
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft
File: 09zhcUP5z134AE-MZZf7LIzMcEY.mft (raw, json)
Hash identifier: MPrnx+vOFb2mXQKORR4cKufjtvQZuYzntXCB1EcMeHw=
Subject key identifier: B1:CC:E1:05:92:68:BD:1F:A5:C3:5B:D9:AB:E6:7C:15:8D:95:1F:BB
Authority key identifier: D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46
Certificate issuer: /CN=A91F7D74/serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046
Certificate serial: 011B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft
Manifest number: 0117
Signing time: Thu 19 Feb 2026 04:17:51 +0000
Manifest this update: Thu 19 Feb 2026 04:17:51 +0000
Manifest next update: Thu 26 Feb 2026 04:17:51 +0000
Files and hashes: 1: 09zhcUP5z134AE-MZZf7LIzMcEY.crl (hash: fIYvuH7H+pScuITC7YGrKutL/m8xVwT1HGhaNtqjNbg=)
2: 6A3FA88A693C11EF8B032237C4F9AE02.roa (hash: xlsUk+nBjbtHnwZ4MERgcwqdT/rxsOcTBiheef/VMVI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl
rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7D74, serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046
Validity
Not Before: Feb 19 04:17:51 2026 GMT
Not After : Feb 26 04:17:51 2026 GMT
Subject: CN=69968eef-19d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:ef:04:2f:ac:60:9e:b7:63:66:a9:30:c5:
47:3e:f3:a4:b3:b0:9b:bc:5c:6d:ca:f2:60:22:31:
27:51:0b:d3:a9:69:e8:6a:72:f9:80:a7:e0:e7:43:
a1:6f:e9:d4:dd:f1:1c:a8:30:da:a9:b9:1b:12:7a:
36:da:b9:b7:fb:34:e7:47:aa:99:94:d8:1a:61:7a:
3c:05:3d:a8:cc:3f:bc:1e:b3:1f:dc:aa:4e:1f:fc:
0b:c8:92:b2:23:33:4d:5e:64:91:4d:e5:a7:6e:81:
53:10:98:88:57:82:d8:d3:7f:69:bb:12:5c:fb:14:
40:c8:8f:6b:5d:52:84:9f:b8:c4:56:83:2c:64:4c:
3c:d0:b4:cc:f5:97:d9:1e:57:19:01:88:8a:97:d7:
cc:b6:bd:bd:01:d8:ab:50:f6:2f:7a:1b:b6:ad:9b:
be:54:79:0f:68:96:2f:c7:6f:2e:d4:84:05:06:98:
a0:5c:30:7c:3a:20:06:3a:94:05:1a:3a:54:72:6f:
1a:fe:b2:f1:32:ba:76:c8:03:ae:0b:cd:1c:cb:68:
f4:46:d1:0b:e6:7e:41:de:53:02:4c:dc:ef:05:e7:
47:f3:b2:41:45:58:02:ef:51:5e:3c:cf:50:28:8d:
b9:2b:b2:07:64:ba:93:b0:fd:b7:57:53:89:52:a4:
e9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CC:E1:05:92:68:BD:1F:A5:C3:5B:D9:AB:E6:7C:15:8D:95:1F:BB
X509v3 Authority Key Identifier:
keyid:D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:a5:b7:f9:41:59:18:82:3e:2c:0d:98:6c:27:e6:de:7e:95:
da:73:9f:2c:1b:fc:4c:6d:d0:3d:da:e8:1e:c0:62:e8:c1:25:
e3:65:02:7b:3f:fa:9b:5e:ac:c8:60:91:cc:86:7b:03:8b:43:
64:1f:25:ff:da:3a:a1:03:44:70:8e:1a:14:f3:1b:12:a5:ec:
34:ed:d3:9d:a5:b0:82:4b:81:3d:40:ca:3f:0b:0a:82:0b:ad:
c5:3d:f1:0f:30:75:83:0c:64:f0:d7:cd:1a:e3:ef:70:a4:28:
90:08:f5:57:6a:5e:43:cf:21:60:6b:98:84:fc:96:f7:00:fa:
56:92:73:dd:c4:c3:f2:0c:19:eb:48:dd:06:4c:05:c1:e9:98:
2b:8b:a9:fb:2a:45:e4:32:5c:76:14:c8:7a:0f:98:9b:4a:0e:
5e:fd:59:6d:84:06:dc:a6:c2:b8:4a:43:7d:43:2f:f7:d3:e2:
07:7d:ab:6c:6e:75:ca:a6:aa:0c:22:1a:fa:94:fa:af:ea:b0:
69:cc:a4:d3:4b:f8:51:b9:c4:9e:09:73:b8:90:12:1c:5c:73:
08:ff:e9:bc:43:5e:65:2d:9f:e9:08:e1:e2:d2:4b:e1:15:11:
fb:6f:a3:e4:2c:06:06:25:31:73:39:b2:c4:25:e1:83:3e:31:
28:74:7f:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjdENzQxMTAvBgNVBAUTKEQzRENFMTcxNDNGOUNGNURGODAwNEY4QzY1OTdGQjJD
OENDQzcwNDYwHhcNMjYwMjE5MDQxNzUxWhcNMjYwMjI2MDQxNzUxWjAYMRYwFAYD
VQQDDA02OTk2OGVlZi0xOWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnyfvBC+sYJ63Y2apMMVHPvOks7CbvFxtyvJgIjEnUQvTqWnoanL5gKfg50Oh
b+nU3fEcqDDaqbkbEno22rm3+zTnR6qZlNgaYXo8BT2ozD+8HrMf3KpOH/wLyJKy
IzNNXmSRTeWnboFTEJiIV4LY039puxJc+xRAyI9rXVKEn7jEVoMsZEw80LTM9ZfZ
HlcZAYiKl9fMtr29AdirUPYvehu2rZu+VHkPaJYvx28u1IQFBpigXDB8OiAGOpQF
GjpUcm8a/rLxMrp2yAOuC80cy2j0RtEL5n5B3lMCTNzvBedH87JBRVgC71FePM9Q
KI25K7IHZLqTsP23V1OJUqTpCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHM4QWS
aL0fpcNb2avmfBWNlR+7MB8GA1UdIwQYMBaAFNPc4XFD+c9d+ABPjGWX+yyMzHBG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q3NC8zNzhEOUEwQTY5
MjgxMUVGQUY3MTE0ODdDNEY5QUUwMi8wOXpoY1VQNXoxMzRBRS1NWlpmN0xJek1j
RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzA5emhjVVA1ejEzNEFFLU1aWmY3TEl6TWNFWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
N0Q3NC8zNzhEOUEwQTY5MjgxMUVGQUY3MTE0ODdDNEY5QUUwMi8wOXpoY1VQNXox
MzRBRS1NWlpmN0xJek1jRVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBgpbf5QVkYgj4sDZhsJ+befpXac58sG/xMbdA92ugewGLowSXjZQJ7
P/qbXqzIYJHMhnsDi0NkHyX/2jqhA0RwjhoU8xsSpew07dOdpbCCS4E9QMo/CwqC
C63FPfEPMHWDDGTw180a4+9wpCiQCPVXal5DzyFga5iE/Jb3APpWknPdxMPyDBnr
SN0GTAXB6Zgri6n7KkXkMlx2FMh6D5ibSg5e/VlthAbcpsK4SkN9Qy/30+IHfats
bnXKpqoMIhr6lPqv6rBpzKTTS/hRucSeCXO4kBIcXHMI/+m8Q15lLZ/pCOHi0kvh
FRH7b6PkLAYGJTFzObLEJeGDPjEodH/q
-----END CERTIFICATE-----
Generated at Fri Feb 20 00:46:53 2026 by rpki-client