
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft
File: Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft (raw, json)
Hash identifier: Hn323LIktTz0PheW9Au4U1x/PUUq1F9Vn5bkq0sAv/c=
Subject key identifier: 90:BC:33:AE:45:7D:FE:9C:A5:66:51:94:04:00:39:2D:66:FD:A8:40
Authority key identifier: 2B:3E:E4:4E:A9:CB:5B:81:29:6B:B6:7D:F0:F5:46:F8:AA:C8:A4:B4
Certificate issuer: /CN=A91F4F00/serialNumber=2B3EE44EA9CB5B81296BB67DF0F546F8AAC8A4B4
Certificate serial: 0814
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft
Manifest number: 080A
Signing time: Wed 18 Feb 2026 20:33:33 +0000
Manifest this update: Wed 18 Feb 2026 20:33:33 +0000
Manifest next update: Wed 25 Feb 2026 20:33:33 +0000
Files and hashes: 1: Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.crl (hash: pmNLzcR+KbHSCrvY9A3o0HG7lhDIf/NKR2/+dn/nNG0=)
2: E7BAB834B5F511F0B410AD78C4F9AE02.roa (hash: fxQZfbaLKR/d/fZu/fhyY8IFle3U5GHLuzj+qPAQsuQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.crl
rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:33:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2068 (0x814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4F00, serialNumber=2B3EE44EA9CB5B81296BB67DF0F546F8AAC8A4B4
Validity
Not Before: Feb 18 20:33:33 2026 GMT
Not After : Feb 25 20:33:33 2026 GMT
Subject: CN=6996221d-265b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:97:d5:b2:8c:00:fc:72:b9:f5:cd:6d:37:
ae:ac:15:fc:b6:ca:f5:3c:0f:2c:0c:44:65:41:e5:
0e:c4:c9:1c:b9:72:68:94:43:22:66:d6:88:cd:5a:
78:54:c7:ee:da:08:36:0a:b0:02:7a:d7:81:24:9f:
7d:6e:51:e3:82:79:7a:3c:d7:94:48:f1:72:3b:c3:
54:a8:43:13:1d:76:fa:ee:71:ff:a1:72:93:c0:5b:
ec:99:28:79:d2:2e:18:e1:af:09:d3:61:4f:5d:33:
87:1b:49:dc:a3:65:1b:d9:bb:0c:eb:00:cd:65:e1:
06:69:e3:00:0a:b4:1b:9f:07:dd:55:e4:dd:98:2f:
93:96:bf:85:ba:22:c6:83:66:3e:11:d3:34:6a:a2:
5a:ce:31:62:85:1c:38:02:b9:a2:3b:2c:9e:58:df:
79:3f:68:17:df:82:7b:9e:59:11:f9:15:f9:40:cc:
d5:71:42:f3:4e:b7:85:20:f4:b6:23:12:54:2c:39:
c9:9d:ba:e2:1f:e3:32:a5:64:f1:66:87:fe:36:d5:
92:8d:a9:4a:e9:1b:e9:06:d6:fb:7e:f9:33:eb:b3:
27:58:9c:bc:a3:07:0f:b8:5d:03:74:d3:57:5a:24:
2b:4d:cb:c4:47:99:98:2d:1a:d7:d0:a1:7b:6f:a8:
bf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BC:33:AE:45:7D:FE:9C:A5:66:51:94:04:00:39:2D:66:FD:A8:40
X509v3 Authority Key Identifier:
keyid:2B:3E:E4:4E:A9:CB:5B:81:29:6B:B6:7D:F0:F5:46:F8:AA:C8:A4:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:07:a1:30:ff:cf:a3:cc:59:d4:ac:cc:88:76:fb:81:00:49:
82:83:e1:57:2a:46:40:9e:ef:1d:a4:be:0a:85:e1:2d:b9:6d:
4f:87:37:84:cd:98:eb:a9:e6:e0:f5:0d:0f:4b:00:bc:11:47:
3d:a4:07:34:6d:ca:f2:c5:46:94:a6:cc:69:16:56:af:df:51:
ef:aa:34:67:f5:53:3b:d2:9e:88:75:63:dd:c8:88:37:07:e6:
59:f2:92:d0:45:55:d7:a5:fd:17:26:65:bd:d2:0a:1a:c8:3d:
8a:50:fb:8b:4b:a8:c4:2d:f9:64:e7:04:14:ec:6e:f2:df:0c:
82:f5:36:f2:3f:a4:28:f3:48:b2:ef:92:49:7b:67:db:59:6b:
80:8c:e6:92:6d:e8:6c:80:14:ed:52:d8:3a:7b:3c:1c:09:47:
db:b3:c5:6e:4c:4e:8d:0c:5c:10:0f:05:46:a5:a3:0c:6e:ed:
00:f5:aa:84:e5:b4:cb:9c:9a:7c:a3:20:b1:f2:cc:8e:37:4d:
11:47:fc:ed:f9:1f:81:d6:de:3b:10:3c:de:0a:a5:ed:1e:c5:
ba:a8:64:5a:fc:1b:5e:5c:00:ce:33:30:08:da:88:6c:13:7a:
f3:20:01:fb:6d:84:a9:93:93:2e:a0:aa:4a:05:30:2a:53:c3:
76:56:14:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjRGMDAxMTAvBgNVBAUTKDJCM0VFNDRFQTlDQjVCODEyOTZCQjY3REYwRjU0NkY4
QUFDOEE0QjQwHhcNMjYwMjE4MjAzMzMzWhcNMjYwMjI1MjAzMzMzWjAYMRYwFAYD
VQQDDA02OTk2MjIxZC0yNjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqGKX1bKMAPxyufXNbTeurBX8tsr1PA8sDERlQeUOxMkcuXJolEMiZtaIzVp4
VMfu2gg2CrACeteBJJ99blHjgnl6PNeUSPFyO8NUqEMTHXb67nH/oXKTwFvsmSh5
0i4Y4a8J02FPXTOHG0nco2Ub2bsM6wDNZeEGaeMACrQbnwfdVeTdmC+Tlr+FuiLG
g2Y+EdM0aqJazjFihRw4ArmiOyyeWN95P2gX34J7nlkR+RX5QMzVcULzTreFIPS2
IxJULDnJnbriH+MypWTxZof+NtWSjalK6RvpBtb7fvkz67MnWJy8owcPuF0DdNNX
WiQrTcvER5mYLRrX0KF7b6i/owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJC8M65F
ff6cpWZRlAQAOS1m/ahAMB8GA1UdIwQYMBaAFCs+5E6py1uBKWu2ffD1RviqyKS0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEYwMC8zREE2OTAxNjEz
NTcxMUVCQTIzREE3MTRDNEY5QUUwMi9LejdrVHFuTFc0RXBhN1o5OFBWRy1Lcklw
TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0t6N2tUcW5MVzRFcGE3Wjk4UFZHLUtySXBMUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NEYwMC8zREE2OTAxNjEzNTcxMUVCQTIzREE3MTRDNEY5QUUwMi9LejdrVHFuTFc0
RXBhN1o5OFBWRy1LcklwTFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA4B6Ew/8+jzFnUrMyIdvuBAEmCg+FXKkZAnu8dpL4KheEtuW1PhzeE
zZjrqebg9Q0PSwC8EUc9pAc0bcryxUaUpsxpFlav31HvqjRn9VM70p6IdWPdyIg3
B+ZZ8pLQRVXXpf0XJmW90goayD2KUPuLS6jELflk5wQU7G7y3wyC9TbyP6Qo80iy
75JJe2fbWWuAjOaSbehsgBTtUtg6ezwcCUfbs8VuTE6NDFwQDwVGpaMMbu0A9aqE
5bTLnJp8oyCx8syON00RR/zt+R+B1t47EDzeCqXtHsW6qGRa/BteXADOMzAI2ohs
E3rzIAH7bYSpk5MuoKpKBTAqU8N2VhS7
-----END CERTIFICATE-----
Generated at Thu Feb 19 16:42:01 2026 by rpki-client