
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft
File: Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft (raw, json)
Hash identifier: jUmzsUPO2iaqCxgxnRbrQOxYyG3WiHLZQ90p03k9PGk=
Subject key identifier: 68:88:58:09:89:FF:9E:86:65:E6:33:B6:16:6B:08:82:0C:80:B7:80
Authority key identifier: 67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02
Certificate issuer: /CN=A9152EF3/serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02
Certificate serial: 0E61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft
Manifest number: 0E5A
Signing time: Wed 18 Feb 2026 17:29:08 +0000
Manifest this update: Wed 18 Feb 2026 17:29:08 +0000
Manifest next update: Wed 25 Feb 2026 17:29:08 +0000
Files and hashes: 1: Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl (hash: iMJZvU7z6r+Id7MdgnKJnmnTnABBu2hz1JkiRPM7z2U=)
2: E4AAD78CEFFE11E991390613C4F9AE02.roa (hash: pRdeyjIR5PJUpFPO2R7F1j82SKKC+YOZPiwCmzodVXc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl
rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:29:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3681 (0xe61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152EF3, serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02
Validity
Not Before: Feb 18 17:29:08 2026 GMT
Not After : Feb 25 17:29:08 2026 GMT
Subject: CN=6995f6e4-e656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b6:88:25:ad:6f:9c:f0:d8:8c:e0:d1:f8:eb:
0d:1f:50:22:3c:09:d8:ec:c8:bb:df:20:27:e4:9e:
a5:6a:f5:cd:04:99:0d:d6:45:c0:f4:18:0b:ca:9e:
6b:01:f2:70:24:a9:99:da:09:8a:6d:b2:8f:8d:b7:
ca:bb:dc:5c:ec:62:25:3b:38:cd:48:51:5d:8c:fc:
7e:39:60:6a:4d:a6:63:3a:94:36:a7:5d:ce:81:6e:
00:b5:b0:8c:04:4a:ed:b9:fb:fd:a7:30:71:01:c9:
a2:ef:88:61:2d:51:08:e3:b7:9b:09:c0:09:44:f0:
3c:77:e7:a3:25:c9:77:e1:6a:db:a8:85:2f:07:10:
ee:28:c5:89:ef:30:d3:ae:6a:b6:b7:63:a9:ca:c0:
df:6a:4f:40:c2:49:79:97:16:5b:49:a5:c6:2b:08:
b5:ff:3c:dd:84:ff:29:c9:09:b0:90:7f:2a:b9:5f:
09:c2:7c:57:a9:1e:90:f0:82:1c:8d:37:5e:02:5c:
3b:da:4c:c4:cf:c7:0d:a2:50:a8:a5:ba:07:06:b7:
b0:cd:67:d2:8f:61:33:79:ce:48:2e:b5:95:62:c2:
90:2b:e9:7e:45:cd:6d:3d:a4:2f:8c:f0:9b:23:05:
0d:b1:a9:3e:83:22:be:88:a4:90:b1:64:ee:5c:0d:
24:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:88:58:09:89:FF:9E:86:65:E6:33:B6:16:6B:08:82:0C:80:B7:80
X509v3 Authority Key Identifier:
keyid:67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:04:3e:be:88:00:66:f5:4c:8b:9f:a3:9e:8e:74:68:66:c2:
d4:1a:ef:14:7f:35:f4:e6:ae:69:5d:8a:d7:4a:ca:1a:fe:34:
38:35:83:28:76:d5:3d:72:de:12:95:50:e7:18:e8:ff:81:40:
f6:eb:d8:0c:37:b9:0c:1d:d1:e4:8f:93:e2:90:6a:af:95:e0:
a7:98:08:5a:3b:f6:9a:08:fa:84:44:32:69:61:40:71:36:f2:
9e:36:66:c3:05:57:08:d4:ec:ba:4e:08:97:d1:0a:92:1c:9c:
49:ac:42:1b:f0:07:26:20:12:b0:23:4b:37:d5:8d:0f:76:a0:
f6:24:39:6c:d4:b6:b9:1e:60:31:94:d0:4a:d4:19:ef:99:a8:
41:f3:65:22:d8:84:70:f1:3c:ef:0a:b1:d8:d6:ba:30:25:1f:
40:5b:9a:94:b7:0b:95:ce:7a:c1:2c:8c:1c:81:08:a0:d8:de:
d9:c5:e2:cc:4f:83:77:fc:aa:7c:45:9a:c8:29:f3:9c:cc:fa:
d4:92:45:76:b2:15:b5:56:d0:bb:50:4d:4b:8b:a3:d4:e6:1a:
de:9e:27:cc:1e:31:e5:c5:b7:43:c3:c5:7c:c5:21:07:60:ab:
c4:44:4d:cc:26:bd:7c:13:67:2c:08:87:d4:8d:38:f1:d3:d5:
de:2c:48:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:41:03 2026 by rpki-client