
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
File: ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json)
Hash identifier: FlWp9re5r8WkCHPPQpIMgb+JrTcfTamJjqIjWE0sfdk=
Subject key identifier: 63:53:32:69:F1:2A:24:CE:05:89:13:75:8A:15:43:F6:C2:D0:2E:A0
Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F
Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F
Certificate serial: 2035
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
Manifest number: 2009
Signing time: Wed 22 Jul 2026 16:02:59 +0000
Manifest this update: Wed 22 Jul 2026 16:02:58 +0000
Manifest next update: Wed 29 Jul 2026 16:02:58 +0000
Files and hashes: 1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: lo+6+wkQ7Jkm+zKFXHq0cn1tK8zyPO4EzJZU1AF7jIw=)
2: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: 3FqVhcILKyx1ie/mCdr5JeGQHFvwQQEyZoxdiLnn9AY=)
3: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: iYBhniNMDK4Ta8s80jc754k/NLgBpZwzYFFo6cTU2CI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl
rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8245 (0x2035)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F
Validity
Not Before: Jul 22 16:02:58 2026 GMT
Not After : Jul 29 16:02:58 2026 GMT
Subject: CN=6a60e9b2-8b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:0f:b9:d9:a9:3f:31:cf:9d:a4:1d:2c:ed:
57:b1:5a:2c:50:80:35:49:22:4e:c9:f8:85:86:fe:
b7:23:e6:a6:c6:e7:e1:e8:52:44:e8:6b:25:3d:17:
6f:77:7b:7a:06:72:14:8a:eb:7d:0b:3f:db:43:d3:
52:af:d0:18:3a:3e:c4:f6:d8:7e:15:4c:9f:16:9b:
d5:95:1c:c3:19:4d:29:4b:50:bd:86:54:4a:e5:ad:
a3:bf:e7:17:d8:97:ef:02:d4:31:5e:87:6e:06:28:
ff:11:10:85:da:16:4f:5d:b4:1a:53:68:73:e8:b6:
67:70:a6:16:8b:11:53:a2:c4:c2:b8:1c:0b:73:f4:
e4:b5:2d:71:49:da:88:b9:d0:16:45:86:40:78:00:
ce:6a:0b:30:ed:a6:fb:d4:45:7a:63:76:d3:1c:75:
7a:0d:d2:c6:a5:61:cb:5d:1f:66:60:af:97:40:38:
98:d9:d6:33:8e:c8:84:04:9a:36:d8:42:d1:9f:4a:
3a:9b:99:92:f3:4c:3b:f2:d2:c1:60:9a:1e:78:a9:
86:65:e9:57:98:c0:0a:58:b5:c1:36:84:91:15:1e:
d9:fb:d0:b4:60:8e:82:8c:97:fd:38:92:82:21:88:
86:83:7e:b0:90:a8:6c:39:ec:e9:28:3b:3d:a0:53:
56:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:53:32:69:F1:2A:24:CE:05:89:13:75:8A:15:43:F6:C2:D0:2E:A0
X509v3 Authority Key Identifier:
keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:38:7c:8c:89:1c:78:55:21:e9:4c:2b:d4:d8:df:8f:c2:8d:
b7:26:be:cd:4b:41:b7:f7:ed:4b:91:09:67:c4:40:95:63:41:
93:9f:67:86:c3:97:92:92:f4:59:60:d5:7d:10:d5:95:21:22:
02:a5:83:e3:47:2b:10:1d:d7:3c:ba:9e:45:fa:c2:e6:1f:d8:
94:7c:cf:de:a0:a4:bf:55:9c:58:91:d1:46:79:41:13:f6:38:
05:d9:3e:48:70:95:8f:18:2e:ee:a4:5f:b7:f3:2d:d8:6e:8a:
09:04:7a:fc:71:d3:b0:e8:ee:b3:63:9a:d3:1d:cb:54:58:c5:
cb:a0:59:fe:c1:e3:ee:2e:02:af:eb:e1:a9:b7:62:6b:ca:9f:
45:b1:fc:eb:45:a1:f1:85:b2:ca:09:f4:30:9f:f4:24:9e:95:
4a:93:d4:0e:9e:b4:00:8e:1a:02:9e:57:07:06:36:c6:ee:9a:
af:7a:a0:7f:63:12:e4:c1:d2:5a:94:90:43:da:ce:1d:3f:54:
5f:00:9c:65:09:af:c4:96:a3:22:d1:86:9c:24:6d:c1:ca:84:
75:a9:af:d4:09:bd:ba:9e:17:6f:b8:9e:58:8b:e6:c5:84:17:
d1:9a:3c:d4:05:60:ba:cc:30:a0:00:3c:16:99:1e:bd:e5:a0:
f6:40:5c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:40:11 2026 by rpki-client