
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
File: T96UkP8v8-m_k7SY108x916p_P8.mft (raw, json)
Hash identifier: IksU7nYMfPbBYlTiJlvBLz4Kv77Mw2U4UHfNuCQNm5s=
Subject key identifier: 02:76:54:8B:F0:0E:94:5C:83:21:A2:80:F2:EC:7A:7E:EB:88:80:F3
Authority key identifier: 4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
Certificate issuer: /CN=A912D14B/serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Certificate serial: 0442
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
Manifest number: 042A
Signing time: Sun 05 Apr 2026 00:08:33 +0000
Manifest this update: Sun 05 Apr 2026 00:08:32 +0000
Manifest next update: Sun 12 Apr 2026 00:08:32 +0000
Files and hashes: 1: T96UkP8v8-m_k7SY108x916p_P8.crl (hash: K83uMVRDK+DR3FjB/novfBNhy8FMisWlIo1JMoKZeU8=)
2: 152E5750901211EEA25BED1EC4F9AE02.roa (hash: S393tIRXjqwIgNjaze8iQkcL22A9fRb/vcetFTNN4As=)
3: D226E012A4EA11ECA8C4D151C4F9AE02.roa (hash: dTIeQPJRfWnwh+dbEE9eI/CeKDdf7lQeG6UlGPB4vHc=)
4: D791DEB48DEE11EEB451D416C4F9AE02.roa (hash: zhGf6vgm0C3GTje/jua3UnPl3jt39EY1BOnME5mb/HE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl
rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:08:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1090 (0x442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D14B, serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Validity
Not Before: Apr 5 00:08:32 2026 GMT
Not After : Apr 12 00:08:32 2026 GMT
Subject: CN=69d1a801-7ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:9c:ad:35:cc:53:05:48:31:1b:23:c0:37:
1d:5c:48:ea:f5:a8:6c:f1:7e:0d:31:c6:05:ef:33:
12:dc:e8:50:2b:5f:d5:82:c0:b0:bc:da:a3:16:67:
29:74:d6:0f:3b:14:f4:27:87:0e:ea:c0:82:2c:4b:
07:0e:08:c8:c4:57:db:52:4c:61:1c:36:df:6e:a7:
65:bc:dd:b4:aa:bf:f6:6f:24:d8:2f:83:ae:66:2c:
f7:23:f0:1f:79:f8:ec:97:9f:80:89:04:0a:d9:1f:
9c:fc:f6:33:57:cf:45:b8:43:b9:21:a9:88:41:87:
a4:f7:4f:fa:fc:ef:0c:dd:1d:6d:96:17:d2:f4:ce:
5d:ee:2e:32:76:da:53:e8:6e:ac:ca:ff:a6:b3:14:
f2:36:ab:84:91:d8:50:42:76:af:6d:82:2c:90:32:
ac:7e:08:ea:e1:9b:47:ff:dd:67:7f:6f:59:7a:f1:
a3:fb:cd:16:26:66:c3:ed:43:ec:b3:29:21:18:69:
3b:73:e0:65:35:58:b1:89:58:1c:95:a6:a1:26:4e:
11:11:c5:17:1f:1e:c2:a1:89:7d:b0:ca:8f:a8:c6:
94:40:bf:21:2b:9b:d8:0e:67:dc:84:b8:ad:e7:33:
61:00:35:b0:4b:6b:3e:00:c0:4d:58:29:86:86:7a:
b3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:76:54:8B:F0:0E:94:5C:83:21:A2:80:F2:EC:7A:7E:EB:88:80:F3
X509v3 Authority Key Identifier:
keyid:4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:19:ff:ea:8d:d8:e5:50:46:24:83:b2:a1:42:91:64:e2:1c:
36:39:8d:85:5d:0b:f8:91:c8:ef:93:33:5b:9b:b5:25:fa:89:
a9:da:69:63:c3:0c:cb:88:8a:01:d8:e9:82:d6:af:2f:b9:b9:
c3:d6:55:fe:3e:95:7b:be:e2:7b:f8:cc:74:43:b9:12:09:48:
a2:22:33:b0:37:4c:be:d2:e6:6a:73:a4:a4:be:3b:22:b4:cd:
a6:41:e2:35:ac:e3:76:1b:65:31:b8:86:1d:29:33:dc:2f:42:
d8:af:2d:1b:13:6c:d0:02:f9:3a:1c:9e:58:37:8e:ab:cf:f3:
c8:72:bf:27:6f:9f:11:d4:6d:7d:e6:e7:85:7a:82:7b:7e:9c:
17:73:a3:7e:a9:e9:67:6e:aa:2c:92:0d:0d:f7:06:2d:40:d6:
f1:8e:7c:82:b1:1c:8f:22:58:3a:5a:88:d1:92:a7:69:e4:92:
e5:1f:5d:4e:49:8d:22:ec:f4:19:13:25:1e:fc:a7:d1:9a:23:
d1:25:5c:1c:3f:52:1b:af:36:6c:4a:0b:37:a6:48:93:8c:38:
0d:47:6c:c4:d4:f5:d3:f4:0e:4a:a7:85:21:a8:c7:b2:09:5d:
30:d0:01:a3:da:50:ed:1d:7c:c7:93:db:bf:9b:66:d9:b5:fa:
6c:43:ee:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:34 2026 by rpki-client