
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
File: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json)
Hash identifier: 8Oj1jOOK/hbQT+Fjjo8FmxvYNg+SonsBPhtUhJ0ceeM=
Subject key identifier: D4:70:11:2C:22:88:7B:2C:B0:4C:03:A2:5A:83:3F:1C:81:4D:05:40
Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
Manifest number: D5
Signing time: Thu 19 Feb 2026 05:14:48 +0000
Manifest this update: Thu 19 Feb 2026 05:14:48 +0000
Manifest next update: Thu 26 Feb 2026 05:14:48 +0000
Files and hashes: 1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: o27Rh6jnGo1BI4Wbj7Zo55OoxkzHBsPHkPvoqQtdORk=)
2: 48243250E78D11EF98760355C4F9AE02.roa (hash: H/VqLJG3It+odLKG96H1sbVkDmzdKmTeoPCyOU9UZ8o=)
3: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: ur0Y19RBZlSTMz351Bt1h0UOu7/4H8KcC7lP/9sLDBM=)
4: A1F7F22ECEF211F09F0B2645C4F9AE02.roa (hash: qELOCsisC5h80weRL5N25yw+GcjDtQKTB0QyBuh6P1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:14:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Validity
Not Before: Feb 19 05:14:48 2026 GMT
Not After : Feb 26 05:14:48 2026 GMT
Subject: CN=69969c48-9970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a4:e9:e2:78:a3:af:e4:7f:2f:d7:bf:25:5c:
c9:7a:52:ca:17:1e:a9:b2:ff:9b:10:f0:27:2f:4f:
e8:7d:0f:84:57:6a:b0:33:c8:ed:ef:84:2b:f5:07:
e9:47:b5:67:4a:b4:13:2e:b4:1c:5e:95:dc:e3:65:
6a:3c:0b:81:25:58:aa:34:87:bc:84:e2:1f:ac:3c:
5b:fe:9e:73:a1:66:bd:63:52:1f:4c:ea:75:b6:33:
03:65:b1:86:b2:08:a9:93:cd:56:94:90:fc:27:0c:
5a:5d:32:b9:e7:31:be:34:a9:9c:0e:af:23:da:41:
51:e0:e1:a6:19:5e:7f:99:3d:9f:6c:ae:05:e8:01:
3c:c3:cc:ac:03:94:3b:66:ea:ae:58:e9:e9:bf:52:
fb:45:35:86:b9:c5:53:2a:c3:1a:23:d0:6c:d2:d3:
ce:dc:ad:21:a1:4b:62:1d:21:77:d9:9c:f8:5d:e3:
cd:0f:e5:f2:16:18:ff:0c:d6:a7:5d:06:33:f5:6c:
40:7e:3a:b1:df:68:24:ca:8c:61:69:88:e6:3e:9f:
fb:a1:41:ec:fc:76:04:6a:61:20:70:eb:45:8c:f7:
47:35:ab:ac:80:35:99:21:00:bd:60:d7:ba:01:f4:
d9:84:fa:51:f5:5e:f7:72:42:ab:bf:cf:b9:97:1c:
bc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:70:11:2C:22:88:7B:2C:B0:4C:03:A2:5A:83:3F:1C:81:4D:05:40
X509v3 Authority Key Identifier:
keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4a:df:d9:f4:eb:64:e4:5e:a9:25:e7:0f:77:af:68:02:a8:
f9:71:90:83:a3:35:b6:d4:08:1a:8b:63:b6:dc:6a:1e:5e:a0:
9f:92:29:ff:fa:3c:ec:aa:2c:e2:14:6a:71:14:c9:11:0d:08:
49:9c:a9:61:21:a7:af:19:c8:47:9c:56:d9:e4:a2:c7:9a:3e:
b5:fb:32:66:18:98:d8:32:46:e7:be:37:82:c3:a8:cf:9f:d2:
1d:de:ae:c9:7e:6c:c8:e5:61:1a:81:5a:f7:27:88:31:40:cf:
0a:a4:d2:f6:0b:0a:bc:49:5e:cf:cb:9e:43:85:41:f6:78:18:
fc:8f:fa:6e:16:df:c0:74:79:01:92:1d:41:01:53:c4:90:67:
fd:f8:a9:90:b8:ab:7d:cc:54:3f:bb:84:c4:1f:00:6a:13:8a:
be:77:47:42:1b:cb:e7:f0:8f:a5:6c:47:c6:0e:c2:c3:31:eb:
f4:40:67:1b:90:39:72:c0:b3:38:d8:15:38:5e:d5:5c:c3:3d:
d7:33:c3:ae:65:a7:f5:c3:ac:8e:9f:45:95:20:cd:7c:83:c0:
a3:14:11:ab:13:ef:5a:49:8c:1f:73:aa:5e:13:b7:aa:2d:7c:
6b:ad:e9:21:42:28:90:c0:b3:16:0a:ed:c2:e6:5b:00:a1:56:
8b:ed:88:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:12:42 2026 by rpki-client