
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
File: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft (raw, json)
Hash identifier: GRkq7DY++j+amPUersMdlUM5cBmLhL2drSY06+o8oko=
Subject key identifier: 3D:F7:E0:02:8E:04:95:71:7F:03:B7:99:50:D2:02:FA:89:42:A5:EE
Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D
Certificate issuer: /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D
Certificate serial: 024A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
Manifest number: 023F
Signing time: Thu 19 Feb 2026 01:18:34 +0000
Manifest this update: Thu 19 Feb 2026 01:18:33 +0000
Manifest next update: Thu 26 Feb 2026 01:18:33 +0000
Files and hashes: 1: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl (hash: 2oWrUtROegkpdO4AsHPz9WtPdW1SmwX9eJWshyjDeNo=)
2: EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (hash: 5MB2PDcakDg/26VL0TUZlY6MMrD+mZ34XPyyIZou81c=)
3: F548379631A011EE9F9D0D4DC4F9AE02.roa (hash: VApl5gOnxtdCywBPMR0dXxKkqk3t+bnPo30E9g9b6bA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl
rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:18:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0FC6, serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D
Validity
Not Before: Feb 19 01:18:33 2026 GMT
Not After : Feb 26 01:18:33 2026 GMT
Subject: CN=699664e9-b772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:f0:3e:eb:4e:b8:c2:ff:8b:76:3e:cf:ac:
0b:8f:9f:68:ce:a1:82:77:2f:f3:f9:e7:b9:75:5e:
c8:c3:f8:ef:ad:da:45:d9:03:93:d6:77:4a:3f:29:
e2:9d:88:b9:9a:aa:07:31:75:be:19:83:ba:44:4f:
34:98:cb:e9:89:fa:6f:99:d7:9a:d9:80:e7:84:1f:
c1:39:ef:9a:8b:f6:eb:6c:4e:64:81:df:32:53:bc:
bc:dc:47:43:95:f8:b2:55:fe:85:19:3f:5f:9e:2f:
96:d2:ac:ea:7d:c3:d8:c6:60:f6:1e:1e:35:2f:08:
69:d1:86:46:fe:c9:dc:81:e0:3b:52:e2:b5:c2:f0:
97:a3:00:af:d8:8a:4f:bc:8a:07:75:74:f4:ce:e9:
04:6d:0f:11:02:e0:85:4c:1e:5d:19:99:76:71:72:
6e:3f:3e:8e:11:d6:c8:5c:f5:cd:53:12:b1:ea:db:
ad:2b:b8:be:43:0c:5e:94:a6:27:91:5c:13:ba:d0:
52:c5:d4:c0:00:d3:8a:72:9e:88:07:03:ba:bd:e5:
f3:af:03:5d:db:0f:04:00:8f:90:ec:30:a6:fe:25:
d4:b6:45:d2:cd:60:f1:14:32:28:80:28:41:ce:e7:
ae:6f:53:b0:a5:19:5a:99:26:d6:01:d8:be:4c:04:
8f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F7:E0:02:8E:04:95:71:7F:03:B7:99:50:D2:02:FA:89:42:A5:EE
X509v3 Authority Key Identifier:
keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8a:19:e4:a8:de:67:62:08:58:a2:76:7a:16:cf:08:83:6e:
63:83:82:2c:ac:31:3e:a4:af:2a:90:80:4f:e0:1a:a6:1f:4c:
f7:87:d1:11:48:58:6a:84:05:f3:a1:12:79:a5:17:7b:1b:30:
e6:42:5f:ce:98:36:a9:ae:a9:2a:0c:29:39:36:27:13:c4:47:
61:58:d0:da:c9:8e:de:f8:21:21:30:2e:e6:35:8d:6b:bb:9e:
20:f7:f8:ef:f5:60:7a:8e:75:c1:a2:c5:de:21:ef:76:1f:b9:
20:38:ae:2b:e5:ef:28:5f:f6:28:5e:65:14:52:98:10:98:d3:
d9:18:29:0d:a6:07:cc:1e:39:91:5f:26:4b:f7:5d:f0:00:82:
fd:48:e4:9b:6d:9a:d3:d6:aa:52:e5:ae:ae:b8:bc:27:ce:5f:
e1:b3:f0:a2:4b:de:10:67:09:44:aa:7d:26:02:27:ab:1f:bd:
c2:29:46:ee:53:c5:59:95:08:d0:28:7d:22:cb:cc:61:30:74:
1f:f3:9f:6a:13:01:be:9a:5d:2e:c2:15:18:53:6a:4e:1a:93:
c0:05:7d:80:e7:83:ee:86:3d:1d:b7:82:ac:39:88:c6:de:03:
92:d3:a9:26:13:a6:ea:83:ca:69:aa:65:af:6e:f5:bf:ad:b7:
2f:a4:4a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:28:32 2026 by rpki-client