
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft
File: JthkXujuOl0esdLfl5uFSbh2Hio.mft (raw, json)
Hash identifier: wst+nkppuKcEOy31kPi9geNslsDU6LBC5n8FCekh66g=
Subject key identifier: 07:CE:AA:19:E5:27:84:29:3A:C4:11:F8:97:CE:34:F3:75:FB:79:D7
Authority key identifier: 26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A
Certificate issuer: /CN=A916D6C1/serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A
Certificate serial: 0159
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft
Manifest number: 014C
Signing time: Sat 13 Jun 2026 05:17:19 +0000
Manifest this update: Sat 13 Jun 2026 05:17:19 +0000
Manifest next update: Sat 20 Jun 2026 05:17:19 +0000
Files and hashes: 1: JthkXujuOl0esdLfl5uFSbh2Hio.crl (hash: qPc0TBd4fi/OcpBAtP1gA7FB42R1lXfH6Ua69wFwDt8=)
2: 00E00D025BC711F0886C5B59C4F9AE02.roa (hash: XkQ1uVk/uXSTQGxlpz6vDp4cVf/noCzCGg0tuyD68XM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl
rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D6C1, serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A
Validity
Not Before: Jun 13 05:17:19 2026 GMT
Not After : Jun 20 05:17:19 2026 GMT
Subject: CN=6a2ce7df-e97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:fa:ca:b8:d8:a1:c6:d7:da:56:8b:03:23:
09:c8:72:1c:30:62:9e:97:bb:3d:83:77:a5:e2:48:
99:75:60:1f:89:82:13:f4:cf:2d:3a:eb:9d:57:26:
b9:53:eb:96:38:50:c7:15:cb:23:f6:2e:45:96:84:
b6:6d:ec:f8:fd:19:8b:b5:3c:69:f5:08:1d:21:aa:
32:35:6e:81:c8:34:8a:a7:87:26:54:32:4d:96:fd:
61:f8:70:45:8c:36:2d:79:b4:22:4c:2d:67:d1:2f:
48:d6:b0:d3:e9:ca:d2:d1:8f:c9:43:6a:67:07:d0:
d9:23:51:e6:d3:f8:d9:61:7b:5d:02:70:c2:e4:24:
bb:fd:a0:89:1d:b2:98:30:c3:9d:6c:b5:96:0f:14:
cf:8d:68:d9:e9:a5:3f:7d:19:28:c4:1b:19:31:63:
51:80:6d:26:b4:be:70:29:b1:e3:56:83:ed:f7:9f:
bd:08:53:5d:29:4f:04:95:f8:dc:dd:ad:1c:52:d5:
a9:fb:8d:5e:22:fe:56:4e:36:7f:61:7c:5b:31:27:
a3:d8:fd:cb:a4:eb:ee:b3:87:17:c6:e7:3f:2e:89:
8a:28:0e:23:9d:e3:ad:95:e3:ca:8b:53:cf:d7:48:
5c:33:31:20:90:19:95:92:bd:b8:f7:a3:fe:ae:56:
99:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CE:AA:19:E5:27:84:29:3A:C4:11:F8:97:CE:34:F3:75:FB:79:D7
X509v3 Authority Key Identifier:
keyid:26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:e9:e3:df:e9:39:0d:5f:a2:49:8e:fc:3f:de:08:ce:be:04:
ee:18:12:02:5c:4b:32:1d:dd:fc:3d:5c:40:66:b4:a4:8e:b2:
65:0a:eb:97:04:9d:c0:63:5d:c1:3f:e2:92:6d:16:39:f3:ca:
73:46:8f:38:e7:16:a2:55:87:0d:1f:81:ee:6c:f8:85:3c:cf:
df:9e:d7:87:f1:10:42:2a:3c:18:f8:6e:66:7f:70:2a:3c:82:
5f:1e:09:f3:40:41:a5:77:de:c4:d8:56:11:ae:6a:e0:7e:ba:
93:71:f1:75:25:78:31:df:77:66:68:1c:58:ff:c4:8f:91:e5:
cb:4c:f3:01:b6:0e:86:e3:ff:79:bd:ef:7d:fc:2f:bc:05:34:
a4:7a:17:07:35:4c:1a:51:38:eb:74:e7:3f:e3:a6:b2:c8:1d:
d8:ab:1e:00:c0:ea:11:5a:33:a2:c4:af:eb:47:44:7d:17:d2:
51:ae:82:67:02:65:f6:40:92:48:a8:b6:e7:9f:8d:9c:d1:aa:
2a:24:3d:ee:45:ce:9e:ec:ee:db:72:49:63:7b:2b:5f:e9:b2:
b4:da:e1:d9:cd:bb:b4:bf:00:43:60:c9:48:9c:b2:3e:5f:2a:
ab:3a:a9:6e:c0:e9:3e:49:59:11:8f:90:a3:45:fe:d0:25:a0:
74:93:a3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:37:13 2026 by rpki-client