
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
File: No88k4tgFBJSGjqBkAmXj8_pHn4.mft (raw, json)
Hash identifier: yJ7pY4gqmzo11cBrAPG7hUbGAORdWInseXBXLq2idCQ=
Subject key identifier: E8:61:12:1D:1E:30:B5:C3:65:EA:0E:39:78:E0:C7:F2:6E:88:47:6B
Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
Certificate serial: 1866
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
Manifest number: 17B0
Signing time: Thu 24 Sep 2026 16:29:26 +0000
Manifest this update: Thu 24 Sep 2026 16:29:26 +0000
Manifest next update: Thu 01 Oct 2026 16:29:26 +0000
Files and hashes: 1: No88k4tgFBJSGjqBkAmXj8_pHn4.crl (hash: 3zFq4MAF3D7JXzzKz5E+MntE1nURQ5oojH0joi4T8+w=)
2: EC065A52C28D11EBBCABCA6CC4F9AE02.roa (hash: NhWTMkdQoGhGAyUJAewdIYvP2elN/pEDuvTMVFPBYQI=)
3: 986FA3843F8F11EBA86B1F11C4F9AE02.roa (hash: mZ5vq8Tj60q8YoaKNQyf2XVsVELSCKKyxOomhTBpzeE=)
4: 987E6D9E985711F08C4D1E11C4F9AE02.roa (hash: b9W1NkKvwkVx8tzH1Ir1isnXmUcwV+j7p+emjf5li08=)
5: 760F20A2439411EDA0D65E77C4F9AE02.roa (hash: cDmjUkJy5QnoYB2Efhi3ILeopilkHuY54fAfFL06ehs=)
6: 38A5FCB48FC911E8902DFE16C4F9AE02.roa (hash: jGhrtAK4exRlSw5p5BupizFtQ6ARkyDeq/Ro7o2534k=)
7: 5EB452C8D70D11F0B16F7C3995D3641D.roa (hash: zuF/1ukwcpBwhWZK7Pi8Xbxw6hgooL/a/hSXDjQ9478=)
8: F053A1CAC28B11EBBF310469C4F9AE02.roa (hash: gzM1l4gp+yuIxG32teQrIV23U2rjsf7ARAI2SMfdJwk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl
rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6246 (0x1866)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
Validity
Not Before: Sep 24 16:29:26 2026 GMT
Not After : Oct 1 16:29:26 2026 GMT
Subject: CN=6ab54fe6-6372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:96:12:f5:02:26:d0:30:34:1f:08:6b:ce:89:
03:9b:59:9c:e4:6c:1b:69:d4:b3:2b:ab:3d:38:d6:
55:7a:a3:0e:53:e1:ab:25:eb:4a:92:e4:5e:43:5d:
73:de:5d:15:00:a6:33:e8:0b:56:7f:2c:81:e3:e1:
15:91:23:6b:fc:02:25:9c:8f:9a:3c:56:8b:62:12:
9a:93:a2:c0:72:47:e0:d1:c5:04:4f:ba:0d:fc:4e:
0e:07:e5:1e:9d:c2:a3:c1:65:5b:33:7e:2a:04:6f:
b2:39:95:03:d7:ea:19:28:e6:bf:28:c9:df:46:35:
09:44:fd:6c:1b:99:66:90:a2:04:62:97:a3:11:2e:
d9:a9:24:ed:20:11:d2:e1:a0:cf:03:38:10:1a:bc:
38:f8:a0:f0:64:b6:2a:f4:5a:ae:d4:42:f9:07:e7:
53:06:65:5d:1f:a6:e2:66:fa:b7:3b:8e:28:97:89:
29:8c:9e:14:ad:d9:10:6f:bf:9b:3c:39:cc:b4:54:
59:11:ae:34:9c:bc:35:df:81:b5:20:cf:62:40:3a:
79:f7:81:49:c9:6a:a8:bb:8f:09:b3:42:63:c2:d3:
63:0b:fe:c1:8f:d1:e8:77:79:c0:53:55:0f:33:d3:
79:f7:a2:6b:b4:48:31:48:e0:10:f2:79:e9:de:ef:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:61:12:1D:1E:30:B5:C3:65:EA:0E:39:78:E0:C7:F2:6E:88:47:6B
X509v3 Authority Key Identifier:
keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4c:70:52:d0:e5:90:02:5b:f4:b2:dc:98:98:9d:5b:ce:47:
cf:11:d0:8b:09:b5:44:ba:6f:1f:56:d8:7b:ee:c8:c1:19:0d:
fb:48:31:ee:e9:ea:41:a2:36:23:12:39:65:cc:90:5d:3d:4b:
f7:77:1c:62:cb:ad:0b:e0:74:be:81:a4:be:a8:39:27:e7:fc:
2a:09:ea:c1:a3:f8:63:1e:8c:20:ad:c8:6e:52:20:b3:20:59:
a0:17:93:e8:53:6b:30:f1:c1:e3:28:ed:bc:76:d3:a7:4e:c1:
53:a2:37:ab:9f:52:05:56:95:5c:1b:f2:68:8a:35:3e:17:ea:
3b:66:0b:b6:fb:22:04:3d:43:7a:c5:75:b8:87:54:c1:67:50:
42:a0:3b:aa:1b:84:b5:86:26:83:55:c0:25:6e:40:79:c5:cf:
c4:2a:3a:d1:7f:55:da:d3:25:99:87:4b:4a:81:33:a7:be:34:
66:69:4a:3e:fb:59:19:61:9d:f0:85:0b:e5:a8:e6:f7:d1:73:
8d:b4:11:0f:6a:3f:a1:f1:47:fe:32:29:9d:e7:be:5e:69:19:
34:8d:3f:30:fb:0c:c6:90:f0:79:71:d1:91:0d:01:6c:53:0f:
2b:c8:ed:11:14:0c:46:1c:c2:95:65:cc:ad:0c:36:49:34:30:
fc:8c:ca:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:54:36 2026 by rpki-client