
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
File: No88k4tgFBJSGjqBkAmXj8_pHn4.mft (raw, json)
Hash identifier: HxP99gEbZX224zpbhC2x5nHPORpXzlu0SEX90H1a3qY=
Subject key identifier: 96:E5:2C:EA:E8:37:04:59:35:24:94:A5:A8:E6:AE:21:C2:55:15:F3
Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
Certificate serial: 1865
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
Manifest number: 17AF
Signing time: Tue 22 Sep 2026 16:27:16 +0000
Manifest this update: Tue 22 Sep 2026 16:27:16 +0000
Manifest next update: Tue 29 Sep 2026 16:27:16 +0000
Files and hashes: 1: No88k4tgFBJSGjqBkAmXj8_pHn4.crl (hash: z5L73H3NPryC0KPVEsB7PwQfl8ScR7OqC0Jw4xCf6OE=)
2: 38A5FCB48FC911E8902DFE16C4F9AE02.roa (hash: jGhrtAK4exRlSw5p5BupizFtQ6ARkyDeq/Ro7o2534k=)
3: 987E6D9E985711F08C4D1E11C4F9AE02.roa (hash: b9W1NkKvwkVx8tzH1Ir1isnXmUcwV+j7p+emjf5li08=)
4: F053A1CAC28B11EBBF310469C4F9AE02.roa (hash: gzM1l4gp+yuIxG32teQrIV23U2rjsf7ARAI2SMfdJwk=)
5: 5EB452C8D70D11F0B16F7C3995D3641D.roa (hash: zuF/1ukwcpBwhWZK7Pi8Xbxw6hgooL/a/hSXDjQ9478=)
6: EC065A52C28D11EBBCABCA6CC4F9AE02.roa (hash: NhWTMkdQoGhGAyUJAewdIYvP2elN/pEDuvTMVFPBYQI=)
7: 986FA3843F8F11EBA86B1F11C4F9AE02.roa (hash: mZ5vq8Tj60q8YoaKNQyf2XVsVELSCKKyxOomhTBpzeE=)
8: 760F20A2439411EDA0D65E77C4F9AE02.roa (hash: cDmjUkJy5QnoYB2Efhi3ILeopilkHuY54fAfFL06ehs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl
rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6245 (0x1865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
Validity
Not Before: Sep 22 16:27:16 2026 GMT
Not After : Sep 29 16:27:16 2026 GMT
Subject: CN=6ab2ac64-3bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:23:e3:73:7e:d4:19:3f:52:cc:51:d8:4c:d1:
60:7d:d1:de:d0:be:60:19:be:da:4f:a5:b9:29:42:
f4:d5:c1:4c:23:78:69:78:d6:91:6e:14:f0:67:d5:
8e:e5:08:ae:7b:9c:dc:b8:8b:30:45:91:eb:41:89:
20:83:fa:d7:d2:82:13:61:e4:85:d2:90:fd:0c:18:
7e:34:ee:7f:9f:90:5f:01:5f:ed:6c:c5:17:ff:bf:
53:5c:f8:1b:b4:06:91:c2:ec:f3:c8:9b:e1:cc:a7:
d5:75:91:56:15:3d:19:21:34:06:09:35:de:c0:eb:
87:57:0c:5b:ba:8f:53:e4:c2:3c:49:0b:f2:dd:4c:
bd:ca:66:ca:31:cc:17:ca:82:50:7d:8a:23:80:1f:
4b:03:b9:5d:a8:ff:df:e7:fc:b0:5c:96:50:25:1e:
ca:bc:47:1b:02:8a:0e:81:41:35:d3:c5:dc:06:4a:
e9:99:b3:af:b0:ba:fd:91:5b:77:ff:76:cf:53:d6:
08:71:96:81:4b:97:cb:e9:88:50:1c:25:fd:d2:0f:
26:be:86:25:f9:b8:80:bb:61:c3:6e:51:d4:02:0c:
bf:2c:7d:4a:0c:48:50:1a:56:64:bf:7d:82:87:64:
f9:53:01:bd:df:c2:31:80:fd:5a:44:95:ed:ac:04:
a5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E5:2C:EA:E8:37:04:59:35:24:94:A5:A8:E6:AE:21:C2:55:15:F3
X509v3 Authority Key Identifier:
keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:1b:05:13:8e:26:2d:09:ea:82:eb:15:e0:c6:58:29:f2:ff:
08:d5:80:8f:99:e5:0b:b5:1e:81:22:83:1f:6a:17:b4:c7:0a:
96:55:51:4e:e1:52:7a:00:83:73:ec:36:3d:c6:86:71:eb:b8:
73:26:2e:62:84:72:55:34:b9:d7:67:6b:96:af:cf:10:b0:3b:
f0:24:e2:b4:fe:36:64:48:e2:e5:e5:f5:94:f8:d6:54:45:0b:
e7:bc:f4:de:8d:ce:46:23:81:04:cf:ea:7c:c1:3a:f5:44:94:
b6:95:bf:9c:ea:23:62:bf:da:55:0d:ab:4a:e2:7b:94:c0:c9:
ce:af:4f:13:aa:77:03:2b:e0:92:e9:4e:2e:a6:63:89:74:98:
ef:37:05:ef:82:da:34:be:10:93:f3:2d:ce:34:08:f3:85:45:
76:3b:15:d1:95:15:0d:cb:f6:ee:63:de:b0:3f:34:de:11:0f:
1d:cf:18:e0:b9:a7:79:92:fb:a9:2a:65:60:c5:87:f0:08:61:
f0:9e:31:33:f1:cb:1e:f1:17:b0:10:68:9d:05:4f:4b:d6:d7:
13:69:41:8a:ac:dc:3a:8f:58:43:72:40:23:9c:25:5b:ac:5e:
bd:23:e0:8d:c1:c1:bf:c1:34:28:17:22:3d:3c:c1:6d:f1:d9:
a4:3e:b0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:24:47 2026 by rpki-client