
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft
File: z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft (raw, json)
Hash identifier: JGhjCcTQfPojNaBV5OSrD+G7bs82xtfWjY2z13nXOL0=
Subject key identifier: E3:A3:7F:28:F2:0C:D0:6C:BB:A8:22:06:13:3A:0D:6F:D6:67:E4:82
Authority key identifier: CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21
Certificate issuer: /CN=A91E7ED9/serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921
Certificate serial: 0899
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft
Manifest number: 0893
Signing time: Wed 18 Feb 2026 20:01:08 +0000
Manifest this update: Wed 18 Feb 2026 20:01:08 +0000
Manifest next update: Wed 25 Feb 2026 20:01:08 +0000
Files and hashes: 1: z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl (hash: f4D2BaZdaKKlcYXO14T9GMcOcd5k5t7KsjSV76GD6u8=)
2: DE349762DBA311EA8DE35866C4F9AE02.roa (hash: W9BGV+7n/b6h+ZEgu/zCV5dkMkakdYDRjim1ueZv/vs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl
rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2201 (0x899)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7ED9, serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921
Validity
Not Before: Feb 18 20:01:08 2026 GMT
Not After : Feb 25 20:01:08 2026 GMT
Subject: CN=69961a84-119d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5d:d3:ba:23:9a:f8:89:df:05:f6:65:2b:62:
ae:33:c9:c2:1d:87:e4:f2:86:41:00:8c:54:82:37:
bc:50:b3:0c:91:7b:5f:86:0b:8f:a0:3c:66:3a:6b:
a6:d6:9d:d0:59:ba:0f:bd:61:d5:7f:c3:90:9d:08:
a9:d7:3f:41:ee:01:33:77:62:f5:a2:c3:ef:67:4f:
cb:9d:11:7f:a5:30:11:c1:a6:24:52:4c:d1:f1:5d:
e9:0f:d5:9e:7f:61:a5:fa:d5:a7:1a:8c:6a:4d:c4:
b4:be:1b:d3:31:8f:83:a9:f0:2f:36:b3:07:04:d4:
8b:0d:8c:f8:d0:f5:54:56:d1:e4:6c:15:05:95:84:
b7:5f:00:0a:54:5a:17:a4:1e:dc:b6:16:6b:fc:4d:
3b:87:f5:a7:ce:ce:2b:fd:c0:e2:21:a3:f2:50:f5:
d9:bd:2d:8b:25:05:e6:fe:6d:26:27:39:ee:25:84:
5a:f1:e9:2f:8d:c4:8a:d4:ef:a3:bf:4d:d5:0f:7c:
c4:33:20:fd:8c:00:e5:0c:41:a9:d0:0e:46:88:3c:
19:e6:35:c4:52:f4:d5:e0:5b:c4:e9:4d:ff:51:e5:
3f:71:12:67:f2:82:80:3e:7c:59:46:90:cb:64:ff:
8c:7f:56:0e:cb:4b:82:73:c8:87:4b:dc:a0:d8:cd:
9b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A3:7F:28:F2:0C:D0:6C:BB:A8:22:06:13:3A:0D:6F:D6:67:E4:82
X509v3 Authority Key Identifier:
keyid:CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:af:c9:0b:38:f0:7f:c3:4d:f2:6b:62:6d:09:2f:c7:34:5f:
1b:47:db:21:75:d8:bf:e1:dd:7c:32:92:be:e8:7b:b6:82:66:
0b:87:9a:e9:59:28:f7:2d:19:ae:22:3a:f7:5e:2e:6c:02:81:
c7:64:8f:0a:ac:ae:ee:0f:75:04:4f:1f:b8:40:b2:3c:87:07:
5f:ca:07:5f:2b:18:aa:48:ee:58:44:bf:26:35:e2:9e:96:cb:
ce:5a:d1:ea:7f:ef:3d:54:f9:55:43:7e:1e:35:1f:8c:8f:3b:
35:f6:94:46:fe:41:d3:c6:c4:35:68:79:48:9e:37:75:51:17:
8d:59:90:15:a7:ac:ba:2f:25:f0:42:30:2e:97:91:1e:e0:86:
4a:19:3a:be:f6:d4:ef:1c:44:63:40:65:18:99:78:63:99:29:
89:27:b2:cc:f4:98:15:d2:64:b4:a9:a0:4f:9c:cd:ce:82:2e:
4f:87:de:00:7b:b7:be:a7:60:ed:04:8e:c0:49:ef:b1:de:83:
e4:81:02:f5:6f:f7:b0:a8:40:b5:8e:76:88:c9:4a:ae:da:dc:
04:1a:27:12:46:61:75:8c:32:c0:45:b7:62:a5:aa:42:a3:18:
ab:65:81:57:33:c7:40:9e:62:cd:eb:3f:2f:cb:23:a1:52:c7:
ec:8f:0d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:41 2026 by rpki-client