
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft
File: CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft (raw, json)
Hash identifier: izv88qf0JMwsd0+CCoy6Q+MWK/ehRqGRl+J1kz9QlRs=
Subject key identifier: 9D:4D:53:C4:CD:22:74:14:E0:B7:CB:E9:FF:9C:71:22:A5:2A:6F:86
Authority key identifier: 09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92
Certificate issuer: /CN=A9143B0A/serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692
Certificate serial: 011B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft
Manifest number: 0119
Signing time: Thu 19 Feb 2026 04:14:18 +0000
Manifest this update: Thu 19 Feb 2026 04:14:17 +0000
Manifest next update: Thu 26 Feb 2026 04:14:17 +0000
Files and hashes: 1: CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl (hash: 1LMQt0w0Yudb6BtVU8Im/j07WkicGnBBFBrcOVZpfM4=)
2: 485B32A8607B11EFB27C6C5DC4F9AE02.roa (hash: ssSab392rUEklfenSvYRYq8TUWajk4XJZygnBh6m+8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl
rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B0A, serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692
Validity
Not Before: Feb 19 04:14:17 2026 GMT
Not After : Feb 26 04:14:17 2026 GMT
Subject: CN=69968e19-3503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:07:d7:01:2e:b7:bb:99:82:e3:bb:74:c6:d5:
40:08:30:a8:b5:0f:6b:38:36:f6:0d:18:f2:86:f4:
b4:4c:9d:52:e9:4c:fd:29:3b:d5:a4:8a:04:16:81:
a7:38:12:77:18:75:b8:8f:54:e5:34:5e:51:8a:f5:
58:ac:39:a8:c1:0b:bc:4d:33:df:25:46:55:4e:be:
24:40:4d:67:66:f9:80:ee:cd:86:2c:ca:73:5f:8c:
80:81:c9:28:8c:e4:77:6d:05:02:76:c3:e8:11:87:
45:c6:b7:51:b7:8f:d2:41:50:6e:fa:28:b4:be:b3:
35:5e:e1:a3:c0:b0:66:b6:a2:dd:e0:dd:d4:fe:4a:
bd:45:55:8d:97:1c:24:c1:4a:e0:36:fb:15:6c:41:
ac:a8:b7:67:c0:ff:a6:9f:17:f9:b8:e8:a1:24:91:
b5:54:44:41:2d:14:6b:ad:11:38:05:81:1a:c7:00:
97:20:79:ad:df:be:fa:36:30:7e:18:46:05:39:5b:
70:6a:46:e6:df:d2:ad:09:7a:7d:a9:1a:95:ba:ee:
b8:47:08:00:c4:1d:aa:dc:0d:48:ea:22:8a:4f:3d:
48:7c:d7:7c:b0:e7:6d:f8:d0:e9:42:d5:fa:9c:54:
c5:d6:6a:4b:fe:ef:d3:27:79:fa:2f:ea:e3:06:a3:
3e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4D:53:C4:CD:22:74:14:E0:B7:CB:E9:FF:9C:71:22:A5:2A:6F:86
X509v3 Authority Key Identifier:
keyid:09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:48:81:3e:e1:20:f2:4b:cb:08:90:d9:4a:e2:42:d9:28:96:
87:59:f5:16:46:db:2d:cb:51:65:7c:7a:7a:66:cd:58:bf:cf:
f6:b1:a6:ec:bb:79:75:98:f3:62:a8:df:46:b3:aa:6a:65:07:
f5:09:79:6f:7f:5e:62:d5:6c:ca:ce:25:31:dd:b2:e0:42:9b:
f9:d1:aa:69:fe:eb:90:33:24:f1:51:c5:6c:d4:47:76:d0:05:
51:95:30:2c:19:ea:24:84:ff:98:08:d2:d8:87:c7:fe:7c:40:
70:b4:a3:8b:93:08:90:b9:35:3c:ab:c8:f8:18:6c:65:99:00:
ee:32:3e:6b:bf:c5:32:87:fe:c0:5e:8c:c9:69:ce:6d:c0:c2:
34:89:91:a5:20:df:bb:2c:c0:fe:49:17:bc:95:fc:9a:4d:47:
44:ec:2f:d9:35:b5:0c:17:c9:ca:8e:7a:1b:f4:b3:af:33:6b:
15:5e:fa:82:68:fd:3b:28:87:a8:d5:cf:dd:17:cd:aa:a8:5e:
f2:08:dc:2b:0a:4a:9b:13:e7:5e:d0:24:af:35:f4:6c:10:5b:
f3:b7:b0:ee:9b:e1:31:c2:c4:cd:2a:0e:fb:52:07:bc:43:ba:
d4:9d:01:f8:d0:30:d8:d0:89:81:10:1c:87:0c:c2:b4:4f:9d:
d2:6a:f2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:55:40 2026 by rpki-client