$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft File: ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json) Hash identifier: bPcQPbXhUMkXgqWcr5FdNQcSnS7QF5KwyghQwR1YJP0= Subject key identifier: 7D:61:09:E0:7C:3C:62:27:E3:16:29:CC:E9:0D:A7:D8:30:0D:FF:D1 Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Certificate serial: 1FF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft Manifest number: 1FCA Signing time: Tue 24 Mar 2026 15:55:00 +0000 Manifest this update: Tue 24 Mar 2026 15:55:00 +0000 Manifest next update: Tue 31 Mar 2026 15:55:00 +0000 Files and hashes: 1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: 5yK7hgD+W74hn6GHq59NlG7J0+v8RRcmlhkdxTW7c8w=) 2: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: zcqW/ZXB+9LNht1rDVWtc7/J4aWwiJffD6rwYXfDvmM=) 3: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: gIJDeDXsBAdTnzpKBgTObqoJlW46Zst5h0OM2UbypNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8180 (0x1ff4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Validity Not Before: Mar 24 15:55:00 2026 GMT Not After : Mar 31 15:55:00 2026 GMT Subject: CN=69c2b3d4-debf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:32:72:02:a4:29:9a:77:bb:ec:e6:1a:b9:da: 39:ff:1b:9e:00:83:bd:01:53:d2:33:04:d9:b7:e6: 47:25:05:03:9e:69:ef:0e:05:70:26:d5:f5:af:26: cc:1e:1c:76:14:7e:cd:d8:71:97:4d:51:57:dc:ce: 83:2f:68:73:a6:c2:b0:c3:f4:20:a4:fd:75:aa:f4: 1e:c5:0c:41:3b:26:72:8b:be:e8:74:39:25:cf:cd: 59:7d:c6:06:1c:4f:57:b2:5a:7a:b4:d5:dd:ea:3d: 3d:8e:1d:0c:58:12:b7:9e:8f:dd:38:bf:72:d7:eb: a9:50:ab:a4:cf:6a:cd:e8:ae:28:96:a6:db:bb:76: e1:28:b4:82:b9:4c:a9:27:72:85:e2:e8:ab:1c:54: 57:39:d8:7e:98:a3:23:f0:dc:ce:d2:94:1f:0f:17: 38:87:3f:1e:ec:69:69:69:b9:9e:b2:ec:9a:05:69: ca:74:37:73:17:15:b6:d2:b1:68:71:23:84:89:29: 29:7e:d7:db:50:ec:8b:5f:f7:97:dd:6e:be:01:58: 9a:bf:a2:65:bb:6f:77:db:d6:1f:bb:be:5f:a2:de: 0e:c8:e0:df:8a:77:2a:bb:f8:99:71:61:f4:5a:a6: cb:73:84:49:1f:3c:ff:36:96:f2:f3:6d:69:b4:c8: f5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:61:09:E0:7C:3C:62:27:E3:16:29:CC:E9:0D:A7:D8:30:0D:FF:D1 X509v3 Authority Key Identifier: keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:e4:54:2e:b3:0b:a6:5e:54:f3:b6:ad:b2:48:b2:14:b3:63: 26:d6:66:c0:8f:ba:b8:78:66:b1:d9:c8:9e:7e:48:0e:4a:dd: c1:55:98:f9:7b:2a:0d:85:ac:14:54:c4:94:96:ab:4b:2d:dc: 5c:36:c9:5b:e7:a2:9f:4e:61:35:37:2c:0c:ce:06:8e:6a:47: d7:5d:9e:8d:0b:83:d1:7d:f5:8d:f5:be:e5:73:27:17:fb:3b: f3:85:ac:80:c5:21:82:05:d4:2f:42:00:de:3b:18:90:f6:93: 8c:71:3c:2f:92:7f:6b:7b:a9:11:20:9a:80:4f:19:aa:12:21: a8:67:23:ac:f1:53:d7:59:01:a7:a5:73:e1:94:04:77:f8:34: 7d:d4:7d:34:e9:9d:ee:53:7a:69:e9:0a:dd:fa:b1:8a:11:13: 0c:62:cf:a2:c1:25:69:86:c6:f1:20:ae:5e:78:81:6f:79:97: ab:e4:4f:bb:10:2f:09:e2:c9:24:4e:61:15:c9:20:3d:5f:15: 9e:ce:08:e8:b1:72:e8:d3:ec:7c:a5:e5:52:99:8b:62:92:0e: 8c:b8:04:41:55:15:74:10:75:3a:67:95:4b:55:cd:43:59:fc: db:7f:85:e8:ee:bf:df:48:21:4c:0d:91:0f:ee:7c:46:af:66: 1a:4f:d3:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q1ODYxMTAvBgNVBAUTKDRFMTBGRTE3NDdFREE2QUJCQkJGMkMyMTMwREI0NTU0 NEU2RDMyOUYwHhcNMjYwMzI0MTU1NTAwWhcNMjYwMzMxMTU1NTAwWjAYMRYwFAYD VQQDEw02OWMyYjNkNC1kZWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7TJyAqQpmne77OYaudo5/xueAIO9AVPSMwTZt+ZHJQUDnmnvDgVwJtX1rybM Hhx2FH7N2HGXTVFX3M6DL2hzpsKww/QgpP11qvQexQxBOyZyi77odDklz81ZfcYG HE9Xslp6tNXd6j09jh0MWBK3no/dOL9y1+upUKukz2rN6K4olqbbu3bhKLSCuUyp J3KF4uirHFRXOdh+mKMj8NzO0pQfDxc4hz8e7GlpabmesuyaBWnKdDdzFxW20rFo cSOEiSkpftfbUOyLX/eX3W6+AViav6Jlu29329Yfu75fot4OyODfincqu/iZcWH0 WqbLc4RJHzz/Npby821ptMj1YwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH1hCeB8 PGIn4xYpzOkNp9gwDf/RMB8GA1UdIwQYMBaAFE4Q/hdH7aaru78sITDbRVRObTKf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDU4Ni84RjAwQzZCNjU1 MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBxdTd2eXdoTU50RlZFNXRN cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRC1GMGZ0cHF1N3Z5d2hNTnRGVkU1dE1wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDU4Ni84RjAwQzZCNjU1MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBx dTd2eXdoTU50RlZFNXRNcDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAceRULrMLpl5U87atskiyFLNjJtZmwI+6uHhmsdnInn5IDkrdwVWY+XsqDYWs FFTElJarSy3cXDbJW+ein05hNTcsDM4GjmpH112ejQuD0X31jfW+5XMnF/s784Ws gMUhggXUL0IA3jsYkPaTjHE8L5J/a3upESCagE8ZqhIhqGcjrPFT11kBp6Vz4ZQE d/g0fdR9NOmd7lN6aekK3fqxihETDGLPosElaYbG8SCuXniBb3mXq+RPuxAvCeLJ JE5hFckgPV8Vns4I6LFy6NPsfKXlUpmLYpIOjLgEQVUVdBB1OmeVS1XNQ1n823+F 6O6/30ghTA2RD+58Rq9mGk/T5g== -----END CERTIFICATE-----Generated at Thu Mar 26 15:42:33 2026 by rpki-client