
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft
File: JthkXujuOl0esdLfl5uFSbh2Hio.mft (raw, json)
Hash identifier: AgoC19b/4t1TJ2wJjY+xOOO6Po8gpEj975+Ux9RHaFI=
Subject key identifier: A1:33:C7:F6:17:C7:6F:52:01:8E:3E:09:DE:0E:61:05:07:70:D4:04
Authority key identifier: 26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A
Certificate issuer: /CN=A916D6C1/serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft
Manifest number: 0190
Signing time: Wed 21 Oct 2026 05:05:12 +0000
Manifest this update: Wed 21 Oct 2026 05:05:11 +0000
Manifest next update: Wed 28 Oct 2026 05:05:11 +0000
Files and hashes: 1: JthkXujuOl0esdLfl5uFSbh2Hio.crl (hash: RE0absGbR8L1RqeNYQ8uzccfjmNIPhBhNWe54sCD55o=)
2: 00E00D025BC711F0886C5B59C4F9AE02.roa (hash: VML82w4qD6qtY/Q4hjHc9JYPMyXqRnjnTlwLfmEt1BM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl
rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D6C1, serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A
Validity
Not Before: Oct 21 05:05:11 2026 GMT
Not After : Oct 28 05:05:11 2026 GMT
Subject: CN=6ad84808-0a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:18:d3:f7:85:55:4b:1d:60:ac:e3:1c:46:25:
ed:63:bb:22:ca:8e:33:50:99:14:cf:ac:99:78:6d:
b3:08:9c:d6:2c:c5:7b:7f:1f:73:29:5b:48:5b:a7:
4e:23:6a:df:4e:e6:43:b9:cc:91:bd:a5:c3:50:fc:
61:12:2a:cb:47:d6:85:29:46:26:21:d2:8b:cd:d6:
37:dd:20:93:1b:fd:b6:ae:0f:9e:79:98:dc:0b:af:
11:66:ea:95:4a:08:72:7f:a8:d6:35:1d:ef:78:16:
c8:74:63:53:d0:04:d5:73:8c:51:f8:c9:32:ff:c0:
94:dc:86:e9:03:fe:00:ba:1a:89:9b:37:a9:79:1e:
b7:eb:cf:0d:b4:07:2e:bb:7d:2b:ee:83:8b:b6:87:
dd:45:d8:e5:26:5c:e7:4b:24:05:4c:a0:04:51:96:
ca:a4:fa:11:ef:da:c2:4b:b9:73:07:b8:52:cf:94:
a3:08:c4:64:f2:d3:45:0b:fe:81:1e:d5:90:18:9d:
78:5a:47:13:61:f7:a9:76:9a:ee:76:88:98:76:dd:
5b:0f:58:d2:b1:e0:f0:dd:12:42:72:f8:da:2e:2f:
9b:31:c7:42:70:e0:69:62:fa:13:89:0a:a4:b6:3f:
48:0b:7f:a0:36:d3:8f:c0:8a:59:d4:17:40:8e:ff:
ca:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:33:C7:F6:17:C7:6F:52:01:8E:3E:09:DE:0E:61:05:07:70:D4:04
X509v3 Authority Key Identifier:
keyid:26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:2d:c5:8e:d2:86:25:ee:91:70:29:ae:8b:97:89:db:6f:81:
da:43:29:c3:b9:80:c9:2e:55:d6:dd:d4:2b:4a:41:f1:65:17:
8e:33:a5:ea:00:ca:97:38:da:92:e1:a1:1d:9f:7e:67:a9:00:
66:c2:de:cb:d7:f2:6d:b8:a4:8d:e6:d0:d7:8b:20:bc:15:10:
31:aa:35:29:a8:ff:9b:08:d8:68:b8:88:da:40:3a:8f:6f:27:
dc:6d:76:7f:43:ae:d0:8e:8e:6e:9d:a8:f7:9e:88:0c:e9:ce:
b1:2b:fb:bc:a8:8e:d7:c0:dc:75:3a:c6:a9:95:92:0d:0c:77:
d8:c1:c3:d5:94:57:75:b9:e7:b9:42:48:54:08:af:17:3d:b9:
9a:da:95:d5:9f:29:3c:5e:7b:f8:e4:1c:86:91:34:b4:7f:dd:
38:ef:b5:c9:93:8f:31:36:aa:70:02:bb:3f:37:42:1c:7c:03:
05:48:8d:32:19:7e:fd:21:78:80:e5:23:b3:8a:7a:28:f1:2d:
bd:07:c0:64:d7:5a:7b:05:aa:03:99:4c:9e:07:88:f3:4a:d6:
0c:93:ce:da:1e:a2:3a:24:ce:66:cd:29:16:d2:61:42:f4:2d:
f5:70:97:44:ba:ba:d2:9b:26:a1:d2:2d:4e:d6:f6:79:b3:11:
29:57:b3:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQ2QzExMTAvBgNVBAUTKDI2RDg2NDVFRThFRTNBNUQxRUIxRDJERjk3OUI4NTQ5
Qjg3NjFFMkEwHhcNMjYxMDIxMDUwNTExWhcNMjYxMDI4MDUwNTExWjAYMRYwFAYD
VQQDEw02YWQ4NDgwOC0wYTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApxjT94VVSx1grOMcRiXtY7siyo4zUJkUz6yZeG2zCJzWLMV7fx9zKVtIW6dO
I2rfTuZDucyRvaXDUPxhEirLR9aFKUYmIdKLzdY33SCTG/22rg+eeZjcC68RZuqV
Sghyf6jWNR3veBbIdGNT0ATVc4xR+Mky/8CU3IbpA/4AuhqJmzepeR63688NtAcu
u30r7oOLtofdRdjlJlznSyQFTKAEUZbKpPoR79rCS7lzB7hSz5SjCMRk8tNFC/6B
HtWQGJ14WkcTYfepdprudoiYdt1bD1jSseDw3RJCcvjaLi+bMcdCcOBpYvoTiQqk
tj9IC3+gNtOPwIpZ1BdAjv/K5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKEzx/YX
x29SAY4+Cd4OYQUHcNQEMB8GA1UdIwQYMBaAFCbYZF7o7jpdHrHS35ebhUm4dh4q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDZDMS9EQjcwNDRFMjdB
MjYxMUVGQUYwN0I2NTVDNEY5QUUwMi9KdGhrWHVqdU9sMGVzZExmbDV1RlNiaDJI
aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0p0aGtYdWp1T2wwZXNkTGZsNXVGU2JoMkhpby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDZDMS9EQjcwNDRFMjdBMjYxMUVGQUYwN0I2NTVDNEY5QUUwMi9KdGhrWHVqdU9s
MGVzZExmbDV1RlNiaDJIaW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANy3FjtKGJe6RcCmui5eJ22+B2kMpw7mAyS5V1t3UK0pB8WUXjjOl6gDKlzja
kuGhHZ9+Z6kAZsLey9fybbikjebQ14sgvBUQMao1Kaj/mwjYaLiI2kA6j28n3G12
f0Ou0I6Obp2o956IDOnOsSv7vKiO18DcdTrGqZWSDQx32MHD1ZRXdbnnuUJIVAiv
Fz25mtqV1Z8pPF57+OQchpE0tH/dOO+1yZOPMTaqcAK7PzdCHHwDBUiNMhl+/SF4
gOUjs4p6KPEtvQfAZNdaewWqA5lMngeI80rWDJPO2h6iOiTOZs0pFtJhQvQt9XCX
RLq60psmodItTtb2ebMRKVezig==
-----END CERTIFICATE-----
Generated at Wed Oct 21 10:13:41 2026 by rpki-client