
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft
File: pi_NZFSmighl9rlcwOh3RJ7z76k.mft (raw, json)
Hash identifier: O98PVas8Oy9zOv1rX4WpTe3sKPPUGg7U4AjaUif6uQw=
Subject key identifier: CC:9D:2C:55:16:88:6D:95:7A:53:57:D4:AB:D2:0E:3D:C8:27:0F:53
Authority key identifier: A6:2F:CD:64:54:A6:8A:08:65:F6:B9:5C:C0:E8:77:44:9E:F3:EF:A9
Certificate issuer: /CN=A911BA76/serialNumber=A62FCD6454A68A0865F6B95CC0E877449EF3EFA9
Certificate serial: 43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft
Manifest number: 41
Signing time: Thu 19 Feb 2026 06:41:53 +0000
Manifest this update: Thu 19 Feb 2026 06:41:53 +0000
Manifest next update: Thu 26 Feb 2026 06:41:53 +0000
Files and hashes: 1: pi_NZFSmighl9rlcwOh3RJ7z76k.crl (hash: VSxuTNLU9M4AcpNu+6LstsqZIvPVYFJnaAXABzvNOz0=)
2: 82CDD7C4B0C011F09232CD7BC4F9AE02.roa (hash: jehIFKXQzxSa2naNE6wehGEUSZh95Rm5N+knZ8mynTY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.crl
rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:41:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BA76, serialNumber=A62FCD6454A68A0865F6B95CC0E877449EF3EFA9
Validity
Not Before: Feb 19 06:41:53 2026 GMT
Not After : Feb 26 06:41:53 2026 GMT
Subject: CN=6996b0b1-bca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:f7:9f:0d:ab:4c:45:61:48:e5:6e:4f:f7:
02:3c:0a:ee:fe:41:7b:ee:29:df:6d:9b:8f:fd:55:
8b:07:e7:6a:d4:c4:4a:b6:b8:9f:59:bd:ae:2f:dc:
ef:ba:d9:60:bb:ff:78:41:fc:a4:cb:27:88:1f:6a:
39:49:b6:8a:13:e4:c8:50:6b:e6:69:03:a8:9a:83:
56:c5:45:4d:33:c5:79:3e:8f:91:fb:9f:82:32:02:
e2:c2:bd:32:21:62:a8:40:52:68:ef:ea:b8:70:d6:
be:ba:e3:f4:d7:c0:01:55:3c:05:16:3c:37:0f:88:
13:08:ba:4a:14:df:7a:6c:ae:cd:b1:e9:04:f6:60:
8f:3f:81:3b:4c:9b:94:46:44:c5:27:a1:39:4a:60:
be:39:a2:7c:5f:a0:45:9d:85:7a:d4:76:0c:9a:41:
f9:18:96:b0:ef:5c:20:66:63:7c:bd:b0:dd:2a:31:
26:f6:11:fc:32:1b:fa:7a:8f:9d:c1:4f:73:cc:c9:
ab:9a:7b:11:e4:e0:96:ad:0a:a2:f5:f8:0c:a2:7c:
26:8f:a6:fd:78:65:ea:30:d0:a6:81:e6:88:f3:bf:
68:ec:75:b1:47:bd:32:56:fd:9e:e7:6c:1e:00:68:
a8:e6:12:da:f4:0f:d5:db:4a:f6:8c:fa:20:82:3e:
d8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9D:2C:55:16:88:6D:95:7A:53:57:D4:AB:D2:0E:3D:C8:27:0F:53
X509v3 Authority Key Identifier:
keyid:A6:2F:CD:64:54:A6:8A:08:65:F6:B9:5C:C0:E8:77:44:9E:F3:EF:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:3a:7d:5b:7e:7f:31:2f:10:fb:4f:70:f0:31:09:11:14:d7:
eb:9d:fb:c7:f7:bf:72:9d:f9:dd:2a:bc:6f:82:d7:b7:c1:48:
bc:2a:79:bb:8d:95:ce:7f:6d:de:04:f3:95:44:65:87:e0:e1:
c5:31:f9:93:d4:b6:2c:3f:89:88:5e:03:28:32:3d:bc:6c:54:
bb:66:fe:97:75:2e:b2:29:12:80:40:e6:c6:3d:b6:90:52:db:
3d:70:0e:ac:c3:2d:04:4e:22:66:cf:e8:c5:36:97:0e:e3:5d:
5f:04:76:45:78:37:c3:70:9d:97:b3:d0:22:5f:40:5a:4f:f4:
e3:b9:d6:fb:8b:1e:9f:22:5d:0b:53:04:6e:46:41:da:89:43:
5d:48:e4:1f:d3:bb:13:21:24:7d:74:c8:da:8f:7f:9b:a8:ee:
5e:e0:1e:08:24:7a:52:05:b5:78:c9:8b:2d:c5:ef:d6:2f:09:
e1:71:99:7f:83:98:3e:61:8d:80:a4:0f:7d:3c:d4:b7:3c:3d:
dc:6e:e5:ce:39:de:bd:2c:1a:a9:f9:89:0a:1e:6c:f7:38:10:
8c:e6:9d:12:5d:7d:b2:36:50:98:2e:0b:c2:00:18:f6:80:0c:
9c:50:b7:73:91:ea:38:dc:d0:37:b0:5d:70:3d:8d:70:b7:d6:
94:01:37:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:16:28 2026 by rpki-client