dc:b9:c4:9f:69:e4:5e:1d:cc:95:70:0c:c0:96:e7:38:
9c:78:9f:5e:fb:75:be:24:b8:16:28:5d:7d:76:32:e2:ed:95:
dd:15:b5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:24:58 2026 by rpki-client