
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft
File: tZsFZqgqmDvebfHF3kxYLJvKg5I.mft (raw, json)
Hash identifier: LHnafU+ielffTEf4lq2Xbdv8GYMpwAjLEc1wNJdkMMI=
Subject key identifier: 36:B7:9E:4B:93:C5:AB:D3:39:70:8A:D5:85:42:1B:D3:82:77:58:3E
Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92
Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392
Certificate serial: 0C83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft
Manifest number: 0C68
Signing time: Wed 18 Feb 2026 18:18:49 +0000
Manifest this update: Wed 18 Feb 2026 18:18:48 +0000
Manifest next update: Wed 25 Feb 2026 18:18:48 +0000
Files and hashes: 1: tZsFZqgqmDvebfHF3kxYLJvKg5I.crl (hash: zMxu1meaKfzaMpVSmQ4PhQ6Qo0Kepps8/Q74GXEKm9s=)
2: CB46AC50509111EF9E40402FC4F9AE02.roa (hash: Pb13ClG0OEF5MKijTI12l/DD4tvZZvcQ1xg8xBfz7A4=)
3: CFF8393A232C11F0B9CB2044C4F9AE02.roa (hash: YZv4QiX7IWi80YAKcDZDW6MOPXA5QzX/os4KNPASKDk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl
rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:18:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3203 (0xc83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C71E, serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392
Validity
Not Before: Feb 18 18:18:48 2026 GMT
Not After : Feb 25 18:18:48 2026 GMT
Subject: CN=69960288-e224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c2:55:26:bc:56:1d:e7:6b:23:f0:a4:98:32:
95:47:d3:70:41:cd:ac:f0:45:ea:c0:02:98:03:27:
4e:8e:1d:fc:99:d5:3c:b6:b1:bc:bd:9e:24:00:7e:
58:48:a3:27:12:c1:50:38:5e:99:37:7d:0f:2e:6f:
7c:8d:1a:1b:36:a4:03:2c:dc:73:36:52:86:b8:40:
c2:30:09:5e:dd:fa:9c:1a:24:68:0e:f5:72:a6:42:
b6:32:8c:57:96:97:66:db:18:93:12:84:91:5e:eb:
53:02:5b:d2:5f:85:0a:85:ab:49:76:cf:ee:c4:44:
79:7f:f8:b8:9f:c8:f7:a8:b9:4f:b4:08:d1:28:c2:
8a:90:b9:e7:9f:12:f1:0a:60:bc:ed:ee:79:fc:27:
a8:2b:22:25:a4:56:3c:8b:ef:6e:4c:bc:ef:68:8c:
e9:a7:2f:bf:20:24:c0:69:a0:03:43:bc:04:95:a6:
ab:bd:27:aa:73:98:7e:b4:de:82:b7:b7:c1:72:24:
bf:6a:59:38:64:76:74:cd:47:ad:e5:05:d0:95:19:
82:52:36:9a:30:67:ac:fb:ee:83:b3:50:e0:ba:4b:
23:a8:4b:85:88:df:50:6e:ad:ef:17:ed:f8:08:89:
7a:1f:07:74:89:47:4f:dc:42:07:cd:48:7c:c6:93:
15:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B7:9E:4B:93:C5:AB:D3:39:70:8A:D5:85:42:1B:D3:82:77:58:3E
X509v3 Authority Key Identifier:
keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:5d:db:af:eb:81:b3:73:44:60:f7:dc:fe:7d:eb:d2:0e:a1:
0d:ce:53:e5:ac:5c:df:36:a0:32:91:70:18:96:63:fb:65:f9:
67:7d:8e:9a:4a:ec:6b:96:9a:39:2e:86:ea:c8:54:aa:0e:fb:
88:b0:14:e8:99:95:07:1d:8e:b3:04:4b:68:8b:29:42:5a:7d:
9d:79:f9:11:b8:a9:4d:4d:4e:b3:36:97:4f:1a:ad:1e:63:99:
34:c6:8e:6d:19:a6:65:d6:fa:c3:28:8a:73:38:4d:04:9e:ab:
df:12:90:4e:06:49:9f:af:1d:58:13:81:6a:91:db:90:52:e7:
33:81:01:c4:82:f5:91:d6:b6:f3:6c:4b:ad:e0:2c:a6:4e:62:
05:93:ab:90:1a:af:c8:62:3e:86:ca:7c:3f:bc:4a:f3:0c:ba:
42:e5:86:16:43:60:a2:36:56:77:12:9e:a6:b3:8f:03:8d:84:
b3:a1:a5:29:20:6a:fb:c5:35:22:e4:41:4f:a6:ae:15:8a:28:
07:39:31:0e:49:ea:c2:6b:fd:ee:83:fe:df:c7:d8:1e:b8:76:
84:7a:f2:dc:66:80:7a:27:06:8c:16:c0:30:ef:bb:25:50:8f:
2b:24:62:00:01:fe:38:fb:4c:0f:b3:20:a8:6b:11:7b:5d:97:
f2:66:a9:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD
OUJDQTgzOTIwHhcNMjYwMjE4MTgxODQ4WhcNMjYwMjI1MTgxODQ4WjAYMRYwFAYD
VQQDDA02OTk2MDI4OC1lMjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0MJVJrxWHedrI/CkmDKVR9NwQc2s8EXqwAKYAydOjh38mdU8trG8vZ4kAH5Y
SKMnEsFQOF6ZN30PLm98jRobNqQDLNxzNlKGuEDCMAle3fqcGiRoDvVypkK2MoxX
lpdm2xiTEoSRXutTAlvSX4UKhatJds/uxER5f/i4n8j3qLlPtAjRKMKKkLnnnxLx
CmC87e55/CeoKyIlpFY8i+9uTLzvaIzppy+/ICTAaaADQ7wElaarvSeqc5h+tN6C
t7fBciS/alk4ZHZ0zUet5QXQlRmCUjaaMGes++6Ds1DguksjqEuFiN9Qbq3vF+34
CIl6Hwd0iUdP3EIHzUh8xpMVQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDa3nkuT
xavTOXCK1YVCG9OCd1g+MB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD
QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn
NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzcxRS9DNzhFNEE3MjFDQTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1E
dmViZkhGM2t4WUxKdktnNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCvXduv64Gzc0Rg99z+fevSDqENzlPlrFzfNqAykXAYlmP7ZflnfY6a
Suxrlpo5LobqyFSqDvuIsBTomZUHHY6zBEtoiylCWn2defkRuKlNTU6zNpdPGq0e
Y5k0xo5tGaZl1vrDKIpzOE0EnqvfEpBOBkmfrx1YE4FqkduQUuczgQHEgvWR1rbz
bEut4CymTmIFk6uQGq/IYj6Gynw/vErzDLpC5YYWQ2CiNlZ3Ep6ms48DjYSzoaUp
IGr7xTUi5EFPpq4ViigHOTEOSerCa/3ug/7fx9geuHaEevLcZoB6JwaMFsAw77sl
UI8rJGIAAf44+0wPsyCoaxF7XZfyZqlP
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:39:51 2026 by rpki-client