
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
File: zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft (raw, json)
Hash identifier: i9aISP0B1EIN9d6qsZLLGmCEXjA3WwRZ3N0Wa22FK8w=
Subject key identifier: 0C:35:09:C2:54:9C:A9:43:55:26:A6:C3:64:C8:8D:65:BB:04:2C:97
Authority key identifier: CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71
Certificate issuer: /CN=A91AAE63/serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71
Certificate serial: 0223
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
Manifest number: 0220
Signing time: Thu 19 Feb 2026 01:32:32 +0000
Manifest this update: Thu 19 Feb 2026 01:32:32 +0000
Manifest next update: Thu 26 Feb 2026 01:32:32 +0000
Files and hashes: 1: zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl (hash: yZIoAicBmBMwA/FQXe/Y+NX6/2s6ciGJfUPziYKGAUE=)
2: 5DCF3814CA0E11ED9251861DC4F9AE02.roa (hash: QPqR58JeNFPJi8H+5XnKJrf+9hDaJRDjHQAg1P1N4n8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl
rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 547 (0x223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE63, serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71
Validity
Not Before: Feb 19 01:32:32 2026 GMT
Not After : Feb 26 01:32:32 2026 GMT
Subject: CN=69966830-c920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:cd:cd:2d:4f:2a:0b:31:5e:e8:8d:16:98:
ec:b3:3e:61:fd:3d:b2:ab:96:04:fb:9a:b5:66:03:
9c:d2:1c:10:fc:59:c2:57:62:84:c7:ae:39:36:6b:
99:eb:ab:cd:ef:39:91:fe:b1:10:e6:89:81:b1:e0:
41:2b:9f:59:eb:c7:2d:aa:1e:a8:b7:ac:45:e9:d6:
f7:29:9c:5e:40:33:0d:9f:74:ac:f0:da:3b:76:59:
73:62:1f:fb:e7:17:fe:ae:dd:f2:ce:05:4d:f9:51:
4f:b6:64:9f:a7:89:27:0a:0b:fa:1f:98:00:f7:64:
7f:fa:dc:b5:9c:6a:ed:e1:4e:b9:cd:52:5a:b2:4c:
dd:5e:d2:c0:5c:55:78:0e:70:76:ff:d7:0e:3f:a7:
88:7e:ea:e2:69:1b:0e:34:0d:e0:f2:93:b5:8f:fc:
4f:30:a3:f3:f9:44:75:f1:fc:ce:95:15:4b:5a:3d:
75:57:c4:f4:4c:1a:8b:a2:c8:1f:3b:b1:69:93:46:
3b:29:f6:d9:e3:23:0e:c4:12:10:28:77:d6:46:c7:
37:8d:f5:93:31:75:6a:2d:5d:c1:93:64:a9:e7:68:
99:6a:a6:9e:da:e0:66:31:1e:08:79:0a:ce:b0:72:
3f:af:5b:3a:6e:95:a0:fa:79:82:a1:e7:75:5a:89:
2f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:35:09:C2:54:9C:A9:43:55:26:A6:C3:64:C8:8D:65:BB:04:2C:97
X509v3 Authority Key Identifier:
keyid:CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:da:bd:d4:1a:f6:02:0f:1e:9f:31:9a:98:15:1d:c7:50:d2:
bf:e4:cd:8b:3e:99:f9:a7:ff:4a:0a:bf:09:42:fc:2f:f6:8b:
1a:3e:26:68:66:c5:66:b5:8e:51:26:b5:38:43:ce:16:54:74:
bc:b5:a4:bc:34:90:45:41:e2:1c:b3:5b:88:2b:24:5b:f5:8b:
9f:5e:d2:a4:b0:44:92:07:ad:f1:ab:8e:db:bc:3b:3f:1a:47:
2e:7c:d0:91:c5:15:4b:72:56:59:02:52:2e:ae:55:27:b3:86:
44:4f:c1:aa:ea:d0:0b:6b:46:07:cb:13:a7:0d:f2:02:0f:2d:
02:fb:17:b6:09:11:68:17:84:ec:be:e1:36:27:75:8a:b3:04:
b6:35:4d:ab:b3:95:b2:00:a7:14:5e:db:d0:01:3d:e8:4e:71:
94:5b:fb:3d:30:99:21:96:23:6a:53:cc:43:26:bd:28:61:22:
80:43:26:a1:e0:a6:77:6a:7e:90:d9:bd:18:f8:88:68:e6:eb:
49:36:02:5c:4b:f1:8a:a7:53:06:48:03:43:62:d1:73:53:4c:
f6:24:75:40:06:30:a7:1b:78:5d:6b:4e:ab:af:8b:a2:e9:93:
21:cd:e2:70:24:1e:d6:fc:db:e1:54:9d:d2:a7:84:3b:f9:af:
2d:3b:f9:ae
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFFNjMxMTAvBgNVBAUTKENDN0M1RjI3ODBBODBEM0M2NjZCMkJGNjkxNTNGMjA0
ODRCRUVFNzEwHhcNMjYwMjE5MDEzMjMyWhcNMjYwMjI2MDEzMjMyWjAYMRYwFAYD
VQQDDA02OTk2NjgzMC1jOTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArr/NzS1PKgsxXuiNFpjssz5h/T2yq5YE+5q1ZgOc0hwQ/FnCV2KEx645NmuZ
66vN7zmR/rEQ5omBseBBK59Z68ctqh6ot6xF6db3KZxeQDMNn3Ss8No7dllzYh/7
5xf+rt3yzgVN+VFPtmSfp4knCgv6H5gA92R/+ty1nGrt4U65zVJaskzdXtLAXFV4
DnB2/9cOP6eIfuriaRsONA3g8pO1j/xPMKPz+UR18fzOlRVLWj11V8T0TBqLosgf
O7Fpk0Y7KfbZ4yMOxBIQKHfWRsc3jfWTMXVqLV3Bk2Sp52iZaqae2uBmMR4IeQrO
sHI/r1s6bpWg+nmCoed1WokvtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAw1CcJU
nKlDVSamw2TIjWW7BCyXMB8GA1UdIwQYMBaAFMx8XyeAqA08Zmsr9pFT8gSEvu5x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUU2My81RTk2NjM5NENB
MDkxMUVEODFCNkY2M0NDNEY5QUUwMi96SHhmSjRDb0RUeG1heXYya1ZQeUJJUy03
bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pIeGZKNENvRFR4bWF5djJrVlB5QklTLTduRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUU2My81RTk2NjM5NENBMDkxMUVEODFCNkY2M0NDNEY5QUUwMi96SHhmSjRDb0RU
eG1heXYya1ZQeUJJUy03bkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCU2r3UGvYCDx6fMZqYFR3HUNK/5M2LPpn5p/9KCr8JQvwv9osaPiZo
ZsVmtY5RJrU4Q84WVHS8taS8NJBFQeIcs1uIKyRb9YufXtKksESSB63xq47bvDs/
GkcufNCRxRVLclZZAlIurlUns4ZET8Gq6tALa0YHyxOnDfICDy0C+xe2CRFoF4Ts
vuE2J3WKswS2NU2rs5WyAKcUXtvQAT3oTnGUW/s9MJkhliNqU8xDJr0oYSKAQyah
4KZ3an6Q2b0Y+Iho5utJNgJcS/GKp1MGSANDYtFzU0z2JHVABjCnG3hda06rr4ui
6ZMhzeJwJB7W/NvhVJ3Sp4Q7+a8tO/mu
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:59:00 2026 by rpki-client