
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
File: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft (raw, json)
Hash identifier: GVRQGIvz2QDk3LFJNWzZKSaJJCWfgJucebpjjqiuSHk=
Subject key identifier: D4:31:E6:36:60:2A:2E:28:89:FC:30:14:79:5F:AD:F6:39:64:33:BE
Authority key identifier: 33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
Certificate issuer: /CN=A9171A59/serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
Certificate serial: 0538
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
Manifest number: 0533
Signing time: Wed 18 Feb 2026 22:49:14 +0000
Manifest this update: Wed 18 Feb 2026 22:49:13 +0000
Manifest next update: Wed 25 Feb 2026 22:49:13 +0000
Files and hashes: 1: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl (hash: BukHXkShs5c/TkA9v/3DSKFGXwRqgKb03o69LBlnKNk=)
2: ABD9CB4630C711ECA2491515C4F9AE02.roa (hash: CoT7676o1FhYn/hTok256b21HFRTMynmtKsMLIXyZyA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl
rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 22:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1336 (0x538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171A59, serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
Validity
Not Before: Feb 18 22:49:13 2026 GMT
Not After : Feb 25 22:49:13 2026 GMT
Subject: CN=699641ea-1e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:6c:ba:91:7b:88:e1:c1:d2:9e:65:12:a9:
fe:c1:c8:76:16:5e:b9:73:f9:c5:3f:f7:12:db:f8:
ae:a4:60:91:cb:a6:da:1a:a3:9d:52:a1:44:20:01:
68:d9:72:8c:d5:87:1e:75:3f:51:3f:b9:e7:16:61:
21:6a:b4:23:21:c8:99:0a:76:aa:51:be:b8:56:ed:
fd:ef:8c:82:f5:47:10:29:c2:26:0b:5b:38:9b:a2:
82:b4:e1:e1:d4:fe:0d:21:08:7a:01:3b:85:71:b7:
6a:17:ed:bb:08:b4:05:10:aa:1d:d8:5a:c3:d8:4d:
b7:f6:00:bd:b4:bb:3a:45:ff:6d:18:e9:d9:95:4c:
c4:3e:d2:11:2f:87:74:87:21:11:45:a3:6c:29:3e:
50:29:e9:01:16:32:49:05:f9:c2:ea:c5:8d:03:d0:
ad:f4:83:0d:68:27:c6:c2:b8:dd:0c:dd:71:7b:36:
41:4b:af:2e:74:3e:ee:3d:e4:f2:54:32:2f:0d:7c:
e0:9c:16:a3:09:33:cb:d4:bd:f6:09:3b:6c:96:85:
3b:d4:db:d7:82:75:f7:e7:50:ec:5e:d4:99:76:34:
1e:30:67:58:c8:50:f8:d0:2a:92:9a:2f:bc:24:20:
fa:65:cc:6b:cc:8f:03:0b:2b:7a:3f:33:b4:0f:0a:
ca:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:31:E6:36:60:2A:2E:28:89:FC:30:14:79:5F:AD:F6:39:64:33:BE
X509v3 Authority Key Identifier:
keyid:33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:5d:e0:96:f7:47:3f:7e:d9:fb:10:84:58:20:24:1e:67:93:
8c:65:0f:71:2d:1e:ad:ae:ad:13:69:4e:92:28:e9:5d:83:0b:
d4:4d:73:e0:13:5b:e3:38:3a:87:2e:44:09:74:2b:d1:48:b0:
bc:00:ab:89:61:68:53:e4:7b:1d:5f:87:2e:df:1e:5e:4d:38:
b6:5c:ae:80:ca:2f:82:2e:0f:f5:a7:b6:b7:16:82:a8:6c:a2:
4d:2f:00:4e:1e:13:d4:b4:7a:16:e9:04:65:3c:ba:52:2f:87:
f0:f5:e2:53:c7:ab:3c:fd:c4:ae:38:37:93:c3:a0:28:15:9e:
df:e5:2f:3a:28:28:fb:f1:65:3c:51:ea:72:90:af:b3:62:6a:
8c:64:30:39:7c:0b:66:9e:95:15:76:db:8d:54:8b:7d:c5:fd:
1e:7c:76:02:10:0b:35:88:e5:db:92:f4:35:77:92:3f:ba:69:
d0:75:8e:f7:5f:30:24:89:ec:1f:5d:02:e5:14:12:1e:10:dc:
c9:30:74:4e:60:8f:a7:60:8e:0c:eb:56:50:b5:39:54:89:38:
c1:11:ca:e3:d4:78:ea:00:25:4d:2e:a4:dc:7f:8d:56:6e:fa:
c5:06:15:9e:55:62:6b:2e:60:bf:70:e7:e8:a2:3e:25:e0:43:
a0:71:b3:e4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzFBNTkxMTAvBgNVBAUTKDMzM0VDNTAzMDE0RDA2NzRBRjE2NzQxOTk0MTBGOUIw
OTFCOEZCOTQwHhcNMjYwMjE4MjI0OTEzWhcNMjYwMjI1MjI0OTEzWjAYMRYwFAYD
VQQDDA02OTk2NDFlYS0xZTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs6JsupF7iOHB0p5lEqn+wch2Fl65c/nFP/cS2/iupGCRy6baGqOdUqFEIAFo
2XKM1YcedT9RP7nnFmEharQjIciZCnaqUb64Vu3974yC9UcQKcImC1s4m6KCtOHh
1P4NIQh6ATuFcbdqF+27CLQFEKod2FrD2E239gC9tLs6Rf9tGOnZlUzEPtIRL4d0
hyERRaNsKT5QKekBFjJJBfnC6sWNA9Ct9IMNaCfGwrjdDN1xezZBS68udD7uPeTy
VDIvDXzgnBajCTPL1L32CTtsloU71NvXgnX351DsXtSZdjQeMGdYyFD40CqSmi+8
JCD6ZcxrzI8DCyt6PzO0DwrKuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQx5jZg
Ki4oifwwFHlfrfY5ZDO+MB8GA1UdIwQYMBaAFDM+xQMBTQZ0rxZ0GZQQ+bCRuPuU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUE1OS84QUI5MzNFQTMw
QzUxMUVDOEE2N0FBN0NDNEY5QUUwMi9NejdGQXdGTkJuU3ZGblFabEJENXNKRzQt
NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL016N0ZBd0ZOQm5TdkZuUVpsQkQ1c0pHNC01US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MUE1OS84QUI5MzNFQTMwQzUxMUVDOEE2N0FBN0NDNEY5QUUwMi9NejdGQXdGTkJu
U3ZGblFabEJENXNKRzQtNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQATXeCW90c/ftn7EIRYICQeZ5OMZQ9xLR6trq0TaU6SKOldgwvUTXPg
E1vjODqHLkQJdCvRSLC8AKuJYWhT5HsdX4cu3x5eTTi2XK6Ayi+CLg/1p7a3FoKo
bKJNLwBOHhPUtHoW6QRlPLpSL4fw9eJTx6s8/cSuODeTw6AoFZ7f5S86KCj78WU8
UepykK+zYmqMZDA5fAtmnpUVdtuNVIt9xf0efHYCEAs1iOXbkvQ1d5I/umnQdY73
XzAkiewfXQLlFBIeENzJMHROYI+nYI4M61ZQtTlUiTjBEcrj1HjqACVNLqTcf41W
bvrFBhWeVWJrLmC/cOfooj4l4EOgcbPk
-----END CERTIFICATE-----
Generated at Thu Feb 19 18:18:38 2026 by rpki-client