
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
File: No88k4tgFBJSGjqBkAmXj8_pHn4.mft (raw, json)
Hash identifier: xPvht7hDxLs4a7wUd19NxDpUU8eT56JpS1dZ0uwaAHs=
Subject key identifier: FA:72:5D:BB:58:24:C8:7D:6C:31:EB:60:05:45:11:36:12:6B:4B:B0
Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
Certificate serial: 17EA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
Manifest number: 1742
Signing time: Sat 28 Feb 2026 16:36:59 +0000
Manifest this update: Sat 28 Feb 2026 16:36:58 +0000
Manifest next update: Sat 07 Mar 2026 16:36:58 +0000
Files and hashes: 1: No88k4tgFBJSGjqBkAmXj8_pHn4.crl (hash: +xn/SKPDbo72lJNcecWm7roCNyoBcSe9y0eFF+fmj8E=)
2: EC065A52C28D11EBBCABCA6CC4F9AE02.roa (hash: D5/phfHv7NRnNh1uVB5OcYl3HKLOcCjwwCcn5LIOY04=)
3: 986FA3843F8F11EBA86B1F11C4F9AE02.roa (hash: 3qsyI1RYdC4IxoOEtj35JjtCqUJZACqFj6a64FAn/R4=)
4: 987E6D9E985711F08C4D1E11C4F9AE02.roa (hash: t0aqBhUy2E1vHGSzZ+V/fFaWtfLzEKA+l6C3kep9pTU=)
5: F053A1CAC28B11EBBF310469C4F9AE02.roa (hash: +baJ4IIlVuI0qFlzRCIAXw8ieoi3Maif+6sxqFCGNb8=)
6: 38A5FCB48FC911E8902DFE16C4F9AE02.roa (hash: S7+wUQWXWYyVNfVrHQD8NP/Kenz4c8yGRRnN25FwcFg=)
7: 760F20A2439411EDA0D65E77C4F9AE02.roa (hash: z4J2zWK+daoCcDWCwroSrs4nVvB5wPQCYZ736zqUbvA=)
8: 5EB452C8D70D11F0B16F7C3995D3641D.roa (hash: QKniKB0i9U/qZ82wwtBMU77bAEO0dwptMvMlVYHgVtE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl
rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:36:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6122 (0x17ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
Validity
Not Before: Feb 28 16:36:58 2026 GMT
Not After : Mar 7 16:36:58 2026 GMT
Subject: CN=69a319ab-8a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:be:1f:83:da:60:c6:a2:9b:b7:a7:fb:d0:4d:
7c:e3:6d:e3:0c:5c:09:86:93:01:b8:4d:6d:25:99:
3c:da:2c:0a:96:78:21:15:7c:99:98:47:58:91:01:
9e:59:de:27:26:5b:63:9b:60:ac:5e:58:77:68:52:
49:9f:8f:43:7b:c2:fc:ad:8e:a3:f2:b4:cf:12:a5:
2b:6f:84:1a:5b:c2:e0:e9:51:1e:09:d3:a5:16:9a:
ef:66:85:a7:50:e0:9a:f6:21:17:de:48:b4:69:13:
9d:fa:35:b0:26:cd:cd:f9:5c:dc:23:97:a6:cc:2b:
65:5e:20:32:f3:3f:49:dd:6e:97:67:6b:df:ee:2f:
0f:57:16:a6:3d:24:bf:fc:88:db:d3:93:f9:97:e4:
7e:6f:2f:30:71:5d:8a:ce:de:48:44:96:70:13:6a:
36:a4:eb:4c:4d:8d:ed:b9:95:a2:70:d1:83:58:9f:
e4:83:77:12:21:0a:db:d3:83:d5:9b:01:07:58:90:
5d:8b:d3:2e:45:1b:eb:82:bc:b4:19:cc:e6:f4:58:
4d:02:76:4f:c9:01:a5:e8:3b:d2:72:e2:2f:36:1d:
23:42:80:d7:1c:fd:19:15:63:53:01:24:9a:a0:31:
d4:24:cd:1c:5b:e3:5c:8b:e3:16:91:69:8a:75:a0:
f0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:72:5D:BB:58:24:C8:7D:6C:31:EB:60:05:45:11:36:12:6B:4B:B0
X509v3 Authority Key Identifier:
keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:66:3f:da:ed:bd:35:3f:cc:11:c0:f7:40:c3:41:2f:c4:f6:
6d:a3:d2:39:9b:ad:65:b8:8d:ee:dd:56:f2:2e:ce:ef:b8:6a:
94:74:a0:2d:2b:b7:e9:e9:65:6d:b8:d2:fd:78:44:ea:21:6e:
2b:ea:b3:cb:22:24:59:be:dd:45:32:13:73:af:4a:ab:9c:d2:
9c:d4:54:25:fa:5f:7e:f3:35:bd:40:47:ce:e7:ca:da:a1:ee:
25:75:c0:1f:d5:56:0d:b3:88:98:51:80:0f:97:03:02:f6:24:
1f:3f:59:51:0c:ab:33:c0:aa:a2:83:95:b9:22:86:c8:9e:9b:
44:e8:b5:a2:58:c0:90:22:b3:a1:4a:95:72:cc:ed:0a:ce:63:
1a:d6:77:85:49:53:6c:1c:21:d2:4d:b9:db:8a:1c:7e:81:24:
9a:d1:eb:b7:50:5a:48:ae:33:76:67:7c:39:26:7e:9b:61:74:
48:c6:8f:44:43:22:c3:e5:20:9c:1d:86:58:d0:22:82:81:9b:
16:30:cd:70:45:f5:d5:5f:3c:c2:29:fd:c4:32:6e:f8:e1:9e:
d9:2c:bc:ff:f1:d9:08:cb:d0:f8:ab:81:33:49:be:b4:35:83:
e3:6b:d0:bc:e2:cb:1f:c5:b9:67:9f:07:d7:e4:c8:f1:ce:86:
17:f5:ff:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIxOEIxMTAvBgNVBAUTKDM2OEYzQzkzOEI2MDE0MTI1MjFBM0E4MTkwMDk5NzhG
Q0ZFOTFFN0UwHhcNMjYwMjI4MTYzNjU4WhcNMjYwMzA3MTYzNjU4WjAYMRYwFAYD
VQQDDA02OWEzMTlhYi04YTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzr4fg9pgxqKbt6f70E18423jDFwJhpMBuE1tJZk82iwKlnghFXyZmEdYkQGe
Wd4nJltjm2CsXlh3aFJJn49De8L8rY6j8rTPEqUrb4QaW8Lg6VEeCdOlFprvZoWn
UOCa9iEX3ki0aROd+jWwJs3N+VzcI5emzCtlXiAy8z9J3W6XZ2vf7i8PVxamPSS/
/Ijb05P5l+R+by8wcV2Kzt5IRJZwE2o2pOtMTY3tuZWicNGDWJ/kg3cSIQrb04PV
mwEHWJBdi9MuRRvrgry0Gczm9FhNAnZPyQGl6DvScuIvNh0jQoDXHP0ZFWNTASSa
oDHUJM0cW+Nci+MWkWmKdaDwPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPpyXbtY
JMh9bDHrYAVFETYSa0uwMB8GA1UdIwQYMBaAFDaPPJOLYBQSUho6gZAJl4/P6R5+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi9GOThCNUYwQzIx
RjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZCSlNHanFCa0FtWGo4X3BI
bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL05vODhrNHRnRkJKU0dqcUJrQW1YajhfcEhuNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjE4Qi9GOThCNUYwQzIxRjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZC
SlNHanFCa0FtWGo4X3BIbjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuWY/2u29NT/MEcD3QMNBL8T2baPSOZutZbiN7t1W8i7O77hqlHSgLSu36ell
bbjS/XhE6iFuK+qzyyIkWb7dRTITc69Kq5zSnNRUJfpffvM1vUBHzufK2qHuJXXA
H9VWDbOImFGAD5cDAvYkHz9ZUQyrM8CqooOVuSKGyJ6bROi1oljAkCKzoUqVcszt
Cs5jGtZ3hUlTbBwh0k2524ocfoEkmtHrt1BaSK4zdmd8OSZ+m2F0SMaPREMiw+Ug
nB2GWNAigoGbFjDNcEX11V88win9xDJu+OGe2Sy8//HZCMvQ+KuBM0m+tDWD42vQ
vOLLH8W5Z58H1+TI8c6GF/X/aQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:28:55 2026 by rpki-client