
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
File: zFfgNkMaXqPBcqpyg0Aa88StXFk.mft (raw, json)
Hash identifier: /pcp+9WJymW5hFjTX2l6EfMVZ8NZS9FADC6A63KjYIE=
Subject key identifier: D8:2A:F5:90:27:BD:AB:07:E2:83:1A:DA:24:2B:A0:CC:94:05:51:E9
Authority key identifier: CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59
Certificate issuer: /CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59
Certificate serial: 098B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
Manifest number: 0979
Signing time: Wed 18 Feb 2026 19:37:42 +0000
Manifest this update: Wed 18 Feb 2026 19:37:41 +0000
Manifest next update: Wed 25 Feb 2026 19:37:41 +0000
Files and hashes: 1: zFfgNkMaXqPBcqpyg0Aa88StXFk.crl (hash: LC0+spbIe3Cikkxzuhr5e4bNCWetM9sZ5DrXgu6MEac=)
2: DA0B639E89E711F08DD17A55C4F9AE02.roa (hash: 92JEuDCm1e9WQ8I7GIzUujJiphmCChYv7JlAxtt8zqs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl
rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2443 (0x98b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDC78, serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59
Validity
Not Before: Feb 18 19:37:41 2026 GMT
Not After : Feb 25 19:37:41 2026 GMT
Subject: CN=69961505-68b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:02:24:d9:8e:14:33:02:3d:d7:ad:3f:07:
d5:5b:a9:48:1f:58:4a:b5:f6:6c:9a:69:fa:32:f8:
1a:dd:5b:0c:4e:8c:dd:df:8d:0d:5b:6b:1c:9e:9b:
ab:c5:d2:0c:5a:3b:cb:f2:c6:94:20:05:2e:44:d3:
64:81:3c:57:84:e6:e3:3c:cb:ba:33:1d:4a:1e:c1:
b5:a5:ee:29:12:aa:26:a5:81:a1:0d:e8:15:97:d2:
3d:d1:28:47:a9:6e:6c:4a:80:c0:3f:95:73:d7:50:
48:cd:d8:b4:73:f0:2b:56:98:d2:8b:c6:21:d6:6f:
7f:f6:bc:02:76:b6:96:a6:73:14:cc:1b:dd:9f:93:
0d:01:11:67:3c:41:58:c0:b6:5b:bf:c9:d1:59:81:
a0:57:ae:fb:80:ca:eb:84:c7:b0:dc:38:da:5b:6a:
7b:1f:f3:21:5d:8c:fa:50:8d:4b:92:42:74:20:09:
bc:68:ef:fb:f7:5c:76:f5:1c:74:be:a5:57:ee:4f:
7a:ec:6a:59:98:58:47:63:f2:f1:e4:5f:2d:b2:dc:
7e:89:9a:df:e6:d6:bd:23:6c:17:45:9b:8d:0b:94:
1d:f9:65:56:85:41:8f:a8:fe:eb:ef:77:d0:41:be:
23:b9:0b:f0:bc:07:4d:c8:7e:77:ce:22:b1:fe:ef:
ca:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2A:F5:90:27:BD:AB:07:E2:83:1A:DA:24:2B:A0:CC:94:05:51:E9
X509v3 Authority Key Identifier:
keyid:CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:91:3a:04:08:ca:32:aa:ff:4f:6b:7d:e8:34:1f:d6:0d:32:
5a:79:4c:81:fb:e8:77:fa:dc:7c:0b:13:cf:7f:ab:a3:b9:d8:
be:30:5f:5b:2c:c9:cb:69:92:30:bd:35:1b:17:b6:85:50:70:
6f:e6:7f:c1:35:f7:bf:8a:33:9a:f5:b9:ac:a7:70:9c:29:70:
f2:36:f9:e0:74:2d:b7:c3:96:92:a7:e6:72:82:8e:f9:3d:24:
5c:9c:d5:6e:39:ed:07:19:34:e4:a6:a0:86:0a:be:d1:ce:e0:
2e:81:15:30:d2:db:8d:1a:37:58:95:1e:bf:eb:d4:8f:9b:b5:
3f:3c:c1:f4:87:d9:d9:59:79:3c:7a:9f:8f:fe:88:00:91:b6:
75:78:ae:c1:d3:7b:ed:51:89:8a:f8:d5:6b:4b:f1:19:86:35:
ff:e5:45:a9:46:ef:84:e5:ce:35:f1:ed:be:67:e7:87:c2:31:
d0:3b:b1:13:6a:b3:40:ad:56:eb:6b:12:fd:18:4d:f2:00:54:
88:06:23:7c:cf:1a:8d:61:57:01:cb:16:e0:f8:eb:39:6a:94:
f3:31:71:cb:76:73:68:11:88:69:c3:6e:14:e3:75:79:68:7f:
e7:56:1d:3b:bf:d4:a0:86:b3:33:5e:ec:89:61:2c:61:0f:9a:
08:5a:62:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:54:00 2026 by rpki-client