
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
File: THDgIDLqWcKv1UGhhw10sEDRtqI.mft (raw, json)
Hash identifier: FRO4kd8k0BgaPCsH91R9t8h0QvbgANO4EQ6i1W0y2Sw=
Subject key identifier: 25:3E:23:93:FF:AE:10:B4:BA:95:24:FB:C5:DB:F0:EF:DD:40:9C:9D
Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
Certificate issuer: /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
Certificate serial: 09D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
Manifest number: 09C1
Signing time: Tue 12 May 2026 19:58:05 +0000
Manifest this update: Tue 12 May 2026 19:58:05 +0000
Manifest next update: Tue 19 May 2026 19:58:05 +0000
Files and hashes: 1: THDgIDLqWcKv1UGhhw10sEDRtqI.crl (hash: HqoHU/eyDYLMf67nlcj6RieCo6S6g7oerS+KQDVwXZo=)
2: 05CABF92A64111EAB544074CC4F9AE02.roa (hash: SF124PgFJdMgEInYT/GtV8Bi1Qw6o/zRPCKi4I6lOOw=)
3: 193128AAD15D11EE8BD5C02BC4F9AE02.roa (hash: GsGKse+jvZV0Ypq4tt+9yydVOYc4iOZZx7JlseayyeQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl
rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:58:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2512 (0x9d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D615F, serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
Validity
Not Before: May 12 19:58:05 2026 GMT
Not After : May 19 19:58:05 2026 GMT
Subject: CN=6a03864d-4843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2e:ba:bf:87:48:d3:cd:9d:56:e4:f7:af:63:
d4:c0:f5:11:54:16:da:c6:ed:f8:b9:14:52:02:9b:
b0:e0:95:96:68:61:85:c1:35:d9:7d:c0:ec:33:3b:
2b:a2:0c:5c:af:74:08:76:d0:d0:72:35:75:9f:2d:
04:b3:56:8b:5f:2a:da:2f:14:f2:b0:4a:fb:ea:7d:
c8:e0:db:fb:4e:22:c7:ca:83:d6:78:c4:b9:fa:6b:
58:2b:55:1c:c3:08:2a:79:39:c7:3c:be:7a:4a:7b:
5d:82:d7:2d:12:07:f9:73:47:1c:c8:4a:27:fe:1f:
99:8f:81:d1:97:86:aa:7c:3e:4f:83:f3:c3:87:15:
17:e8:70:2f:7c:ac:7d:11:18:db:68:44:f6:c2:40:
7a:9a:2e:fc:5e:69:6f:18:4d:ed:11:30:58:f1:92:
97:ed:c3:4f:11:61:75:fc:a3:4d:4c:68:e6:66:9e:
a5:2a:6b:93:d8:3b:65:1d:c9:1d:e2:79:91:9d:ad:
54:95:94:4b:a3:6d:ce:ef:51:7a:43:ef:0f:7b:91:
57:30:57:bf:b2:5b:cf:76:bd:68:b2:88:3d:e7:13:
23:77:b5:64:55:3f:2b:15:aa:00:ef:90:39:20:c8:
1c:4e:70:c2:24:c9:08:ab:b3:fe:14:0a:21:00:57:
14:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3E:23:93:FF:AE:10:B4:BA:95:24:FB:C5:DB:F0:EF:DD:40:9C:9D
X509v3 Authority Key Identifier:
keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d9:2e:65:9f:d2:d3:a9:9d:0d:90:74:6a:05:2a:35:3b:07:
94:dd:39:36:9e:45:83:3a:b8:ed:e5:0e:32:6d:26:67:af:73:
c1:1d:1d:84:51:18:6b:97:e2:0f:15:fa:ca:5e:d5:3c:95:4c:
87:1f:7e:5f:8b:71:46:55:66:76:9a:ab:1d:34:c0:7a:06:c5:
5b:e4:d1:1a:7e:9f:35:91:ea:ce:39:3d:36:fc:04:ef:65:98:
de:16:44:45:e9:28:15:7d:fd:c6:4d:10:01:a4:2d:30:a1:ca:
a3:1a:ae:6f:7f:b7:48:e2:c8:95:f8:88:15:2b:6f:de:b5:54:
46:79:6f:ae:b2:53:61:64:68:32:c3:29:b1:9d:a2:80:52:e2:
f7:54:c8:21:88:cc:ca:7b:55:cd:19:24:cf:cc:ff:07:18:ef:
92:bf:58:14:ec:fc:17:1e:1d:f0:1a:60:bb:eb:3c:6b:87:d5:
1e:0f:75:ab:f3:c1:52:b7:45:82:74:01:50:d3:8e:ff:87:6b:
be:14:ab:98:2d:4d:49:66:5e:cd:8a:58:3f:43:f0:82:2a:6f:
02:9d:a6:3b:05:c9:b4:01:5a:26:62:bc:c1:7d:0a:f5:c5:2c:
93:01:c4:20:b9:36:24:a2:5f:0a:e6:50:81:9f:da:96:ae:0f:
a9:cc:5a:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDYxNUYxMTAvBgNVBAUTKDRDNzBFMDIwMzJFQTU5QzJBRkQ1NDFBMTg3MEQ3NEIw
NDBEMUI2QTIwHhcNMjYwNTEyMTk1ODA1WhcNMjYwNTE5MTk1ODA1WjAYMRYwFAYD
VQQDEw02YTAzODY0ZC00ODQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyC66v4dI082dVuT3r2PUwPURVBbaxu34uRRSApuw4JWWaGGFwTXZfcDsMzsr
ogxcr3QIdtDQcjV1ny0Es1aLXyraLxTysEr76n3I4Nv7TiLHyoPWeMS5+mtYK1Uc
wwgqeTnHPL56SntdgtctEgf5c0ccyEon/h+Zj4HRl4aqfD5Pg/PDhxUX6HAvfKx9
ERjbaET2wkB6mi78XmlvGE3tETBY8ZKX7cNPEWF1/KNNTGjmZp6lKmuT2DtlHckd
4nmRna1UlZRLo23O71F6Q+8Pe5FXMFe/slvPdr1osog95xMjd7VkVT8rFaoA75A5
IMgcTnDCJMkIq7P+FAohAFcUpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCU+I5P/
rhC0upUk+8Xb8O/dQJydMB8GA1UdIwQYMBaAFExw4CAy6lnCr9VBoYcNdLBA0bai
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjE1Ri9GMzEyQ0EyNkE2
M0YxMUVBOEQwNjgyNEFDNEY5QUUwMi9USERnSURMcVdjS3YxVUdoaHcxMHNFRFJ0
cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RIRGdJRExxV2NLdjFVR2hodzEwc0VEUnRxSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NjE1Ri9GMzEyQ0EyNkE2M0YxMUVBOEQwNjgyNEFDNEY5QUUwMi9USERnSURMcVdj
S3YxVUdoaHcxMHNFRFJ0cUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoNkuZZ/S06mdDZB0agUqNTsHlN05Np5Fgzq47eUOMm0mZ69zwR0dhFEYa5fi
DxX6yl7VPJVMhx9+X4txRlVmdpqrHTTAegbFW+TRGn6fNZHqzjk9NvwE72WY3hZE
RekoFX39xk0QAaQtMKHKoxqub3+3SOLIlfiIFStv3rVURnlvrrJTYWRoMsMpsZ2i
gFLi91TIIYjMyntVzRkkz8z/Bxjvkr9YFOz8Fx4d8Bpgu+s8a4fVHg91q/PBUrdF
gnQBUNOO/4drvhSrmC1NSWZezYpYP0PwgipvAp2mOwXJtAFaJmK8wX0K9cUskwHE
ILk2JKJfCuZQgZ/alq4PqcxaYQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:42:28 2026 by rpki-client