
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
File: yL8GWnSCLvjMYvSlTlnVhxILb0c.mft (raw, json)
Hash identifier: sbu/VL9eYtH+FaYQLY1BXkwbXGZC1stmS9+uIYuDzfk=
Subject key identifier: 2D:5B:2C:45:73:A3:AF:42:CA:82:99:5C:44:5B:48:62:6F:84:5A:7C
Authority key identifier: C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47
Certificate issuer: /CN=A91E85F1/serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
Manifest number: A8
Signing time: Thu 19 Feb 2026 05:36:56 +0000
Manifest this update: Thu 19 Feb 2026 05:36:56 +0000
Manifest next update: Thu 26 Feb 2026 05:36:56 +0000
Files and hashes: 1: yL8GWnSCLvjMYvSlTlnVhxILb0c.crl (hash: uBlnIBJtKwkFi+TLkX9/3yghLREAPrL7uE+hy2PKaG8=)
2: 4D144B780DFE11F09C46E054C4F9AE02.roa (hash: 4W8JwWYdmlkoGSHKhs2UcR0Dtn0CNiavMVkInr6eJqg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl
rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:36:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E85F1, serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47
Validity
Not Before: Feb 19 05:36:56 2026 GMT
Not After : Feb 26 05:36:56 2026 GMT
Subject: CN=6996a178-fa5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cc:51:5c:91:fb:e9:29:3d:1c:ed:94:4b:1a:
30:f4:7e:ae:6b:7a:88:29:87:55:f9:a0:7b:f7:bc:
47:36:4a:c4:a9:0c:a4:d0:2c:22:65:a9:de:ff:85:
97:99:c8:a0:bc:b7:8b:a3:53:fb:f6:b3:e9:23:27:
d9:bd:b8:49:e5:f3:e1:19:c2:1f:f2:99:f1:17:f8:
be:49:d5:16:c5:47:bd:8f:1c:a9:57:8b:8c:7a:b9:
34:b2:44:02:0c:8c:12:64:60:d2:cf:a5:26:56:12:
5f:44:cf:da:86:28:9f:f4:6c:a4:13:69:3c:cf:09:
b5:37:7f:7b:55:90:5f:58:69:e5:a9:33:4c:86:8a:
45:b2:d2:5e:58:c8:a0:b5:70:04:64:80:93:90:27:
1e:91:3f:7a:2a:93:97:ab:b2:03:36:14:07:3c:4a:
21:95:13:29:20:bd:0c:f5:59:de:98:5a:67:7b:17:
7f:86:01:38:d9:ac:9f:98:80:96:c2:17:48:45:e2:
0f:43:05:41:bb:d8:76:32:ff:4e:eb:01:81:3f:79:
7b:a9:93:f2:2b:cb:02:28:b7:2b:ad:41:a9:3f:9d:
0d:46:73:73:5b:ff:b1:34:9f:c9:0d:9a:f2:62:11:
fe:ee:52:bb:30:cc:b0:6d:f2:7c:e1:7f:5d:db:c0:
32:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5B:2C:45:73:A3:AF:42:CA:82:99:5C:44:5B:48:62:6F:84:5A:7C
X509v3 Authority Key Identifier:
keyid:C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e5:ec:68:ad:11:da:56:ac:76:77:c2:2a:cc:c6:1c:a5:9c:
02:6b:5b:f8:e5:85:76:5e:e1:df:64:a7:f8:45:24:00:a5:2b:
c2:40:e9:57:f9:83:3a:be:be:60:6e:fb:ba:02:83:63:29:f8:
ae:8f:b6:95:60:36:c0:63:31:43:2a:aa:6c:b9:04:f1:7a:78:
45:d7:c8:66:20:0a:e5:4e:7c:e0:77:87:23:fb:10:88:27:a8:
99:e5:00:d7:c0:d5:6e:d4:ea:47:23:78:b4:3e:28:e2:fb:de:
d5:26:31:94:11:1d:66:a6:9f:11:69:64:76:98:b7:c2:35:41:
4a:87:0e:4b:19:8f:28:ed:ba:83:23:16:80:a7:fe:de:5f:24:
9d:e0:5f:1f:a4:79:0d:7a:45:38:48:6b:82:58:94:ad:3a:d8:
c0:7d:40:b6:f7:71:4c:b6:aa:7b:b7:a5:62:88:da:79:3a:ec:
f6:0d:dc:fe:66:6f:db:67:fa:aa:09:e1:fa:be:e1:4e:02:73:
fa:9c:e2:1a:2c:e1:18:e4:dc:33:e4:d2:ae:3c:7f:31:cf:11:
f5:de:6b:11:34:12:cb:92:3b:5d:43:58:e3:c5:f7:af:2d:2a:
7b:22:7b:ad:d9:df:c6:b5:ec:d2:53:16:00:c3:f5:e1:13:04:
39:46:2c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:40:22 2026 by rpki-client