
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
File: ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json)
Hash identifier: hfHi3HaJpXjqssyKNPhk3qIAEckNJAzNN/jx0qLJRTE=
Subject key identifier: 4F:15:24:F2:E0:3D:27:16:29:35:56:F9:F4:3B:43:F4:A5:3A:B6:C1
Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F
Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F
Certificate serial: 2056
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
Manifest number: 202A
Signing time: Thu 24 Sep 2026 15:56:24 +0000
Manifest this update: Thu 24 Sep 2026 15:56:23 +0000
Manifest next update: Thu 01 Oct 2026 15:56:23 +0000
Files and hashes: 1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: FqxvoDItb+pBPZaBRXptL4jG1sEJyaYBNmyUZB0wnRo=)
2: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: 3FqVhcILKyx1ie/mCdr5JeGQHFvwQQEyZoxdiLnn9AY=)
3: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: iYBhniNMDK4Ta8s80jc754k/NLgBpZwzYFFo6cTU2CI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl
rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8278 (0x2056)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F
Validity
Not Before: Sep 24 15:56:23 2026 GMT
Not After : Oct 1 15:56:23 2026 GMT
Subject: CN=6ab54828-36dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c6:4d:36:da:73:29:6c:20:29:69:85:73:40:
e4:8e:ba:f8:03:35:f0:e3:61:17:8a:80:95:d2:99:
bd:24:68:28:7f:9c:04:0e:8d:ed:73:da:9b:43:93:
aa:67:be:8a:9f:bd:b8:ba:b9:d2:ec:91:33:53:0b:
48:60:4e:4b:31:8b:fb:ff:04:a9:f2:b3:2d:ca:f0:
71:ba:98:67:57:36:f4:d8:5b:df:9f:a7:57:fa:77:
b5:a7:b0:52:f2:82:f5:ef:e0:62:fb:05:11:11:e2:
3b:be:87:4c:5b:d0:85:cd:1c:a5:a1:31:43:68:0c:
24:e3:71:cf:d0:cc:65:11:ca:06:f0:57:31:36:53:
a2:61:7e:5a:26:07:dc:6c:b5:88:3e:27:13:41:89:
3a:65:f9:3b:45:d2:a5:2d:69:0d:2b:07:62:43:28:
be:43:12:9f:0c:a3:8a:d1:c8:3a:84:48:f9:59:d9:
e0:3d:d0:95:32:75:48:88:d5:94:ab:0f:9e:8a:0e:
5d:40:3b:67:f7:5a:5c:97:75:8a:c0:20:da:5d:cb:
b4:fa:87:4a:0f:a1:29:7f:1e:8a:70:81:98:e7:b1:
ef:b1:31:4b:d3:4e:4a:65:a5:d1:96:5a:93:87:e5:
e5:a6:e6:47:6f:a2:fa:bb:85:0b:a5:7d:3b:57:7f:
97:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:15:24:F2:E0:3D:27:16:29:35:56:F9:F4:3B:43:F4:A5:3A:B6:C1
X509v3 Authority Key Identifier:
keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:28:9b:2b:47:60:7f:76:1f:83:19:e5:d0:16:35:1c:37:15:
ef:d6:10:c1:9c:e0:0d:f7:55:0d:60:e7:72:4e:3c:5e:34:57:
81:24:c4:e2:46:da:15:5b:19:63:04:b0:a2:83:ba:04:2f:30:
60:67:d5:31:44:bb:e7:ae:2e:3b:da:13:1b:27:c4:54:36:92:
5d:8e:eb:62:62:68:73:8d:b8:21:1d:0b:34:7e:b5:8d:f6:45:
0c:d3:10:54:83:33:89:95:eb:56:1f:bc:b8:a6:e8:24:70:a6:
47:ac:4e:6b:c8:ff:9c:94:30:d3:4d:b5:0f:81:bd:cc:84:7e:
e6:be:0d:d3:56:a8:c6:be:c0:bd:44:c0:71:3d:6e:99:94:c1:
3b:cc:10:06:80:4c:69:35:a6:30:e0:f2:06:3b:1d:ae:a4:69:
b4:1f:80:78:ba:6b:42:d5:d4:fa:c1:dc:98:0c:39:9e:0a:bc:
cc:72:2c:63:70:5d:bf:2b:e7:a1:f7:ff:b3:60:1d:21:d3:27:
7f:73:6c:fb:2c:16:8d:d0:52:85:25:75:80:c3:0e:d3:a7:06:
dc:78:1b:f0:8a:66:2d:b8:4d:4d:6c:65:34:40:9d:7f:9f:8e:
b2:b9:6e:6c:75:4e:bd:86:06:eb:82:89:19:29:7c:99:6b:45:
cc:43:ee:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:53:05 2026 by rpki-client