
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
File: zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft (raw, json)
Hash identifier: KoDsozO2Qdx8DAHY1Sb0PHoW7OrvhoFbTKvJC3RoAhQ=
Subject key identifier: AB:F3:6D:6B:EB:EB:CC:64:D8:E6:23:73:B2:A3:45:62:43:FB:28:97
Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1
Certificate issuer: /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1
Certificate serial: 04D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
Manifest number: 04C9
Signing time: Wed 18 Feb 2026 23:11:27 +0000
Manifest this update: Wed 18 Feb 2026 23:11:27 +0000
Manifest next update: Wed 25 Feb 2026 23:11:27 +0000
Files and hashes: 1: zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl (hash: xMDnzsYJf22skO+N6/nlNLCEfYKS8Eodswsoq5iJqaE=)
2: 6E5D9F026AD211EF84B5841FC4F9AE02.roa (hash: b5iA+EjgFRRRDPTOxN9OZK4W7cd+DE4anCRmuLNq9SE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl
rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:11:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1238 (0x4d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E990, serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1
Validity
Not Before: Feb 18 23:11:27 2026 GMT
Not After : Feb 25 23:11:27 2026 GMT
Subject: CN=6996471f-19d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:36:1c:72:38:30:a5:5d:11:1f:80:a5:4e:25:
e4:87:1e:d0:8b:52:b7:6d:35:d9:f9:b9:93:e3:b7:
5d:76:de:f0:fa:35:e7:99:10:8d:c7:2e:54:ef:76:
03:32:20:9f:34:5f:cc:2c:45:fb:e4:ff:00:e9:42:
42:61:2e:be:33:85:7e:57:19:51:3a:77:33:8e:74:
52:81:79:aa:b4:fb:3f:f1:9b:3b:82:f3:ae:bf:4a:
66:ce:bc:0d:72:cc:11:d6:99:35:3d:37:f0:4f:49:
e1:76:91:c0:93:e2:4b:01:85:ad:bf:c1:b8:dc:88:
3e:8e:34:59:2b:2a:1b:a4:fe:75:da:50:c3:7f:37:
73:6a:90:50:d6:2e:e1:de:e4:d1:3e:e2:42:39:cf:
55:96:1e:56:97:fe:1f:ac:65:78:38:c2:4e:27:c4:
69:b8:a6:17:db:26:9b:d3:e7:e7:46:bc:e1:15:9e:
2b:00:b7:a6:d2:06:9a:1a:ce:fe:50:16:48:98:45:
a0:5d:44:6c:75:88:ed:6e:eb:2c:36:08:e9:79:0d:
08:b4:4d:b5:74:05:32:1f:99:41:b9:8c:0c:12:e7:
91:8f:ef:25:cf:6f:3a:98:64:79:3f:d3:2b:3a:4b:
62:97:27:ee:6c:46:23:36:6c:f2:54:5c:01:a4:8f:
31:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F3:6D:6B:EB:EB:CC:64:D8:E6:23:73:B2:A3:45:62:43:FB:28:97
X509v3 Authority Key Identifier:
keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:59:3c:b6:f4:83:a5:65:df:ba:8d:32:ee:4a:69:67:c1:b5:
6a:09:96:ac:94:2b:ba:e1:7e:02:52:d3:01:cd:3b:e3:20:3c:
7c:1d:49:1c:2b:0d:0c:3c:e5:aa:52:2b:0e:4c:07:af:a1:2a:
24:ab:d2:93:0d:0f:ee:6f:1b:c8:4a:28:77:c8:a7:6a:e1:d3:
10:99:3d:94:1a:3c:fe:98:d7:3c:94:7f:47:f5:e5:c5:44:4d:
16:9e:df:c2:79:88:19:87:bb:77:c5:be:1c:4c:37:e3:05:09:
83:d7:84:5c:4f:23:a3:a3:77:3a:ae:2d:97:55:3c:7b:fd:25:
f9:dc:4d:5b:df:b4:70:f2:00:c8:4d:2f:e4:ba:b6:e8:e9:e0:
00:d1:7c:9a:2f:24:e5:3e:ef:c7:1d:46:d8:04:c2:95:e0:6f:
9f:e7:a0:ff:e1:0e:6e:e1:74:09:63:09:85:7b:d9:c8:da:c9:
11:5a:66:3b:83:1a:c3:74:e0:46:e8:85:98:2a:16:4c:41:2f:
fd:9f:ee:ac:9f:72:11:78:a2:58:87:0d:36:5f:67:d4:53:38:
7b:54:a0:c9:e7:ca:6d:33:3a:b7:49:ec:40:de:2a:c4:2d:e8:
9e:df:ac:4c:b8:6f:3b:31:a5:75:a3:4e:5c:77:a3:7e:0b:7b:
49:43:55:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:01:32 2026 by rpki-client