
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
File: ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json)
Hash identifier: IS7AlUiT78iI5NmSBSoyr+RGa0W4E8KLrN0uRzHtmBY=
Subject key identifier: 04:FD:6A:DC:84:63:D0:B7:37:DA:37:61:7D:7D:44:65:C6:39:C3:94
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial: 2833
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
Manifest number: 2798
Signing time: Tue 12 May 2026 15:40:04 +0000
Manifest this update: Tue 12 May 2026 15:40:03 +0000
Manifest next update: Tue 19 May 2026 15:40:03 +0000
Files and hashes: 1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: b5T5/6WnpmMlcwbvzIdG2d/7kfp3vpYHI1SUFxkdQe8=)
2: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: 0y46BeXruaNKVYGK3sSOFaknvPcRcCBPrAnJT2GiGNE=)
3: C4F9C4A03CCB11F0A0971A87C4F9AE02.roa (hash: r5fbxI0WJ85khg1DClSgXh3Irn73Y6H673j1SQaIjlc=)
4: C1B9CC1239DE11F0B191D94AC4F9AE02.roa (hash: bTGu2zB2ESK3lcb95XRn7MM3mRoXHydCNIwOXJGKotE=)
5: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: /b2iGNmgsoH3oYnD0+GawLqES8NHKHRa1wi6NduhII0=)
6: A225B08645C411F0BF201021C4F9AE02.roa (hash: BE2zRx/3elB7xqVfohdyNToO9hyajrdCUc2+YZJG60s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:40:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10291 (0x2833)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Validity
Not Before: May 12 15:40:03 2026 GMT
Not After : May 19 15:40:03 2026 GMT
Subject: CN=6a0349d4-8ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:88:2a:d5:50:5f:11:72:9c:e2:99:d5:2f:c9:
3d:4d:c6:c7:f0:75:1c:e5:35:76:ea:eb:ba:01:d3:
27:19:76:01:46:51:e1:16:1a:14:58:6c:df:58:32:
71:a8:f2:ee:28:a4:c8:5a:eb:a3:4d:43:19:f9:2b:
60:40:e7:0f:cc:f9:63:99:09:01:54:4d:c2:c6:39:
88:bc:84:a4:58:b7:02:b1:a3:de:a0:d8:46:28:5d:
1c:91:b7:6a:48:65:5c:65:13:5d:59:a7:a4:e5:a6:
f0:b0:20:c6:e6:92:b9:29:9e:89:dc:65:82:07:a7:
6e:99:fa:45:01:d2:b3:b0:1a:01:11:0b:93:c1:06:
01:b6:bc:c9:0a:b0:fd:ec:a7:d3:27:ec:1f:77:cb:
05:40:6c:52:a3:22:4d:aa:9e:3f:d0:18:14:4a:a9:
9b:0b:c4:bd:00:3e:29:f1:45:e8:93:90:ce:39:7a:
53:08:83:0a:e2:72:5f:4e:22:0d:0d:3c:27:85:a1:
87:de:92:73:1b:ed:b1:26:b1:35:17:d0:36:13:ab:
cf:00:f2:76:1b:7b:58:d6:bf:c5:8f:4d:8f:d0:15:
4f:5b:82:bb:cf:a5:ef:30:43:ef:b6:06:b9:5d:65:
5b:7c:6d:26:7c:4b:66:8c:f3:38:ea:a2:98:ed:a0:
bd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FD:6A:DC:84:63:D0:B7:37:DA:37:61:7D:7D:44:65:C6:39:C3:94
X509v3 Authority Key Identifier:
keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:15:c2:85:a1:85:c7:93:a8:6c:1f:38:43:59:07:94:e8:21:
06:25:ad:cc:de:d6:d8:a3:6e:2f:8f:53:82:4d:cb:60:7f:50:
96:a3:b4:10:a9:01:ce:fb:ca:70:06:8b:79:9d:4d:62:0a:01:
dc:67:82:58:79:42:d8:6c:b2:a6:88:00:6d:0f:98:6c:bd:62:
fe:d8:f7:8d:2f:f7:64:c5:13:94:7d:40:7e:64:36:ad:a4:39:
45:3e:b1:d4:bb:09:e0:90:3b:55:e7:2b:6a:e1:03:9e:4f:50:
3d:59:3f:49:93:20:bc:60:58:31:be:b4:77:4e:c7:d4:4a:af:
94:6d:29:29:b1:ea:38:c3:be:52:4a:55:22:8b:c8:2d:56:48:
1a:78:4e:0d:cf:8b:0c:f2:d7:42:d6:21:83:e7:6e:17:00:53:
1e:15:c2:2e:24:33:85:5e:b6:ec:e5:0f:19:f9:43:6e:70:1b:
85:f8:ba:64:76:25:0d:83:86:0e:f4:0b:6d:7d:a1:60:d6:29:
05:07:97:80:49:8e:d7:25:93:ac:06:c9:66:0f:0f:de:f7:7f:
a4:a3:ff:b5:28:af:22:04:ba:3f:b2:69:00:8b:05:f4:48:c5:
af:b1:27:ab:ed:86:73:b5:54:59:7b:4b:b6:c4:a9:96:a6:7a:
02:54:15:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:31 2026 by rpki-client