
$ rpki-client -vvf rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
File: THCMnrGnIEQyp34ljBbNGCB8VXM.mft (raw, json)
Hash identifier: 4MgmU3vQ+KcsHnFYhJgJ+4Zy2tmVi5YjCw3paZp1Wos=
Subject key identifier: 5A:59:3A:43:F2:3D:8F:93:18:05:C7:6C:F3:E5:69:60:48:2A:9C:D1
Authority key identifier: 4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73
Certificate issuer: /CN=A91880A4/serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
Manifest number: 67
Signing time: Fri 27 Mar 2026 07:29:23 +0000
Manifest this update: Fri 27 Mar 2026 07:29:23 +0000
Manifest next update: Fri 03 Apr 2026 07:29:23 +0000
Files and hashes: 1: THCMnrGnIEQyp34ljBbNGCB8VXM.crl (hash: ohdw2Fd1WYUTv+WomymOptpbVEvnbBO+zJ0lT+V09U4=)
2: 006500928EE611F094A24C77C4F9AE02.roa (hash: JvNAPDalguuZAryPwlyPinfBOmbcTwSQAasxzcL/9JE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl
rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 07:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91880A4, serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573
Validity
Not Before: Mar 27 07:29:23 2026 GMT
Not After : Apr 3 07:29:23 2026 GMT
Subject: CN=69c631d3-bf34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d2:b1:dd:b6:0e:85:7e:48:22:19:f0:f0:82:
2e:77:e6:50:71:c5:a3:dc:84:f6:01:40:30:96:7a:
cc:2d:43:7a:bd:4f:54:be:6e:25:eb:61:5a:cd:e7:
ad:47:53:30:ac:e2:2b:91:bf:37:1a:dd:9f:75:f7:
1e:82:ee:2c:04:d2:13:dd:b3:d6:1e:7b:03:fb:f0:
f7:63:9f:9d:8e:f7:c3:8e:51:08:1c:73:45:ac:f6:
05:f8:4a:a1:9c:bb:7b:d8:63:e7:fa:47:60:1a:bb:
cb:b6:fc:36:5c:85:39:6b:56:01:dd:17:12:df:fe:
78:66:08:98:ac:fb:18:ac:46:7d:57:21:64:da:19:
f6:31:af:1b:05:d5:b9:63:6e:79:0b:d1:17:6c:66:
f6:4c:59:4f:68:c1:44:67:07:e1:59:43:29:ec:4d:
cc:5c:d9:46:bc:83:d9:2a:06:a4:21:e3:80:ac:2a:
c9:cd:3e:41:d3:ad:4e:ed:0c:66:f8:7f:07:98:1e:
8b:5e:1f:e7:d3:3c:a3:9c:55:29:fb:e3:5f:a6:2b:
24:60:e9:e3:31:ab:4f:b2:9b:7a:29:cc:ab:99:fc:
8e:21:e6:54:96:00:7e:3a:7f:db:9c:a4:af:ae:08:
a5:f2:2b:43:fa:23:59:96:4f:80:7c:80:d8:b5:fd:
1d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:59:3A:43:F2:3D:8F:93:18:05:C7:6C:F3:E5:69:60:48:2A:9C:D1
X509v3 Authority Key Identifier:
keyid:4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2a:f8:3b:a0:f2:b2:b4:c9:82:a2:9e:a4:26:35:4c:c7:a0:
af:4c:80:38:78:4b:2b:3c:d6:fa:d7:87:44:4b:91:51:23:90:
40:a7:6f:7a:74:91:c3:32:41:95:34:ca:77:74:ca:c0:9d:e8:
3a:2a:f7:82:d1:36:8a:06:04:8a:85:5c:64:e4:ba:5d:4d:f0:
bb:55:84:e3:57:e8:27:74:5b:0d:4c:2e:d6:11:cc:b8:2d:9f:
74:26:6b:9d:6e:b1:ae:c6:de:7a:6e:b1:97:28:fd:59:e4:80:
5a:1f:04:bd:1b:4c:a6:aa:97:ff:36:4d:89:e7:7c:aa:6a:56:
71:ea:3e:98:76:22:1d:e3:8b:15:e5:37:0c:f1:60:4b:45:64:
36:6e:fa:02:99:93:32:fa:17:fb:b4:06:77:50:3e:f3:ca:58:
2e:19:94:60:03:27:13:66:33:2c:a2:5c:89:33:12:e0:8c:5e:
89:f2:c9:ac:fe:9d:5d:2d:3f:2a:58:d4:1f:6d:c1:4c:9b:73:
8c:24:5f:50:c4:a4:a2:18:05:79:43:42:aa:ae:26:af:ad:d4:
db:70:7f:be:ff:1a:66:66:75:29:1d:3f:77:9e:53:89:d1:5d:
5b:6a:18:45:09:3e:7b:03:5f:c9:5d:4e:0b:8a:e6:c4:e2:47:
e3:a7:d6:f0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
ODBBNDExMC8GA1UEBRMoNEM3MDhDOUVCMUE3MjA0NDMyQTc3RTI1OEMxNkNEMTgy
MDdDNTU3MzAeFw0yNjAzMjcwNzI5MjNaFw0yNjA0MDMwNzI5MjNaMBgxFjAUBgNV
BAMTDTY5YzYzMWQzLWJmMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDM0rHdtg6FfkgiGfDwgi535lBxxaPchPYBQDCWeswtQ3q9T1S+biXrYVrN561H
UzCs4iuRvzca3Z919x6C7iwE0hPds9YeewP78Pdjn52O98OOUQgcc0Ws9gX4SqGc
u3vYY+f6R2Aau8u2/DZchTlrVgHdFxLf/nhmCJis+xisRn1XIWTaGfYxrxsF1blj
bnkL0RdsZvZMWU9owURnB+FZQynsTcxc2Ua8g9kqBqQh44CsKsnNPkHTrU7tDGb4
fweYHoteH+fTPKOcVSn741+mKyRg6eMxq0+ym3opzKuZ/I4h5lSWAH46f9ucpK+u
CKXyK0P6I1mWT4B8gNi1/R2rAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWlk6Q/I9
j5MYBcds8+VpYEgqnNEwHwYDVR0jBBgwFoAUTHCMnrGnIEQyp34ljBbNGCB8VXMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4MEE0Lzc4RDI2OTNFOEU1
MDExRjA4NzNERUIwQ0M0RjlBRTAyL1RIQ01uckduSUVReXAzNGxqQmJOR0NCOFZY
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVEhDTW5yR25JRVF5cDM0bGpCYk5HQ0I4VlhNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4
MEE0Lzc4RDI2OTNFOEU1MDExRjA4NzNERUIwQ0M0RjlBRTAyL1RIQ01uckduSUVR
eXAzNGxqQmJOR0NCOFZYTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBNKvg7oPKytMmCop6kJjVMx6CvTIA4eEsrPNb614dES5FRI5BAp296dJHDMkGV
NMp3dMrAneg6KveC0TaKBgSKhVxk5LpdTfC7VYTjV+gndFsNTC7WEcy4LZ90Jmud
brGuxt56brGXKP1Z5IBaHwS9G0ymqpf/Nk2J53yqalZx6j6YdiId44sV5TcM8WBL
RWQ2bvoCmZMy+hf7tAZ3UD7zylguGZRgAycTZjMsolyJMxLgjF6J8sms/p1dLT8q
WNQfbcFMm3OMJF9QxKSiGAV5Q0KqriavrdTbcH++/xpmZnUpHT93nlOJ0V1bahhF
CT57A1/JXU4LiubE4kfjp9bw
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:17:35 2026 by rpki-client