
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft
File: JthkXujuOl0esdLfl5uFSbh2Hio.mft (raw, json)
Hash identifier: 5uYSzzXN1ArkxlnxxZlJpv/WtPOB+9Ogqud2+BXZKEo=
Subject key identifier: 81:A5:65:38:F9:E8:DC:E3:96:4A:F7:12:DD:99:78:AD:65:6A:16:2F
Authority key identifier: 26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A
Certificate issuer: /CN=A916D6C1/serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A
Certificate serial: 018E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft
Manifest number: 0181
Signing time: Fri 25 Sep 2026 04:45:28 +0000
Manifest this update: Fri 25 Sep 2026 04:45:28 +0000
Manifest next update: Fri 02 Oct 2026 04:45:28 +0000
Files and hashes: 1: JthkXujuOl0esdLfl5uFSbh2Hio.crl (hash: vnbJ90eHP3YUcT/u6e/g/9rxbnDBi7jM5ldxocnrsug=)
2: 00E00D025BC711F0886C5B59C4F9AE02.roa (hash: XkQ1uVk/uXSTQGxlpz6vDp4cVf/noCzCGg0tuyD68XM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl
rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D6C1, serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A
Validity
Not Before: Sep 25 04:45:28 2026 GMT
Not After : Oct 2 04:45:28 2026 GMT
Subject: CN=6ab5fc68-bfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:32:74:3b:52:3b:e6:10:70:d7:6d:f4:9e:61:
6f:27:8b:62:20:eb:33:4f:2c:40:05:40:55:f3:92:
02:31:4d:ad:62:3a:bd:96:6b:2d:6a:07:69:3b:6d:
1f:33:01:79:e1:30:ee:9f:0f:c1:dd:10:e6:e8:4f:
8d:82:47:90:0b:80:dc:a4:01:2d:2e:19:d1:2e:17:
a6:b5:28:55:c0:1c:aa:b7:87:dc:e9:3f:63:b8:60:
1f:ce:f4:09:46:76:3e:e0:14:e8:fa:b6:73:0e:33:
af:a0:b3:34:14:8a:b9:ef:c0:f6:fd:9f:fb:8c:eb:
03:4f:a7:a8:ad:cf:f8:b8:bd:98:a2:26:ab:62:cd:
77:6a:1f:53:22:eb:74:2f:c3:79:f9:5d:d0:c2:40:
66:56:cb:20:70:5c:b9:21:ca:84:d3:1f:9a:da:37:
ab:4d:fc:f6:a3:9e:83:57:1c:97:45:ce:0f:5f:0f:
18:68:dc:39:73:9a:0d:a0:f4:2d:bc:12:99:10:18:
a3:fa:cb:35:8f:aa:39:cc:06:0c:a4:d9:d6:7f:6c:
4c:e7:e0:3e:ef:23:18:be:98:d0:b3:16:47:b8:e3:
bc:3a:9c:3d:8f:7b:fb:67:9e:71:ea:b8:91:04:96:
91:5c:dd:59:59:0d:5f:0b:e0:58:a9:dd:f1:75:a1:
3f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A5:65:38:F9:E8:DC:E3:96:4A:F7:12:DD:99:78:AD:65:6A:16:2F
X509v3 Authority Key Identifier:
keyid:26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c0:35:88:50:66:35:6e:2a:b1:d5:27:55:06:1a:08:6f:24:
16:a6:fb:f4:73:96:c5:23:ed:af:71:b5:fe:5c:3d:88:87:f9:
37:f1:b8:4c:cd:5d:21:29:39:ee:ce:77:92:4f:a2:60:a2:a6:
b2:76:23:08:d9:b5:26:f0:c1:a4:1c:a2:27:86:da:a0:1b:d6:
d9:35:ca:40:42:38:ba:9b:7e:41:e9:e2:a4:ed:72:01:af:d9:
54:48:bb:a2:58:bd:14:68:fd:14:43:9e:21:1b:b3:cb:39:ce:
84:46:f1:dd:a2:cf:3f:b9:ca:a7:f5:2b:a8:2a:cf:0b:de:63:
94:4f:36:bb:de:cc:eb:37:88:d0:ec:91:fb:29:cd:f9:20:40:
8e:be:e5:35:14:52:78:bb:1e:5c:43:47:63:35:d7:37:6f:7f:
20:55:3b:cb:85:c7:29:2f:24:7a:5a:b7:ff:ef:53:f1:e9:9c:
78:a2:13:a1:05:65:a8:4f:a6:e7:cf:74:6d:a4:d6:c8:2c:4f:
ae:05:56:d1:82:28:1e:b8:e1:7d:4e:db:66:7b:b9:88:eb:ed:
0d:8d:51:a9:74:59:06:d4:c7:86:a6:78:13:e1:eb:ef:0c:5d:
97:fc:46:a3:52:fb:b7:43:ba:5d:c1:4c:cd:9c:49:5a:8c:be:
8a:88:d8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:12:26 2026 by rpki-client