
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft
File: zFkhdtiMQj-IWbUYtq0zT_92dAk.mft (raw, json)
Hash identifier: afn4lljVdf2jJaC0ZHmb7djUPXu0MHORgyXvtpVgMDw=
Subject key identifier: 1C:C4:1E:67:65:EA:EF:01:E0:E4:FA:50:57:7D:8A:2D:B2:E0:61:04
Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09
Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409
Certificate serial: 11D7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft
Manifest number: 11B4
Signing time: Wed 18 Feb 2026 16:55:52 +0000
Manifest this update: Wed 18 Feb 2026 16:55:51 +0000
Manifest next update: Wed 25 Feb 2026 16:55:51 +0000
Files and hashes: 1: zFkhdtiMQj-IWbUYtq0zT_92dAk.crl (hash: n2n67DDOYDvx4oHkkisFZ/pMbEBnqT8QUbQn7wg7LlA=)
2: 5488F6EA0F1A11E9B3F2A713C4F9AE02.roa (hash: I1Ooxb/QxZtnwvTSGkb227BhEGDqKjHAGb9PCGADRjg=)
3: 23A0D39C0F1D11E991F4271EC4F9AE02.roa (hash: 0aF9iAN+3RVH4J1O6kdqQLay7pM2xBWN/Y0/JqEVjB4=)
4: 53BDA2F60F1A11E9B3F2A713C4F9AE02.roa (hash: X6YwhVSJsRk4vRctAp4yh1iloPqdQuAk/cq6rLQ/5Io=)
5: 552292460F1A11E9B3F2A713C4F9AE02.roa (hash: aQ6IFtryhMAcftZ8/U9VLVpz3iJ+2Www/ebnR7Mk7tw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl
rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:55:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4567 (0x11d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F67BB, serialNumber=CC592176D88C423F8859B518B6AD334FFF767409
Validity
Not Before: Feb 18 16:55:51 2026 GMT
Not After : Feb 25 16:55:51 2026 GMT
Subject: CN=6995ef18-2059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:10:1f:f9:eb:81:d2:89:a4:dc:05:8f:27:f7:
a2:9a:19:ea:9c:23:be:76:4a:65:b2:66:e3:6e:fd:
26:74:2b:7e:f3:a8:cf:c0:ea:4d:97:f9:13:7d:31:
7e:28:0c:79:44:e3:f3:55:e1:00:25:09:64:1a:ac:
61:c4:69:53:3c:e7:71:93:62:c0:b1:8b:a5:ec:2e:
bf:21:0f:ac:4e:39:d3:35:41:0d:bf:c7:79:24:83:
24:aa:99:a4:e6:74:d5:0d:e3:e4:fc:fe:9d:cb:1b:
41:a5:65:e3:03:b0:93:dd:d7:8f:75:7f:0c:14:9b:
4b:9d:68:db:36:8f:1f:2f:d2:d7:5c:ad:63:99:8a:
40:db:a9:cf:c8:37:63:03:36:56:f0:0a:16:04:bc:
ca:e7:0e:c9:b1:87:dc:7a:fd:ab:18:1f:40:5b:96:
d8:be:48:9f:53:fe:30:09:70:8f:7d:b2:30:42:9f:
3c:10:66:fc:a7:0f:dc:c6:74:f5:1f:24:0c:4e:01:
1b:32:79:fe:5e:4e:4f:16:83:ec:84:92:03:30:d1:
2b:76:b2:0d:93:44:df:a7:4c:5e:6c:6d:41:a2:c5:
0b:31:c6:aa:07:36:e4:0b:f3:97:1e:c6:44:fa:a3:
03:90:d6:06:7d:59:4b:ff:7f:52:7c:ce:3f:8b:57:
46:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C4:1E:67:65:EA:EF:01:E0:E4:FA:50:57:7D:8A:2D:B2:E0:61:04
X509v3 Authority Key Identifier:
keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8d:88:d7:ec:b3:fb:eb:73:1e:2d:ff:8a:91:66:a3:3b:3d:
01:9f:33:68:5a:0b:a2:cd:8b:9e:31:10:b2:47:72:17:01:51:
9b:ee:b1:80:59:4e:a3:de:b3:f4:4c:30:64:9c:ed:75:39:6d:
02:0d:52:b5:d6:4d:83:fb:15:eb:a0:dc:f6:78:94:11:a7:81:
6e:0a:8c:33:d8:8c:ca:80:c1:81:ea:21:02:fe:d3:ad:92:f9:
d6:97:ec:f2:b9:d9:7a:3d:37:4e:72:b8:d7:99:62:b5:64:d2:
fe:41:27:49:90:3a:56:cd:a7:a4:92:1c:6c:91:55:56:c0:88:
5f:cc:54:80:fd:09:6a:2b:2b:47:82:d8:02:75:2d:d1:18:93:
1b:8e:32:af:1d:ec:8a:9b:1e:5d:6e:55:0e:d4:81:78:f3:31:
27:a7:b9:35:ac:cc:1f:51:18:a0:2e:cd:f7:77:cd:86:e8:d3:
ba:0e:6d:92:44:1a:37:9d:dc:57:9a:5d:fe:43:21:dd:f1:a5:
04:46:b6:49:ec:c9:8d:e4:62:48:06:72:d6:27:b4:70:c6:4a:
bd:ad:6e:95:43:8d:3d:b5:42:58:16:37:a0:0d:a6:eb:23:82:
4f:40:76:15:61:c8:cf:ae:99:52:38:7e:f2:41:6f:0b:f9:77:
3a:5d:ad:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:29:32 2026 by rpki-client