
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
File: ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json)
Hash identifier: Wd49UHFyAbh6cXhmF0FldLRtRYVSrgzElKz2yX3XAI0=
Subject key identifier: 0B:85:2E:8E:8F:21:A4:20:FF:CC:76:90:48:FB:86:10:C9:74:0D:EA
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial: 288C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
Manifest number: 27C4
Signing time: Fri 24 Jul 2026 04:22:53 +0000
Manifest this update: Fri 24 Jul 2026 04:22:53 +0000
Manifest next update: Fri 31 Jul 2026 04:22:53 +0000
Files and hashes: 1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: sgNUjJE7PmtmhGclSfuzu1a4XoLTQm2sQI1m8PO2IZk=)
2: 95F76942870611F18212677BADEE528E.roa (hash: rk9TzULw/q41piTyM60TyKzUeoD8YIyWqA04GhfplxQ=)
3: C1B9CC1239DE11F0B191D94AC4F9AE02.roa (hash: SiLYgZw1OeMIYBqXEe6pyhNgEn9BwkIumVDHZgIIEaI=)
4: A225B08645C411F0BF201021C4F9AE02.roa (hash: tk+QeZ4UPLzaOPuRtLxQp0dWF4db1YYy867aIGMRWto=)
5: C4F9C4A03CCB11F0A0971A87C4F9AE02.roa (hash: FVQ+j69/Aeib4yBQpBYMh3Ioo2GLCobZFDyx7BhU9SY=)
6: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: H6EDGgrRbesY/HC/4QOk7KDGC4ogtYE/w/DKgTKt0yw=)
7: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: Z4xoQcPBvcW/VbL6OWwtgSaSohFPMeVXuxF8gcgjMds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10380 (0x288c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Validity
Not Before: Jul 24 04:22:53 2026 GMT
Not After : Jul 31 04:22:53 2026 GMT
Subject: CN=6a62e89d-1079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d2:49:ce:c4:f4:c1:8d:05:a9:cd:21:7a:15:
9a:db:e4:ab:ec:ce:78:59:5b:6c:85:9c:06:07:ff:
29:e9:6f:77:46:3a:9a:f9:34:50:59:26:89:c0:40:
cf:6e:f5:d3:a9:68:50:26:63:9e:a6:9b:69:62:c1:
73:38:aa:dd:21:c6:5d:39:6d:e7:7f:62:df:1e:ba:
7c:5b:21:c2:d3:0d:70:4b:e1:40:dd:7b:0e:7c:51:
c5:e3:28:8e:4e:8d:14:39:39:3d:76:8f:cc:5b:5d:
74:1f:6a:64:6e:44:84:a8:26:42:a8:7b:d9:0f:98:
5a:74:c0:ee:5d:af:0e:5d:fd:01:00:f0:4f:5c:80:
6c:15:28:84:50:02:54:5f:05:43:e0:3b:00:20:63:
d5:c2:28:ea:e4:08:fb:34:72:2e:50:b9:3b:11:dd:
02:b6:a5:8b:96:84:c2:67:0c:c7:8d:23:03:53:a3:
48:ad:56:3b:39:5a:fe:c9:4d:76:0e:4a:af:0f:74:
af:5b:ad:37:e8:d8:a9:f9:17:15:f1:5a:81:7f:42:
74:35:1a:b1:cb:fd:12:f9:d6:d2:39:7e:f6:1e:14:
1f:02:bc:33:fd:dc:ee:a9:80:64:05:fa:77:05:32:
05:d7:dd:4e:91:4f:52:90:47:2c:13:99:e6:1d:64:
1d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:85:2E:8E:8F:21:A4:20:FF:CC:76:90:48:FB:86:10:C9:74:0D:EA
X509v3 Authority Key Identifier:
keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:12:26:83:64:06:45:2c:d7:12:5a:4f:37:56:32:3c:11:de:
06:f7:29:54:11:c3:c3:df:c5:cf:f3:ac:9d:ae:2e:6e:25:74:
5e:71:3e:70:93:23:0d:3f:63:0e:e3:de:2a:ca:5b:e3:4d:92:
a5:20:bd:c5:5a:ae:8a:e3:69:48:53:df:5a:6f:84:46:75:d5:
68:57:da:70:f6:1b:99:1a:33:67:97:f2:25:9d:21:9a:98:fa:
fe:5d:38:06:81:35:0d:7f:95:bf:60:e4:2b:4e:7e:28:21:0b:
72:0d:e6:fd:65:eb:15:f5:f4:42:b8:f9:4f:72:31:40:62:8d:
d4:52:7c:95:2f:e6:19:28:10:7a:72:11:81:98:ad:f1:42:1a:
03:8f:96:b6:28:41:c8:50:5d:61:06:c6:fa:52:b8:df:6d:85:
d9:69:f3:2c:38:2c:0a:cf:d3:2a:db:dc:40:1c:90:91:83:f1:
7b:f0:8c:ab:89:9c:40:1c:02:ba:f4:90:2e:7d:b0:20:16:90:
c1:3f:c8:96:48:a5:13:1c:eb:24:87:3a:76:84:a3:1d:aa:eb:
44:f8:2c:9b:be:43:8c:2a:2c:f8:a3:8f:87:99:b8:4a:86:8e:
6f:08:e0:17:75:39:8d:bf:e0:50:37:b7:ff:53:aa:25:28:ee:
5c:9d:60:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:21:50 2026 by rpki-client