
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
File: zNz_ISpraZpXC0qdF18WI3GDLKU.mft (raw, json)
Hash identifier: HHtSzrmc/WNlwh4FRavNYuEZ4BXj7jAYl8c6aZOKXso=
Subject key identifier: 11:D6:30:85:E3:59:2F:CB:71:AD:79:54:34:AC:CC:99:C3:96:12:4B
Authority key identifier: CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5
Certificate issuer: /CN=A91BF23F/serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5
Certificate serial: 012B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
Manifest number: 0128
Signing time: Thu 19 Feb 2026 04:03:36 +0000
Manifest this update: Thu 19 Feb 2026 04:03:35 +0000
Manifest next update: Thu 26 Feb 2026 04:03:35 +0000
Files and hashes: 1: zNz_ISpraZpXC0qdF18WI3GDLKU.crl (hash: MBXi72hmT8KKcuDcqHUnVjZ8tdfRddYBUYbGBcghqiA=)
2: 00606C184A3011EFBC542C18C4F9AE02.roa (hash: aOiSDYOcKoNPJK5dAvtJf70EvscXRCj0p7VI3j21/MI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl
rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299 (0x12b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF23F, serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5
Validity
Not Before: Feb 19 04:03:35 2026 GMT
Not After : Feb 26 04:03:35 2026 GMT
Subject: CN=69968b98-1136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:8e:83:1e:64:01:79:0e:a6:fd:cb:05:9b:
cb:9e:68:71:de:fa:9e:03:19:3f:3d:53:48:92:41:
49:77:e6:bd:f1:88:fa:38:fd:27:26:76:b0:b4:b4:
77:1a:22:bf:5c:4f:e6:71:5e:35:64:3d:60:b1:c6:
5b:55:13:fa:32:ee:31:98:7c:93:b6:6d:57:67:3c:
36:66:6e:3d:6c:9a:a8:51:e4:57:4f:49:e0:9f:c2:
f1:de:7d:a4:72:bb:69:19:ef:29:87:e2:9b:b5:75:
fc:41:35:40:43:78:2d:4f:eb:43:18:0e:b1:f5:76:
c1:76:1c:e4:a3:54:4f:bf:7a:47:2b:69:39:e6:69:
c9:15:9f:6a:b3:dd:95:fe:a6:96:d8:5c:6b:eb:a0:
9f:0d:5a:56:1c:27:96:ee:5e:31:f1:8c:29:61:77:
85:62:23:01:5f:4b:fc:d7:65:1e:da:82:03:63:9b:
9e:fd:6f:2d:b8:82:03:0f:4f:90:aa:34:eb:73:67:
36:7f:7f:05:98:e5:d3:ba:06:98:32:d3:02:a2:c4:
2b:ac:b5:42:9c:07:0f:3f:ff:41:14:69:f2:ba:f4:
00:1f:09:70:e5:d7:37:d2:70:04:4d:be:ad:9e:20:
1c:48:4d:2f:b4:b1:d5:7b:f6:d9:b4:9a:f3:78:7b:
9a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D6:30:85:E3:59:2F:CB:71:AD:79:54:34:AC:CC:99:C3:96:12:4B
X509v3 Authority Key Identifier:
keyid:CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:1a:92:7e:31:95:52:8f:c3:2b:6f:ec:7e:33:f4:4e:77:e9:
88:11:c8:3d:81:33:69:f1:2b:11:bb:a7:30:61:90:83:36:d8:
e3:74:6d:a2:83:5e:f0:7b:4f:ec:23:4d:ce:f6:90:64:66:39:
a8:cc:4a:9a:ea:c4:9a:ea:3a:8b:6a:95:05:e2:c7:ea:d2:72:
4c:3f:70:f8:6c:fc:83:dc:3d:3d:f4:9d:da:cb:30:b1:45:77:
36:a9:7c:c8:43:84:ba:b6:c8:d5:e0:95:87:1b:dd:5f:bd:d9:
54:b9:82:8a:47:3b:d9:9a:d4:36:3d:a5:a2:fe:d9:47:45:f7:
6a:37:dc:c9:84:43:79:db:d3:4e:1f:43:e0:e9:bd:33:e7:fd:
d8:65:b5:42:75:74:7a:83:9a:65:35:5a:9e:9a:43:25:46:23:
35:86:f3:95:ce:33:47:a5:a6:69:a8:80:dd:f5:e3:12:ad:e8:
d4:d0:99:23:ae:34:11:28:de:9e:20:e7:bf:ea:30:fb:0a:39:
d9:68:cf:7f:a7:18:6d:02:aa:23:d0:87:58:b2:a4:a4:ff:22:
42:70:93:e2:4f:54:6c:94:e5:a7:43:8d:4c:bc:d0:16:ac:6b:
72:ca:73:1f:eb:8d:c3:83:cc:e2:61:85:5e:8f:9f:69:62:ee:
3c:d9:b5:88
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYyM0YxMTAvBgNVBAUTKENDRENGRjIxMkE2QjY5OUE1NzBCNEE5RDE3NUYxNjIz
NzE4MzJDQTUwHhcNMjYwMjE5MDQwMzM1WhcNMjYwMjI2MDQwMzM1WjAYMRYwFAYD
VQQDDA02OTk2OGI5OC0xMTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy+iOgx5kAXkOpv3LBZvLnmhx3vqeAxk/PVNIkkFJd+a98Yj6OP0nJnawtLR3
GiK/XE/mcV41ZD1gscZbVRP6Mu4xmHyTtm1XZzw2Zm49bJqoUeRXT0ngn8Lx3n2k
crtpGe8ph+KbtXX8QTVAQ3gtT+tDGA6x9XbBdhzko1RPv3pHK2k55mnJFZ9qs92V
/qaW2Fxr66CfDVpWHCeW7l4x8YwpYXeFYiMBX0v812Ue2oIDY5ue/W8tuIIDD0+Q
qjTrc2c2f38FmOXTugaYMtMCosQrrLVCnAcPP/9BFGnyuvQAHwlw5dc30nAETb6t
niAcSE0vtLHVe/bZtJrzeHuabwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHWMIXj
WS/Lca15VDSszJnDlhJLMB8GA1UdIwQYMBaAFMzc/yEqa2maVwtKnRdfFiNxgyyl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjIzRi8zMzhCMkY0ODRB
MkYxMUVGQUU5NkM5MTVDNEY5QUUwMi96TnpfSVNwcmFacFhDMHFkRjE4V0kzR0RM
S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pOel9JU3ByYVpwWEMwcWRGMThXSTNHRExLVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjIzRi8zMzhCMkY0ODRBMkYxMUVGQUU5NkM5MTVDNEY5QUUwMi96TnpfSVNwcmFa
cFhDMHFkRjE4V0kzR0RMS1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC1GpJ+MZVSj8Mrb+x+M/ROd+mIEcg9gTNp8SsRu6cwYZCDNtjjdG2i
g17we0/sI03O9pBkZjmozEqa6sSa6jqLapUF4sfq0nJMP3D4bPyD3D099J3ayzCx
RXc2qXzIQ4S6tsjV4JWHG91fvdlUuYKKRzvZmtQ2PaWi/tlHRfdqN9zJhEN529NO
H0Pg6b0z5/3YZbVCdXR6g5plNVqemkMlRiM1hvOVzjNHpaZpqIDd9eMSrejU0Jkj
rjQRKN6eIOe/6jD7CjnZaM9/pxhtAqoj0IdYsqSk/yJCcJPiT1RslOWnQ41MvNAW
rGtyynMf643Dg8ziYYVej59pYu482bWI
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:41:46 2026 by rpki-client