
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
File: zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft (raw, json)
Hash identifier: m0WyRxl8sJUewgiq/xmOE7xZnOL6bujYL6Xr9wVIxkk=
Subject key identifier: C5:D7:71:7F:95:3D:56:01:49:5C:A5:2A:64:3E:24:0B:E1:71:4E:DB
Authority key identifier: CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8
Certificate issuer: /CN=A9133239/serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8
Certificate serial: 0137
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
Manifest number: 0137
Signing time: Thu 19 Feb 2026 03:49:22 +0000
Manifest this update: Thu 19 Feb 2026 03:49:22 +0000
Manifest next update: Thu 26 Feb 2026 03:49:22 +0000
Files and hashes: 1: zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl (hash: 4Zu7YPHiSLHz//Zdas437R5U7NiQuNv0rHEkTjoxWD4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl
rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133239, serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8
Validity
Not Before: Feb 19 03:49:22 2026 GMT
Not After : Feb 26 03:49:22 2026 GMT
Subject: CN=69968842-a09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:18:e4:20:bd:9f:a0:8f:e6:7f:4a:c3:69:
07:f3:51:e3:50:bc:56:68:fe:7b:28:18:6d:8a:f1:
27:be:10:90:28:06:0f:d1:b6:33:8b:59:8f:ca:87:
8c:bf:d4:6c:f7:4c:6b:5c:ca:8f:a9:1f:7d:96:fc:
ef:10:6f:4d:0e:ad:40:24:fa:cc:16:1e:28:df:45:
15:3f:ca:47:5e:e2:36:b0:17:bb:c8:c3:9b:62:85:
b5:3c:20:03:94:c3:70:74:fc:13:43:9c:ee:a1:9c:
07:09:f7:58:ab:5f:8a:21:53:de:9c:89:40:8e:12:
8a:b1:38:0b:86:31:be:75:60:3b:5b:c7:f3:ae:bb:
27:99:21:b0:a0:07:fa:76:39:dc:2c:8f:a7:66:5b:
03:22:12:9d:94:10:84:44:58:ff:8f:15:a6:3f:fc:
08:ee:af:37:72:01:dc:76:19:22:d0:92:21:44:b6:
00:f7:cb:ea:40:40:7a:4e:90:1a:1d:22:f7:0b:74:
5d:5b:bb:34:b5:9a:e1:20:b6:0e:19:4e:49:e4:1f:
2c:d3:e7:09:3b:d5:ed:f3:b8:41:0f:bc:f8:5c:d6:
cd:80:eb:55:50:6d:4b:a2:be:77:a0:0f:2e:09:b5:
5f:f1:c3:e4:b2:88:ba:7d:7e:cb:47:29:40:9c:7e:
b8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D7:71:7F:95:3D:56:01:49:5C:A5:2A:64:3E:24:0B:E1:71:4E:DB
X509v3 Authority Key Identifier:
keyid:CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:86:e4:8f:d1:69:81:5a:11:ce:b4:b3:93:dd:45:a2:75:a1:
db:31:7e:2d:93:61:88:0f:b9:b5:df:bb:06:90:46:d8:20:ca:
b5:43:76:44:55:05:05:1b:48:e3:dc:1c:95:82:45:08:e1:82:
bf:a9:49:74:e2:c1:0f:82:59:12:57:2e:34:7a:39:e8:73:c3:
f1:dc:6f:ef:7b:8a:ab:43:c1:6c:ce:88:0b:a1:90:c9:81:71:
a4:92:11:79:1b:88:b8:ca:be:85:fe:54:65:fb:79:b4:0b:fc:
6c:a2:6e:ae:2a:c2:d2:a7:6e:a1:02:ec:fe:d9:10:56:19:77:
f9:6e:e5:ea:43:01:67:f4:b6:21:73:a9:ad:1e:b8:6d:2c:b6:
6f:60:fc:89:9b:db:fa:44:99:2c:c4:b8:9b:49:30:19:33:b5:
92:4a:30:b7:eb:a4:7a:0f:a4:c8:e4:41:93:c0:43:30:a6:98:
12:4a:19:82:2e:3c:0d:5c:0c:12:b1:e3:25:d7:de:9a:78:d2:
37:26:48:1f:33:86:48:66:c7:c0:30:d2:c8:12:b3:f0:ff:07:
23:0a:b2:b8:9a:44:0d:ba:95:76:08:73:61:d0:3f:2c:63:6c:
b8:13:98:6f:52:da:e9:e4:c5:39:d3:50:56:5a:b4:c9:aa:7c:
c8:43:78:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:46:07 2026 by rpki-client