
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
File: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft (raw, json)
Hash identifier: 8Lcf/gQH6nEnYplB6H1lB3I0F66AX95IVFtVAMF4lLI=
Subject key identifier: AB:95:DB:6B:C9:81:6C:81:F0:EB:AE:76:2C:06:BA:1A:F6:A8:2C:29
Authority key identifier: B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76
Certificate issuer: /CN=A9154FFD/serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
Manifest number: 3C
Signing time: Thu 19 Feb 2026 06:43:35 +0000
Manifest this update: Thu 19 Feb 2026 06:43:35 +0000
Manifest next update: Thu 26 Feb 2026 06:43:35 +0000
Files and hashes: 1: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl (hash: H/xFm3QXM2sHqk6QPv2Y7s/LhmkDnzc49SADJcZcRJo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl
rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:43:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154FFD, serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76
Validity
Not Before: Feb 19 06:43:35 2026 GMT
Not After : Feb 26 06:43:35 2026 GMT
Subject: CN=6996b117-b3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b5:15:0a:b6:b7:d8:22:fb:44:68:0a:4f:7f:
bf:fe:53:75:3b:e8:4c:2f:31:1b:06:fb:c6:65:a2:
34:66:62:eb:2f:5e:97:68:08:df:b5:f7:c8:44:61:
8e:85:56:18:d0:27:e3:0f:a9:65:4a:dc:b3:3a:e5:
12:5f:a0:ec:6a:e1:22:15:77:b9:62:17:43:49:93:
b8:c7:18:27:e0:03:e3:d3:ab:20:4c:1e:2a:29:91:
ec:47:ec:c7:bb:09:91:77:8d:54:27:13:f2:a5:aa:
55:c1:83:3a:ee:52:63:b2:84:3b:be:4c:51:9c:3d:
c9:93:8f:63:b8:b8:0e:70:f6:7a:47:cc:05:da:16:
8a:89:e5:10:5b:4f:97:ce:7a:e7:89:17:96:9d:af:
7a:01:9d:db:ea:fb:79:e6:e7:a2:e9:b7:dc:11:c1:
91:59:0d:b2:21:65:1d:3f:1d:81:3d:0b:e4:83:bb:
79:37:d3:eb:54:e0:09:50:1f:a3:d3:0f:f8:a0:7b:
5b:df:08:9e:8b:d4:28:dc:24:d6:b9:83:c0:20:2b:
29:dc:03:33:50:ab:ba:6f:20:36:28:c9:8b:3b:d4:
1f:39:ae:09:4c:b3:20:bd:6b:49:56:59:34:b7:6a:
d1:5f:eb:41:a3:81:65:cf:fd:85:42:bb:fc:62:94:
d1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:95:DB:6B:C9:81:6C:81:F0:EB:AE:76:2C:06:BA:1A:F6:A8:2C:29
X509v3 Authority Key Identifier:
keyid:B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:e3:9f:c7:0e:61:7b:01:6e:70:6b:97:27:8e:08:f1:58:0c:
b0:ba:ab:7d:22:e5:ad:3c:c2:d7:39:b5:0b:6e:35:93:49:5b:
02:77:21:1d:dd:d1:8e:d8:72:72:3e:81:28:34:47:2a:42:db:
dd:e7:6b:8d:7b:4a:34:dd:dd:6a:90:8f:25:df:fa:53:da:c9:
19:53:4b:07:34:f3:21:c3:56:f7:b1:73:a3:09:03:db:d9:3b:
17:e2:4c:40:a2:a4:27:b4:bb:8b:7c:89:c7:f6:9e:09:75:dd:
54:0f:f4:68:b7:e7:9f:e2:46:0e:5e:99:f0:24:27:51:82:3a:
20:b6:d3:25:45:01:84:bf:9f:46:74:a3:83:4e:62:ea:b2:0c:
c5:89:1a:78:39:e8:6d:6d:af:a0:87:70:df:01:e2:11:23:49:
eb:07:cd:e2:fa:5f:b1:f9:0a:75:76:af:c0:49:f7:bb:51:2e:
36:f0:c8:30:cb:70:63:1c:80:b0:c1:82:18:83:27:d8:fd:92:
60:53:13:02:fb:9d:80:20:2b:e5:d8:d7:af:d0:e2:80:0d:80:
0b:d1:4f:59:22:40:df:b6:7b:b3:c7:f4:cd:71:08:86:c6:d0:
31:83:4f:66:e2:4a:70:be:c7:03:1d:c2:38:6b:4c:48:8c:79:
54:73:97:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:11:49 2026 by rpki-client