
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft
File: ZSimFFlZnAYBl-tZqfx45mWEl1U.mft (raw, json)
Hash identifier: 6CI5QMpAcJGfcsQE5ejmzF6NGwyhzkiO7wTWBQa8GJs=
Subject key identifier: 65:98:68:76:A2:92:76:75:C3:67:5E:53:BE:50:AC:A3:7D:BF:E9:B1
Authority key identifier: 65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55
Certificate issuer: /CN=A91BD6D4/serialNumber=6528A61459599C060197EB59A9FC78E665849755
Certificate serial: 0127
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft
Manifest number: 0124
Signing time: Thu 19 Feb 2026 04:05:19 +0000
Manifest this update: Thu 19 Feb 2026 04:05:19 +0000
Manifest next update: Thu 26 Feb 2026 04:05:19 +0000
Files and hashes: 1: ZSimFFlZnAYBl-tZqfx45mWEl1U.crl (hash: 3UuDtySWfMTGEbXMhtt2R52QhkBZWh+cWuzLi2sXCTI=)
2: 25414F2653C111EFAFCEBF4BC4F9AE02.roa (hash: 5PwwEtr0WdaGFqWetfTa+iIVtcVhNqtyf5KVj5gOAK4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl
rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD6D4, serialNumber=6528A61459599C060197EB59A9FC78E665849755
Validity
Not Before: Feb 19 04:05:19 2026 GMT
Not After : Feb 26 04:05:19 2026 GMT
Subject: CN=69968bff-7617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:68:62:fc:f6:6b:0b:b1:fe:52:70:d4:2a:
96:ff:83:1b:e8:39:fc:82:87:2f:d7:49:b8:87:86:
60:51:8d:0b:12:2a:53:e7:a3:35:0e:db:d6:4a:ea:
23:98:24:c0:70:d1:8d:f1:9e:25:58:e3:f7:84:59:
61:67:86:45:cf:3d:5f:bf:a5:ee:72:a5:24:4f:d7:
dd:13:0e:ef:22:f8:f0:85:97:30:d0:06:06:ac:f7:
5f:bc:41:f2:d2:89:15:25:65:b9:a4:a4:9e:87:15:
3d:4e:93:35:cc:09:49:a8:c8:9c:36:28:39:3e:74:
a8:ce:fa:f4:0d:17:a8:e8:3c:4e:ab:4b:61:39:8d:
67:36:e5:83:ae:24:d8:06:44:ad:d3:3d:31:34:98:
68:75:20:cc:fe:aa:cd:a3:c2:c8:40:3b:3a:8d:4b:
c4:23:86:6b:c4:ac:27:88:4f:eb:87:00:aa:9c:38:
c1:e5:ca:ef:06:02:01:ac:d0:25:38:28:e1:4a:ed:
f4:aa:93:42:1b:ae:5a:5c:e8:63:f3:5d:78:0e:c3:
7b:a0:40:a9:2f:b3:79:23:50:fe:3a:9c:2b:3a:d3:
95:28:33:41:89:28:5c:0b:f8:81:d3:b6:be:ad:66:
25:b0:c5:c9:63:99:88:b1:31:55:c3:9f:c7:04:85:
b2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:98:68:76:A2:92:76:75:C3:67:5E:53:BE:50:AC:A3:7D:BF:E9:B1
X509v3 Authority Key Identifier:
keyid:65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:b7:da:57:36:25:a8:e3:d4:28:6a:fa:28:68:a7:70:de:3a:
5d:9f:8e:b4:1d:44:e0:ad:50:cd:fc:42:88:06:f5:e0:ac:b9:
22:92:c4:01:03:fb:f1:60:3b:2c:cc:55:cb:56:01:f9:d6:df:
a8:b8:5e:c2:1a:c3:f2:b4:de:4c:06:5a:a6:92:52:63:1e:8b:
02:5e:f3:cb:19:b5:8e:38:f1:98:5a:40:f7:49:08:01:81:1a:
1a:e0:3f:d7:1a:f0:b5:12:7b:f1:d2:74:56:58:2d:4d:69:0d:
87:ec:46:88:66:4e:e9:ac:a8:d3:b3:d6:9c:b2:15:0f:52:83:
7c:5e:14:aa:df:1f:7d:fa:9b:48:02:c6:f0:7c:81:3d:ea:a3:
85:f0:30:0e:48:fc:e8:f6:c6:fa:ea:6c:a8:f3:de:32:42:bf:
82:cd:05:5a:0f:03:f0:5c:2d:d1:b2:b5:6b:aa:a8:1c:d9:77:
5a:15:6d:5b:d1:9e:01:d6:0a:c8:a9:01:da:83:48:38:d4:a5:
e8:19:92:2f:6c:d5:4d:f3:9d:0e:da:57:30:81:b3:51:fb:17:
34:98:4f:75:f0:7b:d4:11:1a:35:43:05:82:c1:5b:0d:69:5d:
97:8d:e7:22:bb:a2:f2:fa:2d:7d:26:bc:65:f4:00:7e:ce:49:
da:73:75:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkQ2RDQxMTAvBgNVBAUTKDY1MjhBNjE0NTk1OTlDMDYwMTk3RUI1OUE5RkM3OEU2
NjU4NDk3NTUwHhcNMjYwMjE5MDQwNTE5WhcNMjYwMjI2MDQwNTE5WjAYMRYwFAYD
VQQDDA02OTk2OGJmZi03NjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu+poYvz2awux/lJw1CqW/4Mb6Dn8gocv10m4h4ZgUY0LEipT56M1DtvWSuoj
mCTAcNGN8Z4lWOP3hFlhZ4ZFzz1fv6XucqUkT9fdEw7vIvjwhZcw0AYGrPdfvEHy
0okVJWW5pKSehxU9TpM1zAlJqMicNig5PnSozvr0DReo6DxOq0thOY1nNuWDriTY
BkSt0z0xNJhodSDM/qrNo8LIQDs6jUvEI4ZrxKwniE/rhwCqnDjB5crvBgIBrNAl
OCjhSu30qpNCG65aXOhj8114DsN7oECpL7N5I1D+OpwrOtOVKDNBiShcC/iB07a+
rWYlsMXJY5mIsTFVw5/HBIWyaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWYaHai
knZ1w2deU75QrKN9v+mxMB8GA1UdIwQYMBaAFGUophRZWZwGAZfrWan8eOZlhJdV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDZENC9CMzQxRTAzMDUz
OEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5BWUJsLXRacWZ4NDVtV0Vs
MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pTaW1GRmxabkFZQmwtdFpxZng0NW1XRWwxVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RDZENC9CMzQxRTAzMDUzOEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5B
WUJsLXRacWZ4NDVtV0VsMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAWt9pXNiWo49QoavooaKdw3jpdn460HUTgrVDN/EKIBvXgrLkiksQB
A/vxYDsszFXLVgH51t+ouF7CGsPytN5MBlqmklJjHosCXvPLGbWOOPGYWkD3SQgB
gRoa4D/XGvC1Envx0nRWWC1NaQ2H7EaIZk7prKjTs9acshUPUoN8XhSq3x99+ptI
AsbwfIE96qOF8DAOSPzo9sb66myo894yQr+CzQVaDwPwXC3RsrVrqqgc2XdaFW1b
0Z4B1grIqQHag0g41KXoGZIvbNVN850O2lcwgbNR+xc0mE918HvUERo1QwWCwVsN
aV2Xjeciu6Ly+i19Jrxl9AB+zknac3Uv
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:57 2026 by rpki-client