
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
File: CZyBX8poKm4oYE_pYv0QcVgn6V0.mft (raw, json)
Hash identifier: ma7F3/g+njEnOGrAYhaAPst1ZcO2krOAHpranKEKK+o=
Subject key identifier: F4:65:F6:44:20:CC:61:8C:73:C5:B9:A1:F0:8F:3C:D8:99:D4:79:B1
Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D
Certificate issuer: /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
Certificate serial: 0253
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
Manifest number: 024C
Signing time: Thu 19 Feb 2026 01:10:29 +0000
Manifest this update: Thu 19 Feb 2026 01:10:29 +0000
Manifest next update: Thu 26 Feb 2026 01:10:29 +0000
Files and hashes: 1: CZyBX8poKm4oYE_pYv0QcVgn6V0.crl (hash: EuChO8de47tyTSjbhj1gVUUrraj0rSvbDYF1eeFfQHo=)
2: 3CB103648C2511EDB64DB410C4F9AE02.roa (hash: D4f+/PaMSPI77GLxRMcgsvsBio3FnmZWL1aakcYD4mE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl
rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:10:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB2E, serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
Validity
Not Before: Feb 19 01:10:29 2026 GMT
Not After : Feb 26 01:10:29 2026 GMT
Subject: CN=69966305-fe15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:1d:00:da:ff:66:e5:91:b4:04:5b:d7:06:
6e:bc:fa:af:3f:9c:f3:3c:22:f2:c9:78:9c:f3:d8:
a3:d5:82:03:de:65:7f:7f:2c:97:6b:ab:28:10:8f:
cc:05:c7:ca:98:60:67:36:ba:a3:80:da:ca:1e:a2:
e7:74:30:f4:29:2e:61:ce:ce:28:7f:e6:0a:d2:e7:
06:e1:19:dc:65:a1:77:6a:b5:21:93:cf:69:45:60:
60:a6:15:4b:58:bc:93:0d:2e:28:b0:7a:a1:84:b2:
48:ce:1e:f6:f1:4a:11:af:e2:4f:8f:17:b8:a9:c5:
f6:0b:e4:f7:29:0d:74:2a:ec:25:0a:3e:fc:6f:f9:
18:ab:49:58:a0:80:2f:19:78:01:15:ca:5a:90:35:
9e:32:4f:ee:8a:15:1b:c7:46:c9:44:49:76:86:5b:
32:23:1f:5a:32:0f:e5:32:c7:c4:89:27:8a:7d:06:
48:8e:95:cb:0d:da:26:ef:71:2c:18:bf:dd:2b:05:
77:2e:66:9d:76:7d:fb:ef:7e:6b:d9:af:a6:b5:ed:
a7:ef:e6:38:fa:81:87:ca:f6:e5:d7:da:57:e2:c1:
b3:54:31:ca:13:d3:3b:5e:fa:75:2e:3a:7c:04:a7:
74:3a:36:df:d1:d1:8f:c3:cc:96:22:61:f7:f6:df:
fa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:65:F6:44:20:CC:61:8C:73:C5:B9:A1:F0:8F:3C:D8:99:D4:79:B1
X509v3 Authority Key Identifier:
keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:5d:55:82:98:b0:1f:bf:d8:be:d1:07:b5:10:b6:5e:33:c0:
b9:50:34:95:f0:70:05:bb:6f:32:da:07:93:81:59:1d:d9:c2:
9e:69:d3:3b:0e:16:e7:be:b6:81:c5:6c:af:1b:7d:02:9b:61:
73:b9:ea:e6:cb:38:1d:f3:c9:3b:96:4d:0d:d6:09:ef:39:2e:
53:db:47:22:88:0b:d5:e3:7a:a9:06:75:af:94:dd:3f:78:3b:
f3:85:91:c1:0c:2d:fe:a4:00:19:8e:ef:cb:ad:ca:3e:21:2b:
0e:be:33:69:d0:32:06:60:e5:aa:53:75:38:5c:f4:61:5f:66:
1d:a3:c6:c1:33:bb:da:38:c2:33:db:6e:ca:f4:e7:34:2c:a6:
c1:f2:2c:89:44:00:0c:2a:f4:16:f6:8f:b7:15:13:5d:52:08:
1f:39:df:47:8a:57:d5:6f:7b:48:f8:22:d3:98:fd:ab:cc:b9:
7d:92:8d:13:e4:24:d1:63:e0:0a:62:f4:13:69:7d:d3:a2:47:
a8:f4:44:cf:01:d3:f2:21:9b:e5:29:36:2b:e0:8d:54:c1:c7:
96:09:a1:45:5a:54:19:31:8a:05:7d:62:b5:58:50:39:1c:37:
d2:5f:30:12:3e:ff:18:88:a2:06:ab:d5:fa:8c:5b:e7:e2:28:
40:0c:c5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:02:14 2026 by rpki-client