
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft
File: z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft (raw, json)
Hash identifier: +EAc9kn+i5/4JCMgAJfa0D9TFq8lIr8ppYg2uNDExB8=
Subject key identifier: 0F:B7:5B:71:CC:DD:D5:C2:C3:41:8F:C3:8B:FD:B1:74:0E:97:B2:9E
Authority key identifier: CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A
Certificate issuer: /CN=A9149C62/serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A
Certificate serial: 0106
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft
Manifest number: FF
Signing time: Thu 19 Feb 2026 04:41:04 +0000
Manifest this update: Thu 19 Feb 2026 04:41:04 +0000
Manifest next update: Thu 26 Feb 2026 04:41:04 +0000
Files and hashes: 1: z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl (hash: wVaSwqNmTmz2jf/v84/ike3zppfHCCepWg2CIGKDC6Q=)
2: D7A7F3FEE18711F0A8B43181426F56BC.roa (hash: vYKoPSfFLuXVy0A8zTQtYmFtyImPKcp/50daoXBvX1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl
rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:41:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149C62, serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A
Validity
Not Before: Feb 19 04:41:04 2026 GMT
Not After : Feb 26 04:41:04 2026 GMT
Subject: CN=69969460-0c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:f9:f5:77:56:f6:a1:f3:25:c0:ae:ae:7f:
a3:60:5b:3d:5c:16:c1:2c:54:45:11:dc:9a:c6:19:
0b:cf:60:34:0f:5c:19:c2:d6:b6:1b:7d:9c:7e:93:
2d:2e:1f:9c:9e:c5:58:d4:da:37:ad:1d:ee:e2:fb:
ed:39:12:8d:64:1f:ee:00:21:cf:f1:b4:8c:1a:95:
4a:5b:91:a8:5e:fe:bc:b7:98:04:0e:12:19:3d:31:
c8:6a:1d:01:c4:69:21:34:2d:d6:18:c8:af:4c:69:
04:aa:4b:9f:43:33:6d:46:7b:58:49:29:1a:56:6c:
df:4c:f6:b0:80:17:3f:53:30:6f:0f:ac:23:ac:ba:
13:b9:42:49:89:45:96:5e:9b:a0:76:b7:ac:e9:58:
b6:dc:a7:50:8e:e4:c9:fa:dd:7f:fd:15:01:7a:2e:
e4:4b:57:b7:e7:d5:6a:68:76:f0:91:40:80:49:66:
81:8d:72:6f:dd:5b:45:34:56:4b:8c:54:ad:e7:69:
18:da:fd:9f:1e:d3:37:34:f4:84:e6:a6:b0:1f:b6:
ee:24:a8:41:88:93:fa:39:f1:12:1f:97:99:54:f3:
55:5c:26:83:ef:99:f2:2f:e6:03:cd:43:7f:2a:90:
44:3f:e6:1a:2e:9d:cc:5b:69:8e:e7:ef:1a:26:be:
3c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B7:5B:71:CC:DD:D5:C2:C3:41:8F:C3:8B:FD:B1:74:0E:97:B2:9E
X509v3 Authority Key Identifier:
keyid:CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:39:31:ae:5d:7e:1c:a1:bd:74:fe:de:d5:f6:3c:70:be:01:
31:df:c2:9f:1e:fe:a9:fa:28:03:b5:48:6a:d7:92:f0:53:61:
ad:31:23:40:51:95:c5:9e:e1:a3:7f:fa:58:07:3c:d8:8c:45:
25:9e:df:30:fa:02:f8:9d:cd:7b:07:99:8e:46:cf:6a:f8:2f:
66:81:2e:1c:06:b8:51:aa:67:c6:49:ee:20:30:a8:a6:1c:2f:
8e:d2:5c:d4:1c:3a:28:d8:cf:28:76:7c:27:5f:8b:47:ed:29:
4c:cd:31:48:74:60:fb:7f:73:06:7f:46:e3:f7:bb:d5:fa:c8:
d8:ac:6d:ec:21:03:ed:01:ad:56:9d:a7:a8:7a:27:80:0d:be:
0a:b1:0a:0c:8a:bc:3d:d3:65:50:4c:fa:f2:5c:5a:41:d6:35:
05:00:f5:1e:6d:48:eb:05:85:3e:e0:f7:3b:da:16:b0:72:09:
3a:63:0f:c7:16:fd:68:5d:4b:7e:45:63:f7:aa:ab:98:f9:89:
3a:d6:59:16:3f:4b:8a:73:50:41:39:6e:8b:50:a0:00:1b:ee:
17:ae:75:1f:df:b4:ea:94:cb:3d:a4:01:2a:31:f2:0e:20:f8:
61:04:87:28:94:38:50:e3:73:cb:5f:a0:20:56:36:7f:f8:61:
0d:ab:bb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:41:02 2026 by rpki-client