
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json)
Hash identifier: JUxNXMbxqvukr/V5h4Kpl893k1Sduh2i5OM4SayaIoM=
Subject key identifier: 26:AB:BA:4A:B5:0A:CF:70:06:DC:3D:09:47:12:FF:FA:CC:B9:53:D9
Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88
Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288
Certificate serial: 0132
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
Manifest number: 012E
Signing time: Thu 19 Feb 2026 04:02:11 +0000
Manifest this update: Thu 19 Feb 2026 04:02:10 +0000
Manifest next update: Thu 26 Feb 2026 04:02:10 +0000
Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: n6FmGemh7ZDFCo8osOq5BFeVWnd3OolPyu1TaJchm6Y=)
2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: JdlW3zfugXT1nnN8YoMVEFmQcr0trjuADjjwBtb4laU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl
rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306 (0x132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288
Validity
Not Before: Feb 19 04:02:10 2026 GMT
Not After : Feb 26 04:02:10 2026 GMT
Subject: CN=69968b43-fbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:39:3c:28:de:72:72:9c:9d:a3:55:71:ca:a4:
15:bb:2f:e4:91:ad:fd:07:b6:ec:f3:61:3a:ab:3e:
ae:64:1a:0b:89:33:d0:f8:6d:51:07:c6:bc:6a:b6:
e8:14:aa:49:0b:6e:66:f8:b2:2c:39:17:eb:3f:9e:
8c:42:5a:56:94:1a:38:93:99:db:ad:49:38:11:b9:
ac:cd:4d:f1:14:a3:cb:49:84:24:44:5b:68:63:d4:
67:57:6c:3a:4c:63:83:ef:60:ef:e0:52:d1:3b:fa:
2f:f1:59:c7:ff:af:0b:b7:0f:41:06:b1:8e:5c:79:
38:17:49:01:ca:f0:2e:f9:21:b4:ed:a7:b1:4b:19:
93:94:45:62:e4:af:0d:c0:bb:d1:ce:a8:68:42:62:
27:85:7b:d6:29:cb:85:27:17:f8:41:af:b1:86:d3:
7f:6c:ee:61:2c:0a:a3:58:14:c3:75:a7:6e:72:35:
2f:8f:89:93:1e:2e:2b:88:48:dd:6a:7c:9d:ef:26:
fa:b7:b8:66:74:f0:66:b3:71:11:23:a4:b4:72:8b:
e0:6b:96:11:1b:41:ab:92:3d:a7:dc:6f:51:c1:0c:
45:74:f0:62:65:69:1a:81:1a:f7:b1:ce:9c:fa:2f:
79:5c:c6:62:76:53:00:50:77:95:88:fc:55:f6:a5:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AB:BA:4A:B5:0A:CF:70:06:DC:3D:09:47:12:FF:FA:CC:B9:53:D9
X509v3 Authority Key Identifier:
keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:2a:75:03:a6:73:bf:39:1b:cc:86:b0:ce:d5:69:fe:0e:d2:
3b:ed:11:20:94:38:14:c5:78:fd:53:06:be:22:f0:08:c1:f0:
dc:d9:fb:83:99:59:c7:24:8a:c7:ef:35:60:16:c1:47:ca:07:
b2:d2:b9:fa:c4:7b:e6:cb:7d:fd:3e:2b:45:61:f1:3f:40:5f:
f0:47:85:bf:92:12:02:03:d8:d1:27:1e:76:24:dd:97:96:85:
45:05:48:10:30:e4:eb:e5:e5:7d:71:bf:ef:e4:64:bd:fc:37:
9f:d1:b5:2d:84:0b:47:2d:b2:dc:6b:00:55:54:ff:8e:fa:b6:
59:02:70:54:b1:11:98:19:d6:03:c7:9c:10:da:c9:e3:44:e7:
f6:6e:fb:b8:16:9e:c7:20:ca:fd:94:2e:ff:0d:fb:ab:96:72:
ea:16:12:a2:40:02:c8:4e:6f:f9:2c:c6:6e:47:a2:b4:fb:97:
66:b0:4a:3c:f2:e6:94:cc:43:5b:59:3e:66:8c:dd:1e:fe:35:
82:ef:7f:9f:19:96:f1:2c:d8:65:31:b2:fe:21:1d:75:c2:4b:
45:a4:4b:61:e6:a6:97:f2:7c:9f:90:63:6b:00:d4:94:70:46:
e5:cc:d4:71:12:be:ee:94:0d:c9:d4:21:8f:2c:ad:0b:45:35:
dc:9d:83:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 05:58:01 2026 by rpki-client