
$ rpki-client -vvf rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft
File: zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft (raw, json)
Hash identifier: 0GLHCIP+CpYAP1v4NicpGQINjn2nK84FkSLAL3TxMyA=
Subject key identifier: 85:A4:7B:6C:35:9B:5A:E2:2A:DE:6C:2E:6C:CD:0D:E4:A8:C9:3F:26
Authority key identifier: CD:A4:7E:0A:1E:EB:52:5F:3B:5A:0F:AF:B2:FA:0D:BB:36:3B:FA:4D
Certificate issuer: /CN=A91594AE/serialNumber=CDA47E0A1EEB525F3B5A0FAFB2FA0DBB363BFA4D
Certificate serial: 0B44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft
Manifest number: 0B3C
Signing time: Wed 18 Feb 2026 18:51:04 +0000
Manifest this update: Wed 18 Feb 2026 18:51:03 +0000
Manifest next update: Wed 25 Feb 2026 18:51:03 +0000
Files and hashes: 1: zaR-Ch7rUl87Wg-vsvoNuzY7-k0.crl (hash: 3un6CXr31a93VdFFt2UemeL1NXzSBEJHdFnozGpDDiI=)
2: 38CAF4EC52B911EAACE8041BC4F9AE02.roa (hash: lj/CFwKu+N9KL+BN8rOtiVH/zU3sp7+mG9hyAnPkezU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.crl
rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:51:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2884 (0xb44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91594AE, serialNumber=CDA47E0A1EEB525F3B5A0FAFB2FA0DBB363BFA4D
Validity
Not Before: Feb 18 18:51:03 2026 GMT
Not After : Feb 25 18:51:03 2026 GMT
Subject: CN=69960a18-7858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:c9:57:5e:e3:8d:4d:3a:9b:2e:e4:e9:93:30:
d6:e2:5d:cf:5c:de:e8:93:42:90:fc:c5:5c:f6:84:
f8:d0:ea:fb:1e:c4:9b:de:c0:d5:45:dc:98:00:68:
64:33:5a:47:72:e0:41:c1:4e:ff:4a:1e:e0:b0:a1:
02:16:82:cd:2b:7b:66:d2:77:0c:b8:df:84:a7:54:
46:e9:81:35:0a:70:82:60:f8:48:31:fe:23:fd:86:
03:4a:51:1b:da:23:16:f8:47:53:59:17:da:f1:39:
96:86:c5:60:7b:c6:79:c2:5b:91:70:2e:c6:ad:f0:
05:1e:92:55:0f:e8:b6:ee:f5:02:a4:d5:a2:49:cb:
61:6a:bd:c9:64:52:21:9b:32:82:64:78:ce:bb:d8:
07:a9:a1:7a:4a:94:8f:0d:80:9e:8f:74:40:1d:ac:
c5:39:8f:b6:28:6d:a3:12:ab:a0:b0:b3:ce:95:92:
d1:dd:92:26:2f:fc:68:07:85:e8:67:e3:08:0c:15:
3b:62:77:5c:cf:cd:ab:31:f8:99:9f:6b:ae:de:29:
4c:63:38:69:c6:f6:de:9f:04:1d:a7:ad:f1:01:c5:
9c:b5:7f:b0:07:d0:d8:7f:a0:c5:24:50:28:9e:5b:
25:17:3e:08:cd:1e:41:fe:2e:14:97:b4:b0:11:19:
84:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A4:7B:6C:35:9B:5A:E2:2A:DE:6C:2E:6C:CD:0D:E4:A8:C9:3F:26
X509v3 Authority Key Identifier:
keyid:CD:A4:7E:0A:1E:EB:52:5F:3B:5A:0F:AF:B2:FA:0D:BB:36:3B:FA:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:d1:bd:33:62:57:8f:3e:09:24:80:74:36:9a:cd:b0:16:ea:
b4:f0:66:7e:8d:09:5e:a3:0a:0a:63:ca:9e:1e:79:10:06:18:
fb:3c:a1:f0:c0:0f:dd:e5:72:e1:ea:fc:4e:1b:c8:59:b8:57:
d5:8f:56:b9:e2:fd:36:ae:8c:bb:f7:cb:5b:58:db:d6:da:c6:
b2:77:dd:95:a7:c4:3a:22:c8:c2:c4:28:cb:af:73:d9:39:29:
23:7f:47:dd:d0:e4:0d:9c:51:ee:be:2b:89:6f:34:1e:53:19:
0e:35:41:cc:9a:61:61:4b:ab:df:bb:41:26:4e:f7:1b:7c:41:
b1:ad:8e:6a:32:d0:eb:e1:dc:e8:c3:7d:88:07:d0:a3:bd:23:
11:34:82:d3:75:80:98:2d:be:a3:ee:ca:7a:a1:b9:a8:9e:05:
b5:5b:9c:00:ca:8c:32:5c:d4:8b:07:6e:0e:19:d5:ad:4f:f2:
09:15:11:85:6b:14:f4:84:09:38:32:2f:2f:7c:d8:1c:b2:c5:
94:bb:0e:18:35:bf:4a:38:ae:93:2e:6e:b7:63:de:c4:d0:1a:
2f:8e:94:56:df:0f:45:fc:f1:40:9b:c6:7b:42:ee:d9:24:10:
2f:11:98:1d:27:2c:b6:a3:09:6e:bf:81:ba:0b:12:a7:9a:8f:
ef:3e:8f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:38:01 2026 by rpki-client