
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft
File: z4nWqxHn1Hqhe0MJxypytxy6R64.mft (raw, json)
Hash identifier: yFiPyir8qZV5plxNXbap+TijvUtLEtwKAz4tmhPtbd8=
Subject key identifier: 3A:8B:46:38:A6:DB:29:68:C7:4F:33:90:E7:88:23:F2:5F:72:D5:1A
Authority key identifier: CF:89:D6:AB:11:E7:D4:7A:A1:7B:43:09:C7:2A:72:B7:1C:BA:47:AE
Certificate issuer: /CN=A91E4D9B/serialNumber=CF89D6AB11E7D47AA17B4309C72A72B71CBA47AE
Certificate serial: 08F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft
Manifest number: 08EA
Signing time: Wed 18 Feb 2026 19:53:33 +0000
Manifest this update: Wed 18 Feb 2026 19:53:33 +0000
Manifest next update: Wed 25 Feb 2026 19:53:33 +0000
Files and hashes: 1: z4nWqxHn1Hqhe0MJxypytxy6R64.crl (hash: Dclk1CuFDtnbqVwwSQ1ktfVVK+mK5OImI1qcxbYtvGQ=)
2: CCF7B8AA22B811ECAD21FB20C4F9AE02.roa (hash: G2foGf7uCgcEw+7JgUphjmWyB8lqa7VFa71ApGd5KNc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.crl
rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:53:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2293 (0x8f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4D9B, serialNumber=CF89D6AB11E7D47AA17B4309C72A72B71CBA47AE
Validity
Not Before: Feb 18 19:53:33 2026 GMT
Not After : Feb 25 19:53:33 2026 GMT
Subject: CN=699618bd-1863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b1:6b:e9:ed:11:95:1f:8e:8e:58:c2:f5:18:
d1:8d:9c:d1:a1:92:87:e5:09:13:dc:9c:ba:32:21:
e7:ab:f4:75:78:f9:79:c8:47:56:37:e4:14:19:7c:
03:e7:10:c3:e7:d8:9e:e3:14:5c:77:93:af:86:d0:
32:07:b8:99:bf:fe:6b:ba:45:67:aa:39:fb:9c:8a:
e3:10:0e:ff:65:10:65:e8:b4:16:24:00:a4:d2:2f:
22:2b:e1:83:a1:1d:af:37:9f:76:31:8b:e2:36:1f:
a5:9d:7e:cc:ad:b1:9f:9a:65:95:01:66:21:a7:9e:
01:be:b2:e7:6e:9d:14:c9:3e:f0:1c:3c:45:c4:f3:
5c:5f:f9:cb:68:e8:05:6f:69:a0:cd:b1:ac:fa:a8:
c2:95:6c:ae:ac:4e:03:44:04:84:f3:7c:97:20:1e:
a5:6e:9a:90:2a:f5:b5:cf:30:c4:99:6e:20:cd:1c:
b8:b5:8c:96:98:6f:a2:2d:79:6d:ad:c0:d6:d0:f6:
fd:1c:ca:33:d1:19:c4:bc:b0:67:1b:39:95:6a:ed:
5a:b1:18:7e:70:43:90:10:51:9c:b7:8c:22:39:34:
ef:ba:f1:15:fa:b3:9d:14:4d:61:18:91:15:a5:c5:
43:65:61:4c:7f:fb:ce:11:d1:d1:d9:fd:ac:e7:35:
c2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8B:46:38:A6:DB:29:68:C7:4F:33:90:E7:88:23:F2:5F:72:D5:1A
X509v3 Authority Key Identifier:
keyid:CF:89:D6:AB:11:E7:D4:7A:A1:7B:43:09:C7:2A:72:B7:1C:BA:47:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:58:3d:c9:87:80:32:48:bf:e2:90:81:67:6b:d6:be:01:5a:
ab:1e:7c:a6:d6:d1:85:32:52:50:e6:51:4a:14:08:f5:0b:f7:
51:98:40:ea:f7:f1:82:50:22:c9:23:67:53:f7:6b:3e:a0:94:
d9:e9:cf:8c:08:55:ea:c1:f4:6c:ad:92:17:2d:6d:1d:16:06:
c2:2f:01:55:27:74:be:d2:5f:b6:03:d9:ee:36:b5:f7:fb:9b:
5a:d8:c2:3a:62:45:37:14:7b:1a:07:59:c1:77:65:ab:95:1d:
79:06:0c:1c:3b:d2:41:82:c0:38:5c:16:5f:dd:4c:4f:d8:00:
1b:73:85:31:55:43:d4:e8:6e:6d:70:33:fd:c7:63:25:7d:44:
1c:ce:88:94:8e:d0:75:fa:a4:e8:e7:46:f0:06:fb:88:2b:11:
90:da:e2:87:1d:00:b5:c0:62:ba:4d:76:82:3d:58:87:3f:8e:
6e:bf:29:0b:2e:29:90:25:63:69:a4:0a:b0:98:7e:76:f5:41:
59:75:a8:b8:e1:f0:ef:e7:c0:6b:dd:ae:64:7b:f0:ec:23:22:
8c:22:bf:58:73:fd:23:a1:66:99:09:06:2e:b8:00:ac:7a:46:
56:9e:bc:17:e8:ac:2c:fd:ec:9f:ca:86:67:03:58:a5:06:24:
24:d3:00:51
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTREOUIxMTAvBgNVBAUTKENGODlENkFCMTFFN0Q0N0FBMTdCNDMwOUM3MkE3MkI3
MUNCQTQ3QUUwHhcNMjYwMjE4MTk1MzMzWhcNMjYwMjI1MTk1MzMzWjAYMRYwFAYD
VQQDDA02OTk2MThiZC0xODYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi7Fr6e0RlR+OjljC9RjRjZzRoZKH5QkT3Jy6MiHnq/R1ePl5yEdWN+QUGXwD
5xDD59ie4xRcd5OvhtAyB7iZv/5rukVnqjn7nIrjEA7/ZRBl6LQWJACk0i8iK+GD
oR2vN592MYviNh+lnX7MrbGfmmWVAWYhp54BvrLnbp0UyT7wHDxFxPNcX/nLaOgF
b2mgzbGs+qjClWyurE4DRASE83yXIB6lbpqQKvW1zzDEmW4gzRy4tYyWmG+iLXlt
rcDW0Pb9HMoz0RnEvLBnGzmVau1asRh+cEOQEFGct4wiOTTvuvEV+rOdFE1hGJEV
pcVDZWFMf/vOEdHR2f2s5zXCsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqLRjim
2ylox08zkOeII/JfctUaMB8GA1UdIwQYMBaAFM+J1qsR59R6oXtDCccqcrccukeu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEQ5Qi9GNUJBQTNEOEM4
MDAxMUVBODdENDRBNzhDNEY5QUUwMi96NG5XcXhIbjFIcWhlME1KeHlweXR4eTZS
NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3o0bldxeEhuMUhxaGUwTUp4eXB5dHh5NlI2NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NEQ5Qi9GNUJBQTNEOEM4MDAxMUVBODdENDRBNzhDNEY5QUUwMi96NG5XcXhIbjFI
cWhlME1KeHlweXR4eTZSNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCqWD3Jh4AySL/ikIFna9a+AVqrHnym1tGFMlJQ5lFKFAj1C/dRmEDq
9/GCUCLJI2dT92s+oJTZ6c+MCFXqwfRsrZIXLW0dFgbCLwFVJ3S+0l+2A9nuNrX3
+5ta2MI6YkU3FHsaB1nBd2WrlR15BgwcO9JBgsA4XBZf3UxP2AAbc4UxVUPU6G5t
cDP9x2MlfUQczoiUjtB1+qTo50bwBvuIKxGQ2uKHHQC1wGK6TXaCPViHP45uvykL
LimQJWNppAqwmH529UFZdai44fDv58Br3a5ke/DsIyKMIr9Yc/0joWaZCQYuuACs
ekZWnrwX6Kws/eyfyoZnA1ilBiQk0wBR
-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:10 2026 by rpki-client