
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft
File: Z849nCahS83_mzOU0zVXZoIYoVY.mft (raw, json)
Hash identifier: 1M4MLKYdIXVeKitK8DoGQWi6tHhzWndPOhykN1dvDc4=
Subject key identifier: BF:57:D2:5B:4A:89:5F:C4:EF:65:B3:DB:64:C5:D5:DA:90:96:11:75
Authority key identifier: 67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56
Certificate issuer: /CN=A911A557/serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156
Certificate serial: CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft
Manifest number: C4
Signing time: Thu 19 Feb 2026 05:18:35 +0000
Manifest this update: Thu 19 Feb 2026 05:18:35 +0000
Manifest next update: Thu 26 Feb 2026 05:18:35 +0000
Files and hashes: 1: Z849nCahS83_mzOU0zVXZoIYoVY.crl (hash: w03zDqAiGbkJNgqPNfmj503j2kmxaZNfXAwP6FIXllo=)
2: C1D2BAAAE87711EFBE7C537EC4F9AE02.roa (hash: 8xExEFAiYA/8lFGHuqLYzWCAWTLUpOx+eEmK9KK5c0M=)
3: 4550C0B2E86D11EF9AF14D6FC4F9AE02.roa (hash: 2GRtPqItvUjTSj4+s6HmnNB8Os7tS39gLre6A6tNJzo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl
rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:18:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A557, serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156
Validity
Not Before: Feb 19 05:18:35 2026 GMT
Not After : Feb 26 05:18:35 2026 GMT
Subject: CN=69969d2b-8eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9b:db:e7:a1:34:d7:c4:c4:d0:aa:45:67:e8:
b6:99:7e:37:47:b5:60:b6:36:5a:aa:69:2f:39:b5:
6f:8b:78:3c:91:a1:67:23:db:ae:b9:4e:3a:3f:f0:
de:c1:06:3b:90:35:98:25:38:f2:1d:87:22:ba:45:
af:ca:62:0e:05:ab:23:ea:b9:93:aa:f2:ef:09:fd:
72:55:68:a5:c0:4c:ff:bb:0b:6f:63:2a:9d:59:d9:
27:f3:86:3b:57:85:04:1a:e6:e0:e5:e4:5d:0f:d0:
82:43:b3:fd:77:5f:1f:1b:02:29:dc:7e:f3:81:e0:
93:4e:2c:e6:f3:c5:44:d9:23:11:06:4b:16:fe:b6:
ef:0a:b5:48:02:c2:62:91:79:27:16:f3:84:1f:48:
a6:11:b0:66:96:b3:f5:4e:3d:90:3f:88:54:b6:3b:
03:bd:65:09:5b:d2:c4:74:01:9a:62:8b:89:d3:16:
c5:59:83:f2:c6:48:68:fa:37:64:3c:ba:55:21:55:
73:97:1d:0c:3d:23:5e:d5:ce:20:b0:50:5e:d2:3c:
79:c9:9e:e0:0b:5c:3a:27:79:13:1d:a3:3c:dd:99:
82:69:f9:d2:0f:7a:81:c9:e4:6a:71:ae:44:8a:c9:
b7:ed:05:1b:ad:84:3a:0c:61:86:97:fe:c4:bf:60:
1c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:57:D2:5B:4A:89:5F:C4:EF:65:B3:DB:64:C5:D5:DA:90:96:11:75
X509v3 Authority Key Identifier:
keyid:67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:fb:21:06:19:4e:33:da:33:8a:77:89:88:23:01:08:7a:70:
45:5b:cb:2d:b3:b0:c8:5b:70:b2:a8:54:d4:fb:94:55:7f:7f:
69:84:df:5a:7c:5e:0c:e7:ac:49:c2:3c:13:3b:03:95:b1:41:
84:19:7e:f1:2e:3f:13:9c:f7:98:ca:68:1d:b1:b7:be:0c:06:
49:52:e3:b6:15:54:7b:a0:59:f8:5d:2f:fa:d1:bc:08:1e:79:
7f:82:09:3a:0d:d8:82:f7:98:e8:e6:c8:b8:81:01:54:59:ef:
ef:33:11:f6:e2:07:2c:3c:da:dd:64:b0:d6:20:fe:1f:90:d0:
88:cc:38:0a:6e:1a:aa:2e:85:9b:a3:54:de:fa:cd:9b:fc:3b:
d2:65:d1:0e:ff:90:40:05:41:81:2b:a6:d7:cb:db:90:ef:18:
4c:7e:0a:a2:4a:b0:fd:32:31:39:7a:ec:0b:53:eb:e7:18:a7:
7b:49:50:e4:5f:e0:e4:32:22:fa:65:87:83:3e:76:95:37:9c:
39:d6:f0:4a:b5:04:9d:fe:26:c2:17:c6:96:fe:aa:c3:23:d8:
ac:71:53:c6:6c:61:17:90:d9:43:69:36:89:da:2a:37:7c:bb:
d1:cc:f5:5a:a6:8d:d4:24:f3:ea:32:13:86:12:65:7e:30:da:
84:d2:7e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:14:26 2026 by rpki-client