
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft
File: ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft (raw, json)
Hash identifier: N9TC4OzUsB+t5AacpsWs6XoKeWtNChnCvbOqevb34e8=
Subject key identifier: AA:5B:A7:CD:E8:55:B1:D5:48:B5:2B:0E:0A:7A:26:0F:5A:25:3B:EE
Authority key identifier: 65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53
Certificate issuer: /CN=A9151932/serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553
Certificate serial: 0124
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft
Manifest number: 011F
Signing time: Thu 19 Feb 2026 04:22:54 +0000
Manifest this update: Thu 19 Feb 2026 04:22:54 +0000
Manifest next update: Thu 26 Feb 2026 04:22:54 +0000
Files and hashes: 1: ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl (hash: sRjYMqDx3BerXagGnEBXu6tZyS+yoUXGCLc5JeFjaFg=)
2: 747C668ECCD911EF9B52C877C4F9AE02.roa (hash: m3GeVlgQwLSASq7XBSa8f1Uvp0nte9cJZ6MnwsMfEFs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl
rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151932, serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553
Validity
Not Before: Feb 19 04:22:54 2026 GMT
Not After : Feb 26 04:22:54 2026 GMT
Subject: CN=6996901e-62c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:ce:d7:09:23:01:9a:e9:d6:ce:19:de:66:
f6:e2:9f:16:14:a6:71:43:35:af:f2:6c:14:ef:3a:
b0:a8:d2:87:3b:df:c7:c2:40:e1:fb:2a:67:87:13:
07:a1:06:bf:32:22:0b:e6:ba:47:bd:06:0a:15:1d:
3b:b0:71:39:99:9b:3b:bb:10:0b:67:f6:cd:a2:91:
62:32:08:87:6b:27:07:7a:4a:86:f8:0c:08:d0:28:
9e:df:2d:ff:ce:aa:76:e4:d5:74:cc:f1:9d:e8:97:
87:6b:81:84:e5:ca:6b:ac:9d:55:91:7d:65:ba:32:
57:eb:70:66:1c:7b:34:e6:0b:2a:23:7c:dc:4e:92:
61:28:00:5e:4f:5a:9e:bf:23:04:c0:e7:95:54:91:
4a:8b:8f:4b:60:bf:3f:cc:17:5f:00:20:1a:03:52:
4a:7d:e0:dc:93:8f:c3:7a:53:c9:d7:7b:82:1d:cc:
b8:01:4a:bd:a0:aa:b8:2e:cb:b1:ff:00:8c:4d:55:
30:f9:56:9b:d4:da:b4:e0:bb:05:8e:3f:9f:35:c2:
fa:56:56:be:7a:b8:07:dd:22:17:b3:89:07:2c:d7:
47:35:54:fc:c3:d0:58:9d:d1:39:b3:01:fe:8a:64:
21:e0:6d:d2:67:78:eb:65:6d:2d:ca:64:7f:76:45:
9d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5B:A7:CD:E8:55:B1:D5:48:B5:2B:0E:0A:7A:26:0F:5A:25:3B:EE
X509v3 Authority Key Identifier:
keyid:65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:a8:2d:c8:bb:da:dd:4d:de:e9:ce:d5:6a:09:c8:76:ed:d4:
d5:e0:a0:85:86:3f:bf:16:25:e2:18:b2:1d:aa:c7:15:d4:99:
dc:a3:5f:1c:04:f1:c7:4f:7f:36:cf:53:82:c8:60:21:ff:67:
55:d3:0d:38:c0:52:03:ef:ef:5b:6d:cf:17:7f:d6:75:c2:b7:
11:b2:d4:4b:8c:00:a6:b5:9c:cb:e6:9d:9a:21:8f:33:48:7c:
3e:39:df:df:16:96:9f:bf:94:3f:2b:17:11:8f:8e:e3:9f:6a:
e4:1d:cf:21:a3:c3:46:ab:d2:82:e3:99:c2:52:37:b5:e6:7a:
e9:6f:4c:5f:75:94:0c:6c:46:ce:13:5b:72:3e:f1:5c:dc:fc:
70:e5:24:13:c9:90:0f:1c:51:58:67:a1:3a:7e:7f:76:69:3f:
16:e1:82:d3:4b:c0:46:59:c1:bc:68:76:25:f6:f7:3a:ca:d1:
ca:62:21:7d:92:3a:9c:48:33:9b:41:35:ec:81:67:c2:cb:cb:
03:b1:a9:ee:3c:46:de:ce:fb:29:e0:ed:c6:80:b3:56:38:7a:
bb:d0:cc:c7:8d:7d:58:72:6f:5f:9d:cc:45:b6:09:ef:06:c1:
85:39:62:7a:11:8e:e7:84:56:e3:aa:d1:c3:1a:bc:e3:d0:d4:
92:6e:46:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:13:43 2026 by rpki-client