
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
File: T96UkP8v8-m_k7SY108x916p_P8.mft (raw, json)
Hash identifier: stLjwvdcdcnSvsheA0aGC22Vp1HWqEIKOyeYVq4dOKE=
Subject key identifier: 02:55:EF:94:B2:77:6A:45:38:4C:3F:95:44:75:E2:60:EC:46:11:1E
Authority key identifier: 4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
Certificate issuer: /CN=A912D14B/serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Certificate serial: 0428
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
Manifest number: 0416
Signing time: Sun 01 Mar 2026 01:14:45 +0000
Manifest this update: Sun 01 Mar 2026 01:14:44 +0000
Manifest next update: Sun 08 Mar 2026 01:14:44 +0000
Files and hashes: 1: T96UkP8v8-m_k7SY108x916p_P8.crl (hash: I/enynvIorCete41i1Xu/id4EOBMc1Aj5zG1NLIQAn8=)
2: 152E5750901211EEA25BED1EC4F9AE02.roa (hash: cJ5CaqkCjpSXdB1wP+KzBN/A46Qp5fiaM1/MskW6UdA=)
3: D791DEB48DEE11EEB451D416C4F9AE02.roa (hash: TZX6iCaGTET/XkjNDNPgsGO7RoUWp3+g1zMXW4uPEG4=)
4: D226E012A4EA11ECA8C4D151C4F9AE02.roa (hash: LegWRIHcFoKxOTl/RoZPTqnhGh7caDlHuymj8lMlN4w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl
rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1064 (0x428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D14B, serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Validity
Not Before: Mar 1 01:14:44 2026 GMT
Not After : Mar 8 01:14:44 2026 GMT
Subject: CN=69a39305-357f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d4:d4:64:7b:d1:d1:50:ad:12:b7:b2:86:fb:
1d:1a:c2:c4:3e:6f:fd:33:58:c6:09:6e:ba:60:33:
3b:01:85:e8:c5:38:24:e7:94:68:90:f3:13:f6:d5:
5d:06:a2:a9:45:b4:99:7a:7f:c9:73:49:77:86:67:
e1:e3:68:c3:d2:0d:a4:b4:1e:7f:fa:4e:56:3f:8d:
41:fc:bd:ab:c8:5b:87:d8:5f:15:8b:58:40:66:a9:
49:47:15:ef:dd:69:f8:7d:17:06:f1:68:d4:b8:4c:
bf:41:14:d8:da:f2:4a:11:ae:e8:1f:8f:17:08:96:
18:7a:a6:b5:76:4e:c9:c8:60:66:03:64:c4:c5:f6:
0e:d3:bf:6b:18:1a:f3:7c:61:af:0a:98:55:ad:8f:
82:be:0c:54:76:47:d3:15:0d:0e:d8:b8:98:55:6c:
f9:54:f1:60:80:08:27:f3:88:43:52:97:20:1a:8b:
21:a2:e4:59:19:5a:e8:67:2f:4c:4c:3b:58:1d:76:
5a:04:2d:0f:03:db:2a:a0:16:6b:ed:67:46:23:24:
d4:c2:12:af:2e:b7:f9:ff:f2:52:8b:17:f7:b2:2b:
c4:21:9a:50:51:a4:1e:be:01:2f:42:5c:d4:0f:01:
1c:9f:c0:03:5f:d5:d7:41:60:fe:c7:49:37:3c:a5:
05:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:55:EF:94:B2:77:6A:45:38:4C:3F:95:44:75:E2:60:EC:46:11:1E
X509v3 Authority Key Identifier:
keyid:4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f5:66:0c:5c:a6:b3:18:8d:3d:e2:0b:48:e8:33:4b:8a:c4:
a0:75:57:d3:74:9b:eb:b3:69:6b:39:64:33:f7:fa:c1:e2:f3:
27:03:f4:71:bf:de:0c:dd:9b:05:be:d9:d8:ab:d1:0e:5c:f1:
e3:b6:91:c5:09:cc:c4:8a:b9:41:ed:aa:3d:01:9b:92:7b:cd:
84:cc:22:2f:a2:49:04:ab:69:4f:2a:91:60:18:6b:8c:59:01:
98:6a:34:fb:6e:fd:65:e4:5e:33:ae:1e:3a:51:5b:26:d0:fc:
cf:c3:a0:b2:17:21:45:59:1e:0b:e2:26:ea:ea:37:c9:99:d0:
d0:9d:b9:22:c8:38:93:f8:44:f7:f2:91:6d:c5:60:e6:ee:95:
5b:9b:3c:26:06:3a:bc:98:b3:a8:e0:7d:47:55:d5:c0:cd:b5:
bc:18:29:da:a4:43:8c:53:08:5f:d3:4c:ba:12:87:15:8a:71:
b4:77:45:ea:6a:42:e1:31:66:75:30:37:b8:6a:96:48:25:10:
ab:61:b3:47:27:1e:32:13:f1:97:0f:09:be:1e:d9:33:f2:16:
9b:6e:9c:91:c3:44:14:e0:bc:e4:b9:6a:2f:5d:4e:b9:d9:27:
c0:dd:b5:ef:91:31:cd:98:46:a3:9b:f0:a4:e1:03:0f:3c:25:
6f:dd:c4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:46:10 2026 by rpki-client