
$ rpki-client -vvf rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
File: Th_fBBxL3f1RF0jkuYPctGJbmoA.mft (raw, json)
Hash identifier: 1vXvLWunrbQfq1LX9V88KDtwz4Hs5/+cQFTUiiEuUJQ=
Subject key identifier: 9F:C4:8A:8B:AA:9E:D9:52:E1:9F:CA:84:12:54:72:A5:65:85:11:8A
Authority key identifier: 4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80
Certificate issuer: /CN=A91827F2/serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80
Certificate serial: 028D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
Manifest number: 0286
Signing time: Fri 27 Mar 2026 01:22:35 +0000
Manifest this update: Fri 27 Mar 2026 01:22:34 +0000
Manifest next update: Fri 03 Apr 2026 01:22:34 +0000
Files and hashes: 1: Th_fBBxL3f1RF0jkuYPctGJbmoA.crl (hash: F1djp7kHZz5Zx93W1zM0SGEAWZKA35Pkz1abVF0hTpU=)
2: 3CCE23342EF211EE8BE1AB1DC4F9AE02.roa (hash: oSOPa5PXvIuggnUAWdjwD208QEjv6p1RYpA0Azk+9ms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl
rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 653 (0x28d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91827F2, serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80
Validity
Not Before: Mar 27 01:22:34 2026 GMT
Not After : Apr 3 01:22:34 2026 GMT
Subject: CN=69c5dbdb-b73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:fd:2b:68:8f:0c:ab:5a:ba:25:e1:2a:68:
21:b4:e7:8a:9c:d3:08:a8:f6:c7:14:b3:a3:64:0d:
3a:42:2e:66:a7:36:3a:d1:5c:9a:ad:e2:2f:c2:a7:
8e:fc:d1:f1:fc:1b:8a:32:75:62:31:46:c4:c7:61:
77:ba:7f:be:18:d7:cd:a9:a3:1d:40:57:8b:dd:d2:
a6:3f:63:78:dd:20:5a:18:99:d6:30:f5:80:36:45:
96:78:d8:e6:df:fe:80:99:b4:d0:33:c4:f1:4e:da:
0f:41:e8:14:59:54:38:4d:e6:1b:ac:d2:ef:22:61:
c5:63:11:05:16:63:6c:33:bb:28:f7:39:fc:9e:5e:
b1:7b:0d:d1:c9:08:f4:6d:9a:d1:d9:e6:3d:8e:0e:
ee:4e:b2:a6:89:3b:0e:bd:7f:c1:95:b8:e7:a5:86:
01:86:71:6f:1e:36:5a:58:e6:91:5c:70:12:29:e2:
da:65:2a:a7:8e:a8:7d:69:d9:cb:10:76:cf:92:68:
11:97:10:f7:4b:c4:7d:4d:16:f7:9f:12:87:44:2f:
4d:6d:44:05:7c:f3:e7:73:1b:07:b6:5a:b2:2f:a3:
86:76:35:c8:9f:13:82:f3:96:bc:50:9d:96:1f:c5:
45:95:97:7a:4f:e3:29:fc:63:05:f1:cf:db:52:7a:
82:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C4:8A:8B:AA:9E:D9:52:E1:9F:CA:84:12:54:72:A5:65:85:11:8A
X509v3 Authority Key Identifier:
keyid:4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:99:7b:c6:4f:0b:7a:54:c4:26:85:c1:ca:c5:b2:a4:2b:ad:
88:cc:79:15:fb:61:14:fe:cc:23:b8:c4:86:a8:4c:87:a5:83:
46:74:b6:02:96:eb:fd:bc:1f:8e:51:6a:bf:4f:29:c9:a9:66:
46:13:ea:19:1f:fb:e2:b9:e7:e0:8b:f6:51:d0:e7:71:c8:c8:
93:0b:d0:4e:78:f6:34:26:5e:38:1a:63:f5:06:cc:5e:35:b1:
d2:36:92:75:93:b3:90:a2:f8:1f:0c:fe:b4:1c:7f:64:39:60:
ad:a5:38:bf:97:18:b6:fd:a2:aa:af:68:de:31:70:17:ae:cb:
74:7e:18:a2:bf:c7:7e:a0:34:c3:30:54:37:1c:f7:91:3e:25:
86:0e:15:20:e2:cf:03:29:f0:f7:a2:1d:fa:5f:b1:4b:97:7d:
2f:fa:ee:ac:a1:5d:2c:80:65:7e:6f:9a:c4:cc:af:66:9f:90:
8a:62:8d:a4:bc:f7:f9:86:16:ca:61:8e:21:9c:44:3f:18:b8:
60:00:f0:84:12:7f:a1:c7:ef:9c:16:94:a0:77:71:84:45:67:
a7:e8:af:8f:2d:36:ca:74:6f:31:b7:00:2b:3b:4a:2c:1e:c3:
e1:0c:72:ca:ba:48:9f:2d:9a:f0:1b:24:d4:44:0f:dd:18:06:
08:ea:99:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI3RjIxMTAvBgNVBAUTKDRFMUZERjA0MUM0QkRERkQ1MTE3NDhFNEI5ODNEQ0I0
NjI1QjlBODAwHhcNMjYwMzI3MDEyMjM0WhcNMjYwNDAzMDEyMjM0WjAYMRYwFAYD
VQQDEw02OWM1ZGJkYi1iNzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvRv9K2iPDKtauiXhKmghtOeKnNMIqPbHFLOjZA06Qi5mpzY60VyareIvwqeO
/NHx/BuKMnViMUbEx2F3un++GNfNqaMdQFeL3dKmP2N43SBaGJnWMPWANkWWeNjm
3/6AmbTQM8TxTtoPQegUWVQ4TeYbrNLvImHFYxEFFmNsM7so9zn8nl6xew3RyQj0
bZrR2eY9jg7uTrKmiTsOvX/BlbjnpYYBhnFvHjZaWOaRXHASKeLaZSqnjqh9adnL
EHbPkmgRlxD3S8R9TRb3nxKHRC9NbUQFfPPncxsHtlqyL6OGdjXInxOC85a8UJ2W
H8VFlZd6T+Mp/GMF8c/bUnqClwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/Eiouq
ntlS4Z/KhBJUcqVlhRGKMB8GA1UdIwQYMBaAFE4f3wQcS939URdI5LmD3LRiW5qA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdGMi82N0VDNjQzODUz
OUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNmMVJGMGprdVlQY3RHSmJt
b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RoX2ZCQnhMM2YxUkYwamt1WVBjdEdKYm1vQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjdGMi82N0VDNjQzODUzOUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNm
MVJGMGprdVlQY3RHSmJtb0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUpl7xk8LelTEJoXBysWypCutiMx5FfthFP7MI7jEhqhMh6WDRnS2Apbr/bwf
jlFqv08pyalmRhPqGR/74rnn4Iv2UdDnccjIkwvQTnj2NCZeOBpj9QbMXjWx0jaS
dZOzkKL4Hwz+tBx/ZDlgraU4v5cYtv2iqq9o3jFwF67LdH4Yor/HfqA0wzBUNxz3
kT4lhg4VIOLPAynw96Id+l+xS5d9L/rurKFdLIBlfm+axMyvZp+QimKNpLz3+YYW
ymGOIZxEPxi4YADwhBJ/ocfvnBaUoHdxhEVnp+ivjy02ynRvMbcAKztKLB7D4Qxy
yrpIny2a8Bsk1EQP3RgGCOqZXg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:22:34 2026 by rpki-client