
$ rpki-client -vvf rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
File: THCMnrGnIEQyp34ljBbNGCB8VXM.mft (raw, json)
Hash identifier: axb+ukNW2r5X2wutkbUjzf3e3zXnrSqwe2stqcgUbTI=
Subject key identifier: 16:41:FC:1F:3F:86:51:4F:5F:40:2F:BF:74:15:D0:47:DA:CB:B4:41
Authority key identifier: 4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73
Certificate issuer: /CN=A91880A4/serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
Manifest number: A2
Signing time: Thu 23 Jul 2026 09:06:23 +0000
Manifest this update: Thu 23 Jul 2026 09:06:22 +0000
Manifest next update: Thu 30 Jul 2026 09:06:22 +0000
Files and hashes: 1: THCMnrGnIEQyp34ljBbNGCB8VXM.crl (hash: HgCM8fPPPfX/+tTzskeyljWuZd+0QOp4We7dfM+4mPk=)
2: 006500928EE611F094A24C77C4F9AE02.roa (hash: JvNAPDalguuZAryPwlyPinfBOmbcTwSQAasxzcL/9JE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl
rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:06:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91880A4, serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573
Validity
Not Before: Jul 23 09:06:22 2026 GMT
Not After : Jul 30 09:06:22 2026 GMT
Subject: CN=6a61d98e-d333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:68:9d:a9:fe:1e:a9:2c:65:cb:0d:c8:b3:fd:
d1:4d:23:13:c1:8b:46:66:07:90:9d:68:70:a3:35:
ac:e3:dc:4e:46:df:84:e4:e0:e7:26:31:bc:81:60:
29:28:67:b4:03:fc:3d:38:ff:8b:55:be:90:72:d0:
05:cf:56:b7:06:e6:5e:02:ff:c4:ca:a6:03:58:a9:
4f:46:30:e1:da:75:0b:84:6c:63:52:96:53:8c:7d:
ce:1c:c6:2c:ef:7b:b6:01:9d:bd:01:6c:01:2a:f4:
e3:91:cd:15:08:7f:49:83:9d:1c:21:77:66:6d:14:
9b:7c:62:8c:aa:1b:42:fa:5a:61:5c:e5:27:c3:ce:
bf:b9:c8:dc:f2:76:ce:f6:b2:39:60:f5:56:8a:ef:
f7:4a:c8:1c:5b:ec:ab:38:84:ed:cf:b6:6a:0e:06:
fd:26:72:80:c0:9e:70:f6:1e:6b:66:bb:06:c4:ff:
25:4b:7b:16:70:ad:1a:28:7b:98:01:fc:5d:a5:44:
18:8c:53:6d:b8:09:7c:c0:2b:c8:d6:c8:94:9e:59:
7d:01:f8:6b:34:24:66:05:76:ad:fb:5d:8f:45:9d:
df:7b:67:b8:7e:60:a9:ca:90:ba:7d:df:91:67:56:
eb:25:b4:fb:d0:45:1e:67:99:c0:08:eb:cb:23:20:
97:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:41:FC:1F:3F:86:51:4F:5F:40:2F:BF:74:15:D0:47:DA:CB:B4:41
X509v3 Authority Key Identifier:
keyid:4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:94:3e:e5:5d:6e:17:4b:f7:f0:44:df:49:76:07:2a:5e:ad:
6a:d8:54:45:4f:2c:05:32:36:34:34:aa:a7:19:bb:05:b5:70:
c2:47:ec:bd:14:79:30:21:ab:0e:30:80:41:96:aa:01:9b:cb:
2c:e9:6b:f2:97:54:af:e8:be:0b:5a:f7:0d:4b:64:9f:dc:3f:
7c:f1:d0:9b:cb:e7:f9:c2:aa:8f:b3:e0:6f:9b:23:b1:5b:4f:
36:91:d9:6f:cd:ab:dc:18:91:86:7e:a5:7c:08:c5:59:37:d0:
7f:e1:78:cc:dd:c3:3b:01:62:0a:14:8f:8a:52:f0:8e:2e:c6:
e0:60:9f:74:1a:5a:97:5f:4b:22:ab:e3:7d:46:26:a3:e0:1a:
1b:9b:50:04:af:da:2e:46:81:5a:cb:dd:58:2e:34:9b:87:b9:
02:09:bb:9a:c5:3c:0d:78:64:d8:f0:7b:a8:74:c9:0e:6d:32:
65:4b:94:51:cd:1b:bd:14:63:0b:f8:7e:fa:81:db:cf:00:d5:
1d:15:0b:32:6c:24:ba:27:46:62:49:61:58:ea:34:95:6e:4a:
a7:a0:ae:f2:e7:76:88:41:91:20:15:1a:d1:fc:e7:3d:5b:43:
54:c4:e6:61:ef:01:c6:a0:ed:bc:92:99:e3:e4:28:af:e4:3f:
81:0c:26:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:34:26 2026 by rpki-client