
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
File: T96UkP8v8-m_k7SY108x916p_P8.mft (raw, json)
Hash identifier: /Gy3BZr00Kf0OK5BScuGdp9Q8wo2P+Mn1MmPSdR3CYA=
Subject key identifier: 81:FF:47:12:1F:17:14:91:14:FD:29:77:8B:93:A6:67:3D:8B:2F:4B
Authority key identifier: 4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
Certificate issuer: /CN=A912D14B/serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Certificate serial: 03EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
Manifest number: 03D9
Signing time: Mon 03 Nov 2025 00:34:36 +0000
Manifest this update: Mon 03 Nov 2025 00:34:36 +0000
Manifest next update: Mon 10 Nov 2025 00:34:36 +0000
Files and hashes: 1: T96UkP8v8-m_k7SY108x916p_P8.crl (hash: q+S3egTbPmJqu7ItsRNKdozzwAP1VLN4DMP7eTfpqUE=)
2: D791DEB48DEE11EEB451D416C4F9AE02.roa (hash: TZX6iCaGTET/XkjNDNPgsGO7RoUWp3+g1zMXW4uPEG4=)
3: 152E5750901211EEA25BED1EC4F9AE02.roa (hash: cJ5CaqkCjpSXdB1wP+KzBN/A46Qp5fiaM1/MskW6UdA=)
4: D226E012A4EA11ECA8C4D151C4F9AE02.roa (hash: LegWRIHcFoKxOTl/RoZPTqnhGh7caDlHuymj8lMlN4w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl
rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 00:34:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1003 (0x3eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D14B, serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Validity
Not Before: Nov 3 00:34:36 2025 GMT
Not After : Nov 10 00:34:36 2025 GMT
Subject: CN=6907f89c-87ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e9:d8:a8:21:72:b4:8c:25:af:60:9d:cb:34:
99:0e:73:f0:26:6e:27:86:f0:9d:cb:ba:96:c8:25:
48:f4:2a:58:32:53:b9:42:71:45:b9:f9:b9:78:4e:
bc:bf:ee:33:39:24:e6:dd:de:a8:93:de:fa:51:79:
3a:48:5c:a3:55:85:61:61:62:9e:6e:d5:82:13:26:
2a:04:b9:c1:ea:d8:b8:33:43:ae:f4:88:d7:c0:60:
e4:f9:1b:ad:30:29:a2:db:78:70:4d:79:cd:7d:b0:
e0:cb:ce:77:b8:70:79:1f:44:6c:06:41:68:5e:39:
6d:6f:d2:0b:33:aa:6b:d7:fb:ec:86:d6:e5:33:71:
23:99:7a:df:f9:9b:93:b7:97:0c:e3:d1:b6:0f:df:
91:dd:da:5c:78:6e:79:d7:b6:f0:2c:49:a6:c4:fe:
7f:e5:8c:bb:9d:40:2b:9d:68:32:03:f9:94:11:13:
bb:e4:bf:fa:08:c0:7e:79:1d:18:b9:81:c1:0f:fd:
be:99:e1:6b:72:75:10:30:50:5e:93:4d:1b:86:43:
b0:b9:79:5c:66:30:79:4b:4b:ef:48:a5:67:a0:07:
7a:27:f7:2a:5c:f2:e0:cc:07:f2:bf:f0:d7:e5:96:
9e:54:84:31:ea:18:ce:30:e7:7f:73:dd:68:44:40:
a4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FF:47:12:1F:17:14:91:14:FD:29:77:8B:93:A6:67:3D:8B:2F:4B
X509v3 Authority Key Identifier:
keyid:4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:ca:1f:1c:c2:ac:97:7c:76:83:5a:9b:8b:af:1a:b5:4e:6b:
ba:01:bb:3b:b2:af:76:a0:62:ee:a7:a6:00:b0:b0:54:d4:af:
a8:36:1c:c7:2b:b5:da:d0:70:ef:4e:aa:bc:9b:51:8f:77:ae:
d3:f6:70:9b:e9:0d:51:f9:d6:32:40:b0:84:cb:be:d9:37:10:
fd:1c:58:b4:d6:23:54:4d:73:63:a4:4a:90:24:74:d3:b3:75:
4f:24:98:11:81:c9:d5:17:7e:02:66:5a:f2:9b:09:0d:ae:a0:
0a:11:24:2c:21:a9:6a:c7:dc:68:57:a9:db:24:e4:43:c2:68:
fe:cf:a3:10:d4:2b:63:1b:b5:5f:45:fa:1b:f4:02:5d:aa:67:
81:2b:15:a7:a2:aa:2c:24:6c:b1:6e:ba:49:51:33:94:d4:b3:
c8:c4:fe:b3:12:cc:19:6b:41:84:c5:8d:88:d8:fe:cb:17:03:
66:ca:fd:37:98:69:47:1a:0f:1c:79:24:6e:21:38:e3:18:e0:
2f:c7:92:8c:84:d3:a0:19:ab:74:d6:3a:cf:ea:7c:bd:b5:e2:
d9:75:65:f4:e3:d5:c2:86:b3:8c:ba:12:35:07:8e:5f:55:22:
2f:18:f5:da:03:da:6a:b0:e1:2b:d6:d9:e3:a0:77:1f:cd:81:
d0:33:82:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:35 2025 by rpki-client