
$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
File: TzLs_4zUbD7AP6deEAj0qpoM-JM.mft (raw, json)
Hash identifier: fh4o/iTu9ahsm/xFSFC5pq98T+xd9lksWlBzqshse0Y=
Subject key identifier: 85:00:EC:9F:0A:7F:E1:57:2A:36:C7:40:FE:0E:1A:77:94:8B:59:82
Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93
Certificate issuer: /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
Certificate serial: 0B9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
Manifest number: 0B8A
Signing time: Wed 18 Feb 2026 18:44:56 +0000
Manifest this update: Wed 18 Feb 2026 18:44:55 +0000
Manifest next update: Wed 25 Feb 2026 18:44:55 +0000
Files and hashes: 1: TzLs_4zUbD7AP6deEAj0qpoM-JM.crl (hash: qNZ4O9OZ1Jx9J9ni1iJhEjao3nLYE6GbOgfO0QyJxSU=)
2: B34C91C4B14311EF8479AA21C4F9AE02.roa (hash: eH7lKxC1fSAwRwADOegzWnR0eN8xp2QzqcA2Q9e7qkk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl
rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:44:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2975 (0xb9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91522E0, serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
Validity
Not Before: Feb 18 18:44:55 2026 GMT
Not After : Feb 25 18:44:55 2026 GMT
Subject: CN=699608a8-e98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:a3:33:4f:c2:0b:09:6a:e9:b0:54:fa:3c:
21:e5:6a:4e:98:4f:c7:38:29:34:d0:bd:b2:f7:16:
fc:35:eb:34:38:48:fd:4e:1e:fb:9f:33:79:be:56:
05:29:d4:b7:c3:88:4a:f5:fc:a3:ae:e4:e6:50:8e:
38:72:67:dc:bb:8a:bc:74:0d:4f:3b:d3:42:0a:e0:
a4:7e:82:cf:45:cc:fe:0e:b2:ae:3d:56:12:5f:48:
0d:48:a6:c2:85:56:1a:56:4b:08:12:b2:09:93:d2:
9f:2e:e5:4f:19:a9:22:60:67:97:1b:69:76:f5:56:
5b:fc:58:2b:ed:01:94:93:2c:46:eb:ce:4d:c3:86:
f3:de:af:87:b1:df:08:8c:92:f6:cb:5c:34:57:40:
b9:67:8f:29:ab:1c:cd:fa:7e:b9:c2:54:15:5a:09:
cf:ff:53:e3:69:5a:59:28:dd:37:b9:4d:05:81:36:
49:40:f3:c7:f2:0f:bc:92:55:db:83:e8:12:bb:bc:
36:e4:a4:e1:b6:55:be:a8:1b:95:14:7b:66:5a:cc:
7f:0c:0e:42:04:18:09:93:f8:61:20:20:40:59:29:
63:89:1d:6e:b0:f6:b5:0b:41:85:a1:3f:d7:61:11:
aa:1f:bb:08:d1:82:71:72:15:6f:36:45:a5:11:2f:
65:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:00:EC:9F:0A:7F:E1:57:2A:36:C7:40:FE:0E:1A:77:94:8B:59:82
X509v3 Authority Key Identifier:
keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:4d:f0:c9:ef:ae:2d:1b:ec:f4:bd:34:83:98:35:40:2f:c3:
dd:b1:8c:de:44:cc:5b:38:4c:6a:69:3b:ba:fd:27:8c:b1:d9:
f1:e4:1a:90:ea:6d:15:bd:88:0f:63:ab:84:d6:99:a0:8e:dd:
64:1c:8d:45:6c:20:6b:d2:89:50:df:e4:24:53:63:54:13:1a:
78:aa:4b:a4:f9:1e:f9:1c:e5:aa:78:ba:4d:25:c3:cc:d7:12:
48:b9:2d:5d:a4:8f:0b:7a:41:1e:d8:08:3b:3c:b6:d2:72:cb:
b9:60:f0:ba:1f:68:35:4f:26:c6:69:7b:25:7b:ed:dc:4a:79:
18:e2:e2:a9:50:a3:9a:d2:09:9a:74:2c:98:a1:4d:ff:39:3d:
a3:f6:99:be:0d:b5:7f:f4:b3:1c:12:ce:ed:57:1d:eb:71:bc:
63:14:7d:e6:1f:78:a8:c0:02:f9:4f:b8:44:3a:44:98:4d:90:
43:0d:9d:aa:6b:83:ab:e9:ec:1d:3b:07:8c:89:fc:1f:18:82:
81:e6:45:a2:e7:60:a9:69:56:8d:99:10:48:e6:eb:20:d6:c2:
2c:30:c9:e1:59:60:d0:68:51:95:9c:f6:68:9a:ec:c9:a2:e4:
75:f2:53:aa:af:db:18:9d:e2:43:df:f5:60:d7:23:d1:41:06:
df:be:c6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:53 2026 by rpki-client