
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
File: TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json)
Hash identifier: GUoyZmg9xQ1n4D+5y18yrR/Wbqnum9qs2hreimrSoRI=
Subject key identifier: 97:7D:5C:C1:64:33:85:5F:0B:DE:51:0C:40:3D:42:CF:03:4F:C4:75
Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0
Certificate issuer: /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
Certificate serial: 0357
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
Manifest number: 0352
Signing time: Thu 19 Feb 2026 00:09:16 +0000
Manifest this update: Thu 19 Feb 2026 00:09:15 +0000
Manifest next update: Thu 26 Feb 2026 00:09:15 +0000
Files and hashes: 1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: OCaHwATT6KdalIxMq9phihWh/8WOQMOz7JeVOlNMgbc=)
2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: pBwxys1yivtkEToGBFIFFmXXN52OvE5FFgRhewDkeko=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl
rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:09:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 855 (0x357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F349, serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
Validity
Not Before: Feb 19 00:09:15 2026 GMT
Not After : Feb 26 00:09:15 2026 GMT
Subject: CN=699654ac-d7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:cd:ea:44:f3:e0:58:d4:37:67:05:60:99:
b1:23:83:f0:94:f5:87:5b:4d:4f:09:64:04:0f:05:
11:f5:6f:2c:64:e2:3e:a6:ee:16:f4:83:1f:00:f8:
ec:be:01:f2:1a:30:28:2e:3c:1d:dd:2f:5e:e8:56:
c5:02:47:c7:b0:95:74:dc:8b:ef:04:55:ec:35:5d:
c6:38:41:66:c2:9b:04:60:d1:a0:5e:de:22:43:b9:
04:1f:0a:66:ff:c7:eb:ad:5e:82:f2:ae:63:e4:9b:
f1:96:29:b1:50:8b:e9:98:0a:e7:25:e9:06:c5:c7:
c9:a4:90:80:21:9b:2c:e7:a7:ac:aa:d2:21:f9:f2:
17:65:48:c8:37:69:41:89:00:d0:ce:e9:3c:45:0f:
2e:38:a0:94:90:09:fc:09:3f:c4:4e:f5:4f:fa:03:
91:fc:c1:66:e8:92:c7:93:c6:79:b9:2b:9f:eb:63:
4a:56:64:26:cf:37:95:63:3d:b5:d8:33:a7:8c:dd:
f0:51:dd:87:19:e2:d2:9d:f6:f8:2d:8f:91:c5:f5:
14:c8:5b:a5:3c:b9:df:0f:2c:01:6a:2d:ff:93:80:
0e:51:01:26:65:d9:e5:f9:65:da:a0:4b:11:b3:80:
65:da:7b:87:8f:19:1f:d8:7e:4c:b0:ce:cd:b1:cd:
ef:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7D:5C:C1:64:33:85:5F:0B:DE:51:0C:40:3D:42:CF:03:4F:C4:75
X509v3 Authority Key Identifier:
keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:42:f6:4d:1c:f5:44:0b:58:08:dc:db:9a:5a:6b:90:7d:f9:
e6:a1:15:ba:7b:d3:25:f2:ba:20:52:27:b5:d1:da:01:02:d9:
ba:31:39:5b:4c:ab:ca:90:36:b2:4e:37:1d:7f:be:3c:21:bc:
81:ec:8e:0e:8e:04:1d:49:4d:58:0f:83:0c:86:5f:f9:f7:55:
29:9a:48:c3:9b:78:a7:c0:d1:d2:71:b4:b9:3d:ec:21:f8:ce:
d2:f3:52:35:0d:a7:eb:f7:ac:6d:47:72:8e:ac:7c:83:bc:98:
90:fb:46:35:06:16:a1:0c:cd:47:06:06:2e:7e:ff:e3:e3:18:
03:62:82:3c:79:44:24:31:44:f9:8d:01:c5:c1:84:57:ae:d6:
e8:6e:6c:7f:f4:ab:2c:98:9f:e8:a8:76:b0:7a:36:80:6f:6d:
0b:94:0c:3a:06:ff:4e:8f:46:9f:4e:e4:e8:e0:e3:96:24:76:
e7:b8:42:53:f0:26:ba:44:6c:dc:60:7f:fd:a2:7b:7d:e3:49:
a0:ec:85:7e:f2:29:5e:b4:e6:43:2d:4e:77:63:15:f5:0b:3a:
08:56:7b:c0:d6:82:ae:4d:15:29:36:bb:ff:24:81:fa:ac:9f:
5f:ea:b9:b7:78:ea:dc:0d:b7:3b:2e:70:f6:aa:94:c3:17:e2:
8c:46:d9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:34:02 2026 by rpki-client