
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
File: T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft (raw, json)
Hash identifier: mCK6dUE9mXAvc4e99BJXMVAp0oP1WBUfYhdDr08sXkA=
Subject key identifier: 32:F7:1D:F0:E7:7B:71:72:EE:99:24:35:6C:D4:A3:67:13:0C:02:E5
Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A
Certificate issuer: /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
Certificate serial: 0408
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
Manifest number: 0402
Signing time: Mon 02 Mar 2026 00:45:42 +0000
Manifest this update: Mon 02 Mar 2026 00:45:40 +0000
Manifest next update: Mon 09 Mar 2026 00:45:40 +0000
Files and hashes: 1: T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl (hash: dJjdjmYFXur3TAlVjyXT4Lz4o5Vp+98ra8fJyqQgeB8=)
2: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (hash: 2SfGs1jOgqzEhF9rdWUTh/Lqm2DcuWtgPENfS4h26Tg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl
rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:45:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1032 (0x408)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DC7C, serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
Validity
Not Before: Mar 2 00:45:40 2026 GMT
Not After : Mar 9 00:45:40 2026 GMT
Subject: CN=69a4ddb5-22c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:20:6b:33:fd:fb:4c:0a:11:13:53:10:4a:1c:
29:dd:44:4e:9a:38:7c:c0:9d:1d:76:4c:88:4d:81:
fd:f7:a4:1c:f2:e1:75:e3:3e:56:60:94:7a:71:d3:
f9:7d:c1:fe:0e:e7:38:ed:20:ed:5d:c5:b7:a6:60:
c7:35:ad:40:1f:cd:b5:66:47:e6:ab:a8:ef:b6:65:
61:cd:ae:8e:e7:b1:38:ff:a3:38:d5:bf:16:00:39:
1a:92:e6:29:94:84:56:d8:a9:1f:b2:68:e6:31:e1:
e1:0b:78:85:4c:ad:63:e3:5e:ce:30:9c:e6:ff:b3:
ce:d4:38:36:ad:95:67:4c:53:3e:76:75:07:b8:e1:
d6:78:c7:56:49:82:91:79:4d:36:49:58:78:13:f9:
61:94:b1:9b:07:0c:ce:3c:93:ad:6b:4e:68:9b:9a:
dd:4f:18:ff:aa:f2:7d:b8:41:4f:78:05:f9:72:00:
9e:df:e7:dd:88:21:0e:fa:57:40:59:bd:5e:85:49:
48:fd:d1:ac:e8:0e:dd:da:77:1e:64:18:2e:ce:1a:
2f:7d:dc:09:6b:4c:7a:cf:9e:49:19:1f:b1:4f:73:
57:81:a9:1d:19:ed:09:6b:07:24:5c:2f:01:9a:51:
40:43:70:54:54:97:b6:2b:b0:16:26:63:1d:0a:db:
45:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F7:1D:F0:E7:7B:71:72:EE:99:24:35:6C:D4:A3:67:13:0C:02:E5
X509v3 Authority Key Identifier:
keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:c8:84:ef:b5:e8:dc:b2:51:4c:cb:9c:ee:b5:6f:28:1a:3e:
da:41:5f:15:4c:b9:c2:b4:c3:58:f5:61:f5:25:73:56:23:2e:
5c:60:d9:32:94:37:a6:01:5f:1a:d2:3e:64:71:06:bc:79:90:
48:2d:58:1d:a8:c8:1c:a6:04:88:2b:40:f1:fe:43:7b:41:15:
e1:2f:78:b1:6d:9c:bc:7c:e6:03:94:11:5f:6a:28:05:f1:f1:
7c:1a:e2:ff:88:36:a6:c0:43:be:ad:21:8b:df:5d:81:6c:cb:
01:b9:8e:80:9d:da:6e:1d:7f:cf:d2:62:87:f8:f9:2c:cb:36:
1d:a2:3c:dc:55:27:a4:1a:10:99:e7:75:89:d4:3b:9a:10:18:
06:9d:70:29:a0:a3:5a:9b:dd:42:9d:c0:d5:85:34:a2:85:b9:
18:09:9c:8a:eb:ec:fc:3c:36:c7:f5:a6:fc:b3:38:ad:24:48:
73:4a:24:72:4a:28:c3:1f:15:ab:20:49:7e:23:d6:10:07:2f:
52:0b:fb:3a:08:c9:04:37:ad:9a:ab:e0:54:8b:84:4d:87:e7:
31:b2:21:75:d0:5e:fd:b9:34:db:36:09:54:cc:f9:fb:22:bb:
55:10:7a:14:a6:c3:30:b8:b4:1c:05:66:2c:c4:95:0b:ab:9f:
3d:27:a9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:48:35 2026 by rpki-client