
$ rpki-client -vvf rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft
File: Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft (raw, json)
Hash identifier: bl5WJrNVvrhyrx3VrVIGkt4B4tf/YGRy0roN294VQTo=
Subject key identifier: 3C:7D:BC:92:BA:EE:88:E6:8B:F9:98:B7:50:50:22:9F:C7:57:5D:8B
Authority key identifier: 67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59
Certificate issuer: /CN=A91253B9/serialNumber=674B8D060134EC3D1868D0540F7CD84F14B9C959
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft
Manifest number: 29
Signing time: Thu 19 Feb 2026 06:59:40 +0000
Manifest this update: Thu 19 Feb 2026 06:59:40 +0000
Manifest next update: Thu 26 Feb 2026 06:59:40 +0000
Files and hashes: 1: Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl (hash: St86jpq4I5SHrgBGhzKQJDaAGfBgCkF4+eJ5bDNGxj8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl
rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91253B9, serialNumber=674B8D060134EC3D1868D0540F7CD84F14B9C959
Validity
Not Before: Feb 19 06:59:40 2026 GMT
Not After : Feb 26 06:59:40 2026 GMT
Subject: CN=6996b4dc-6b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f7:dc:4f:37:cd:c3:d4:16:86:95:6b:27:07:
0a:4b:1b:a6:b8:14:83:0e:ad:54:84:81:a1:09:4d:
a6:f4:64:cf:bb:fd:87:5c:3f:01:9e:b2:25:0d:46:
69:34:ab:fe:ae:b4:3c:17:c0:43:69:c2:b2:c0:42:
9e:e1:07:11:4f:a9:f9:67:16:c8:61:ff:a5:d6:a3:
24:29:f9:e7:ea:26:08:c3:96:7e:0a:0d:f1:df:f7:
2a:54:61:8e:76:eb:ec:04:1e:cc:60:0a:86:c9:8e:
ee:be:a6:a0:fc:a0:c0:26:de:5e:c0:09:82:d2:dd:
2f:c5:50:79:41:2a:65:0e:e3:ef:f1:5c:b2:97:61:
54:64:7c:7c:92:f0:a2:e0:65:33:d3:7f:71:05:1a:
14:bb:c2:63:12:2e:1c:83:d8:1c:49:21:2a:c3:7b:
b0:c9:48:13:e3:f1:8c:b1:86:54:ca:50:90:71:39:
eb:4e:d2:a1:9c:22:ca:cf:b3:81:f1:67:93:1f:15:
5d:df:c6:88:ea:b5:ee:5b:a9:34:89:66:9f:69:38:
64:19:c7:4e:b1:c6:97:0f:9b:1e:a5:33:ec:b9:ce:
76:37:a6:82:12:d3:12:a8:ff:7d:c7:7f:0f:a9:68:
25:27:2f:28:f7:22:8b:f6:33:6c:0e:fa:e9:cd:89:
b0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7D:BC:92:BA:EE:88:E6:8B:F9:98:B7:50:50:22:9F:C7:57:5D:8B
X509v3 Authority Key Identifier:
keyid:67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:61:e1:3c:20:17:3f:d8:bc:7a:b4:32:cc:86:8d:d0:ec:1a:
0e:1a:05:53:ae:f4:25:2a:e8:3a:e4:a9:45:b5:63:ab:a4:9f:
94:4e:f1:cc:24:e0:13:73:5a:d8:1a:bd:92:94:e9:a5:37:5e:
e4:4d:b2:98:19:7d:a2:87:35:91:13:b0:01:8b:47:bf:3f:8f:
8a:b9:ca:05:d9:65:da:76:8f:14:02:61:64:80:29:77:7e:54:
ab:0a:a4:78:05:5e:c9:48:7a:9b:cb:1b:6f:17:16:86:da:c4:
60:85:c3:d1:ae:7c:47:96:ec:a0:63:59:d5:2c:08:df:ef:6b:
50:36:67:dc:4d:f2:71:06:c5:f9:ee:98:00:90:29:8a:0d:09:
40:c6:53:b6:e4:0e:a4:87:c3:10:57:6e:58:ef:d7:3d:f8:bf:
7e:51:9a:3e:0c:75:91:19:e0:cf:e1:fe:65:31:fe:1d:a0:e6:
b2:80:cd:d1:8f:01:74:e6:3e:82:d9:28:97:05:61:38:e2:3c:
16:27:ec:6f:74:3e:c8:2d:88:ee:0b:6d:10:39:e8:32:45:6b:
c8:d9:10:79:29:d2:58:a1:e5:cf:72:d7:c1:f0:ba:64:9a:e6:
63:c8:81:2d:03:a1:8a:07:72:59:c0:e3:69:8c:96:95:f3:26:
46:bb:7e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:01:32 2026 by rpki-client