
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft
File: zOnFYkus-dCYXj8tbjHmsthtgq4.mft (raw, json)
Hash identifier: x7lSpQXQ8MNuY2FFvndGntUniJ12E0x2Avs0hqjMbtM=
Subject key identifier: EC:86:ED:95:CD:4C:0E:69:30:FA:E9:7B:8E:C3:54:FF:43:39:18:A1
Authority key identifier: CC:E9:C5:62:4B:AC:F9:D0:98:5E:3F:2D:6E:31:E6:B2:D8:6D:82:AE
Certificate issuer: /CN=A9157B07/serialNumber=CCE9C5624BACF9D0985E3F2D6E31E6B2D86D82AE
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft
Manifest number: 52
Signing time: Thu 19 Feb 2026 06:29:11 +0000
Manifest this update: Thu 19 Feb 2026 06:29:10 +0000
Manifest next update: Thu 26 Feb 2026 06:29:10 +0000
Files and hashes: 1: zOnFYkus-dCYXj8tbjHmsthtgq4.crl (hash: 6ACO8D7WuJnrH3C+5/AkxdMlIWlNWgWu7xsylEqWlO4=)
2: 8CA88A568FD611F09FFCA92CC4F9AE02.roa (hash: X1O7W3t2SP7SDbQ67NRf7y+vow5VXeN/HZMH9HZxaRQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.crl
rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157B07, serialNumber=CCE9C5624BACF9D0985E3F2D6E31E6B2D86D82AE
Validity
Not Before: Feb 19 06:29:10 2026 GMT
Not After : Feb 26 06:29:10 2026 GMT
Subject: CN=6996adb7-9b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0a:d8:01:12:81:d2:45:f8:0c:8c:5e:95:dc:
3d:c7:f8:f4:6e:89:e8:73:cd:fc:82:b4:2a:29:c3:
31:31:b5:ec:58:88:7c:f3:55:83:a6:68:d2:2b:8c:
30:2d:ef:23:d3:4d:76:77:73:97:63:a8:7a:89:29:
46:f4:d1:67:7d:ce:1e:b8:99:76:f7:18:77:cb:a3:
5e:8d:ed:9d:ab:73:cc:6f:cd:b1:4f:e6:98:22:a1:
70:f1:89:92:49:12:3e:0d:c5:96:47:3c:c8:70:e2:
08:ba:cc:46:7f:f9:6d:c0:95:43:dd:ec:78:af:fe:
10:fb:0c:f8:1f:c6:23:40:3c:ed:f1:7b:42:4a:70:
ab:48:15:ac:10:7c:78:01:81:b6:68:6d:5b:f0:58:
ea:26:66:1e:a6:c9:35:88:d3:f2:bc:17:c7:a1:ae:
eb:a4:1e:b2:ad:d4:5c:25:8e:fe:54:00:36:0a:a7:
5f:6b:2a:af:c8:d8:c3:b4:ea:bc:2f:6e:b2:0f:58:
78:c4:3f:d6:13:1c:fe:93:4f:89:b1:5b:db:e6:fe:
d0:59:9d:34:8b:1f:ad:6f:39:81:55:17:6a:3b:bd:
db:4f:f3:2d:e8:db:94:72:e4:be:06:e0:21:61:66:
76:8c:1e:26:66:2d:14:e9:c4:b3:f6:f7:4b:30:03:
df:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:86:ED:95:CD:4C:0E:69:30:FA:E9:7B:8E:C3:54:FF:43:39:18:A1
X509v3 Authority Key Identifier:
keyid:CC:E9:C5:62:4B:AC:F9:D0:98:5E:3F:2D:6E:31:E6:B2:D8:6D:82:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:43:a6:47:82:e7:d0:e8:a4:82:c2:33:46:86:0d:0e:58:e8:
a7:f5:7e:d8:aa:78:9e:c3:32:59:c5:b8:b8:cd:2e:f2:10:3c:
bb:9a:79:09:80:ec:12:8d:8a:2a:1d:fe:06:c6:61:f0:ff:41:
fd:06:36:d8:f2:ab:fb:57:9d:5a:e5:fc:79:1b:ce:c5:a5:9c:
b3:54:13:5b:0d:b8:42:08:da:c8:23:02:46:46:52:03:a9:34:
81:30:a2:09:96:26:bd:07:bd:53:7a:a9:03:cb:12:34:1f:b1:
60:5d:27:c3:77:95:cb:02:3c:f1:ab:71:1f:17:40:26:d6:4a:
9d:e7:27:37:8c:d9:13:28:03:a4:17:53:f1:b0:22:4c:58:db:
5c:17:88:3a:db:d5:c8:65:26:a9:ce:ff:e1:5f:19:47:47:c8:
30:de:ee:90:91:3d:c1:2e:4a:ef:6b:98:c4:47:0e:02:9a:22:
47:79:59:fe:42:7c:a3:cf:24:6b:4d:70:b7:28:92:e5:f2:9e:
24:ac:a7:e8:dc:f8:31:75:3e:55:df:95:55:81:09:10:31:6d:
ff:02:be:c0:e3:53:d1:86:31:1a:a2:bb:b8:0a:81:c2:e5:8b:
a2:22:a2:a8:3d:c4:65:40:d2:bb:f2:d9:45:12:6d:0f:2f:d7:
91:53:54:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:17:56 2026 by rpki-client