
$ rpki-client -vvf rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft
File: TzFe71rLLtp6NynnnhNZkMAecHQ.mft (raw, json)
Hash identifier: SrDYZ9H0fSCDRYO7D2sfxguCqrnR5RkVpoC/MZ+OT0Y=
Subject key identifier: ED:40:09:F4:3E:82:00:01:66:25:06:C7:32:1E:10:9D:30:D3:2A:50
Authority key identifier: 4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74
Certificate issuer: /CN=A91957C9/serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074
Certificate serial: 0E9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft
Manifest number: 0E92
Signing time: Wed 18 Feb 2026 17:25:26 +0000
Manifest this update: Wed 18 Feb 2026 17:25:25 +0000
Manifest next update: Wed 25 Feb 2026 17:25:25 +0000
Files and hashes: 1: TzFe71rLLtp6NynnnhNZkMAecHQ.crl (hash: qglU01Iwe+Uvl6aTpCF2mfbz3khIKGbCYdogoUZAvKU=)
2: B55EC19EAC2B11E996F6E511C4F9AE02.roa (hash: Kmbnqjt+FsbQjmxP1orKor9zYnpCPWPxfhoKQqbWYu0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl
rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3742 (0xe9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91957C9, serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074
Validity
Not Before: Feb 18 17:25:25 2026 GMT
Not After : Feb 25 17:25:25 2026 GMT
Subject: CN=6995f606-5b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f6:68:14:70:a0:58:0e:8e:d7:dc:2a:0e:a9:
85:1c:c6:74:1c:fd:23:27:18:22:0e:43:0b:4e:9a:
21:f6:de:c4:4c:fc:e5:fa:2b:d4:5b:6e:05:20:d1:
2b:03:b7:14:8f:ca:21:59:8d:4d:f5:fa:11:5e:31:
70:99:28:72:37:00:d5:9f:ce:b8:42:60:0f:0f:d5:
7f:0b:5e:60:21:38:4b:65:14:75:2d:40:74:81:af:
2c:69:a3:73:54:c7:9f:f4:a0:eb:94:f5:dc:1b:62:
81:9b:3e:7a:b8:dc:f3:46:46:e9:c0:47:44:4b:9c:
2f:58:a5:d3:62:77:ee:e6:0c:13:00:71:9d:b0:b5:
12:8d:10:ab:5d:e5:2b:40:2f:f4:85:10:40:0b:c4:
6b:2a:8f:d4:3f:9a:64:b3:a9:a9:ff:fe:82:5e:01:
8c:56:5a:a1:6c:3d:fd:fd:54:bc:4f:07:96:ac:55:
89:01:9e:73:37:6c:67:fc:de:3c:69:07:7a:73:7d:
d6:5a:e4:ea:2c:03:b9:d9:52:3e:88:fe:f3:97:8d:
24:2a:b8:bb:4f:46:ac:e8:5f:40:c6:42:70:d0:db:
ec:0a:7f:37:aa:1a:b8:14:05:2d:61:71:16:b8:ae:
f5:a5:c2:52:a5:de:51:3c:f9:56:70:e4:93:a2:9d:
2c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:40:09:F4:3E:82:00:01:66:25:06:C7:32:1E:10:9D:30:D3:2A:50
X509v3 Authority Key Identifier:
keyid:4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:ab:d9:ff:de:5b:35:81:0d:fd:58:45:45:f7:08:71:87:88:
54:02:a1:14:96:1d:72:38:66:23:ed:2f:b4:03:a6:88:fc:56:
07:1a:f1:a7:45:c3:d1:20:d6:70:b3:29:31:ee:e6:81:88:d4:
9f:30:9d:a6:fc:38:2b:c7:7a:d9:8f:8b:f1:bc:af:6c:c3:78:
5d:30:c8:1c:e7:66:af:3b:e4:7b:5a:bb:f2:3f:b1:b5:0f:c4:
e1:54:9d:c8:c3:ea:a6:d6:69:f2:da:91:6e:47:94:14:4d:9f:
49:4d:ff:52:74:01:a6:6e:61:52:af:5c:d0:64:3e:53:76:9c:
57:0a:2b:81:b5:0a:7e:ca:ef:e7:d2:95:3b:a7:d9:bf:b9:ac:
16:e7:61:98:31:f2:1b:13:fa:01:ef:60:af:d6:3c:7a:f6:fc:
04:1d:0d:da:fe:75:a9:c1:a4:40:a1:45:31:76:e6:db:49:0e:
51:0a:7a:1f:47:92:22:8e:00:0e:bd:44:f8:3b:47:5a:7d:5f:
26:b0:21:36:d8:04:4a:27:6e:3e:f5:33:0f:cc:30:9e:30:0c:
44:4f:7f:76:77:45:d7:80:e8:a6:e1:1c:19:21:54:60:88:29:
26:1f:3c:d9:b5:ea:33:76:45:4b:5a:40:f1:08:4d:74:9e:bb:
75:b3:38:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:12:29 2026 by rpki-client