
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft
File: ZfzR8nTT59WOTQyihVjTS2sVLWc.mft (raw, json)
Hash identifier: KOnM4h3zB5iggShLgtfYS8CYxwgNHnEvUyOWkP7DQZw=
Subject key identifier: 01:3D:C0:4F:30:2C:96:F2:60:11:97:14:53:A4:1F:8B:EF:D3:61:77
Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67
Certificate issuer: /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67
Certificate serial: 11A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft
Manifest number: 119C
Signing time: Wed 18 Feb 2026 16:56:30 +0000
Manifest this update: Wed 18 Feb 2026 16:56:30 +0000
Manifest next update: Wed 25 Feb 2026 16:56:30 +0000
Files and hashes: 1: ZfzR8nTT59WOTQyihVjTS2sVLWc.crl (hash: CrhIVxNXnAwCq37eWca2S2HIvMh8hoBta7sNzWilahM=)
2: 1BFF84B0131611E991379440C4F9AE02.roa (hash: 9PDn3YHBPFAejDE7hltbsdcT1kRuYYPQs0blFXX8FkY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl
rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4517 (0x11a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F7D0, serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67
Validity
Not Before: Feb 18 16:56:30 2026 GMT
Not After : Feb 25 16:56:30 2026 GMT
Subject: CN=6995ef3e-17d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:c1:a8:fe:a3:f1:56:f2:07:b4:5d:2a:20:
c2:95:58:63:10:0d:80:cb:61:4b:05:ad:0d:58:5f:
83:5e:d1:d7:bc:32:de:c6:77:29:a2:fb:d8:a9:72:
23:2b:c8:16:5b:e1:d7:e4:cc:df:c2:4c:13:fb:56:
22:08:f8:39:8b:e2:b7:b3:21:82:9f:dc:f1:be:76:
22:95:06:0e:ba:ce:5a:d6:db:41:57:13:91:c5:b6:
6e:8d:85:df:cb:45:15:72:d9:dc:4a:92:36:11:81:
46:35:4b:5f:6b:7d:99:30:5e:97:a5:18:33:99:f8:
1e:1e:3f:55:a4:89:e5:dc:00:55:62:b7:c8:0e:c0:
f4:40:18:49:f0:35:38:f6:f0:fc:90:f2:a6:10:43:
e4:89:5f:77:1c:23:67:b3:0d:25:f6:0d:7d:fc:c0:
ac:79:dd:37:88:75:a9:fd:bf:ba:8b:e1:ab:3e:5b:
5c:27:20:8b:18:e9:e3:ef:aa:ef:65:cd:4d:3c:09:
14:af:d4:da:a7:04:d2:65:25:29:4c:cc:54:f6:6c:
bf:12:20:1e:24:a4:6b:d0:6e:e1:2e:73:cb:a6:c0:
f6:53:8d:ed:ff:2c:47:68:27:e1:cd:3b:33:76:4f:
20:d1:28:bf:ff:bd:1c:4d:40:1f:63:c1:b1:43:f7:
9d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3D:C0:4F:30:2C:96:F2:60:11:97:14:53:A4:1F:8B:EF:D3:61:77
X509v3 Authority Key Identifier:
keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:21:84:b3:2c:c9:3d:6a:1d:ca:14:c6:4f:8c:0d:ac:1a:09:
98:69:0c:41:0f:11:12:5e:42:82:89:c2:ca:1a:65:ea:8e:7f:
d2:9c:7d:07:88:8b:63:5b:4a:45:07:6c:53:6d:22:e0:90:03:
16:69:88:b7:90:43:cb:3a:e6:da:a3:c7:fa:bc:51:ea:97:2c:
2f:ae:14:87:1b:34:dc:66:78:0e:be:26:8c:5b:d8:05:87:7a:
cb:95:09:70:eb:03:cc:5a:e6:7a:93:c8:7b:15:b8:a3:50:45:
8f:97:f9:64:cd:52:14:3e:e9:0f:a5:92:70:66:5f:a5:ec:38:
99:87:e4:9e:a1:98:ba:ba:b4:de:62:4f:f5:2d:9d:2a:1f:2d:
de:f0:4d:c3:ec:6e:78:d2:57:24:a9:07:32:e1:fe:de:3c:f5:
9e:24:f7:b6:cb:bf:85:12:e0:a3:2f:06:1f:2c:b0:b8:44:05:
ba:d3:61:0c:c9:c5:3b:de:47:6d:b4:fd:a8:1f:4d:75:04:e9:
2d:d2:95:6e:4a:f0:da:26:5a:04:8d:e5:46:2f:f8:85:e4:39:
cc:db:53:32:2e:ab:b8:2d:48:40:1c:0c:86:e0:3c:d2:06:09:
52:81:0d:88:0b:60:3c:dc:69:63:ee:73:97:be:79:a3:3c:64:
a4:28:ff:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:40 2026 by rpki-client