
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
File: ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json)
Hash identifier: dcXjAkNN0vuipalga0rYDBJfnumbv2MfI0SEE7s+Pqk=
Subject key identifier: A0:C2:8A:C5:5E:10:93:A8:97:52:A7:36:51:5C:AB:14:EE:68:52:04
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial: 2827
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
Manifest number: 278C
Signing time: Sat 18 Apr 2026 15:36:38 +0000
Manifest this update: Sat 18 Apr 2026 15:36:37 +0000
Manifest next update: Sat 25 Apr 2026 15:36:37 +0000
Files and hashes: 1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: 5MAP0V2zt09WmfMfmF7EXfVJeoxL91ygaQCfLNL11/4=)
2: C1B9CC1239DE11F0B191D94AC4F9AE02.roa (hash: bTGu2zB2ESK3lcb95XRn7MM3mRoXHydCNIwOXJGKotE=)
3: C4F9C4A03CCB11F0A0971A87C4F9AE02.roa (hash: r5fbxI0WJ85khg1DClSgXh3Irn73Y6H673j1SQaIjlc=)
4: A225B08645C411F0BF201021C4F9AE02.roa (hash: BE2zRx/3elB7xqVfohdyNToO9hyajrdCUc2+YZJG60s=)
5: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: /b2iGNmgsoH3oYnD0+GawLqES8NHKHRa1wi6NduhII0=)
6: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: 0y46BeXruaNKVYGK3sSOFaknvPcRcCBPrAnJT2GiGNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 15:36:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10279 (0x2827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Validity
Not Before: Apr 18 15:36:37 2026 GMT
Not After : Apr 25 15:36:37 2026 GMT
Subject: CN=69e3a505-52f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0c:36:d3:26:3b:db:e8:bf:3c:b0:3a:95:0f:
ba:f6:58:36:2f:46:68:83:f9:0e:c5:4d:2f:3f:bb:
c1:0f:42:c5:49:cb:62:45:41:d7:72:d7:7e:4d:26:
6f:5a:1f:32:27:05:88:4b:fd:60:28:79:34:b7:08:
b4:1f:18:94:51:9b:e4:fa:dc:87:2e:d9:45:3f:92:
8b:14:5b:8f:1b:1b:0b:58:71:cc:0a:b8:ea:08:4d:
4e:4e:68:a2:c8:53:59:8b:c3:c8:3c:31:bb:29:28:
89:86:92:bd:ec:ce:70:77:5b:36:fe:28:41:0e:6e:
66:97:5c:57:26:3e:d6:2b:0c:94:c9:63:bb:aa:ee:
44:b0:8e:7a:82:1e:32:27:41:e1:33:a6:5f:8a:e7:
36:13:17:0c:07:1b:88:ae:85:25:71:f3:09:2f:ca:
e5:11:5a:72:cd:80:f8:85:e9:1f:43:f8:89:57:21:
30:0d:b0:65:02:35:78:c5:04:f4:c4:70:9e:1e:b7:
fc:f9:5a:25:52:29:9d:64:35:cf:59:d7:c1:53:3c:
a6:d0:07:6b:bc:fb:4c:40:ba:ac:e7:d8:03:52:f7:
99:fb:73:7f:bf:f4:14:d8:83:9a:57:5c:4c:1e:ae:
45:55:5f:c9:47:3e:24:d5:0f:f9:1f:ff:b8:7f:00:
5c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C2:8A:C5:5E:10:93:A8:97:52:A7:36:51:5C:AB:14:EE:68:52:04
X509v3 Authority Key Identifier:
keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:a1:ce:3c:2c:d5:0c:6b:9c:90:59:44:1f:94:8b:0e:0d:88:
82:ac:25:0d:61:f9:36:28:ef:45:fe:99:88:19:ce:2d:80:e9:
5e:da:94:12:e0:78:d6:a0:20:b5:4f:c9:50:8e:2b:48:39:d8:
45:bc:c4:09:1e:fb:42:8b:0c:5b:55:33:d9:ac:e0:c6:af:93:
3c:50:ce:3c:6d:7d:93:63:73:a3:25:af:3c:ca:de:8c:8c:e0:
ac:85:86:e4:b6:87:3e:9a:d1:fb:c1:37:d3:e9:74:0d:3f:ec:
ea:24:d2:29:9d:c4:af:db:06:7b:6f:32:b1:91:af:67:c5:22:
db:06:93:70:41:06:a0:4e:c7:74:aa:c8:ad:d8:84:48:c3:ac:
4c:a5:b0:95:75:e8:aa:fc:1d:fe:57:92:da:cd:a1:00:1d:55:
cf:a7:7b:56:5d:ec:69:2b:3c:67:07:68:4f:ec:8f:ab:c9:57:
a1:c5:a5:7c:d4:d7:6f:03:6a:11:28:2e:88:69:44:db:2a:eb:
8b:04:81:97:58:ee:cc:88:2c:a2:fb:1b:c3:ce:fa:47:ff:72:
b1:46:a9:38:de:11:dd:8d:85:a9:78:56:b3:bf:5c:79:85:4e:
13:ed:fa:ad:e7:a5:af:45:8d:f9:ef:ad:e5:ba:d4:79:71:92:
ea:a7:64:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4
NTFBQThBRjUwHhcNMjYwNDE4MTUzNjM3WhcNMjYwNDI1MTUzNjM3WjAYMRYwFAYD
VQQDEw02OWUzYTUwNS01MmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6ww20yY72+i/PLA6lQ+69lg2L0Zog/kOxU0vP7vBD0LFSctiRUHXctd+TSZv
Wh8yJwWIS/1gKHk0twi0HxiUUZvk+tyHLtlFP5KLFFuPGxsLWHHMCrjqCE1OTmii
yFNZi8PIPDG7KSiJhpK97M5wd1s2/ihBDm5ml1xXJj7WKwyUyWO7qu5EsI56gh4y
J0HhM6Zfiuc2ExcMBxuIroUlcfMJL8rlEVpyzYD4hekfQ/iJVyEwDbBlAjV4xQT0
xHCeHrf8+VolUimdZDXPWdfBUzym0AdrvPtMQLqs59gDUveZ+3N/v/QU2IOaV1xM
Hq5FVV/JRz4k1Q/5H/+4fwBclwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKDCisVe
EJOol1KnNlFcqxTuaFIEMB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF
Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp
dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzVGRC9FMUVGRDlCNkRFQ0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5
czFuSVRkMFdVYnlGR3FpdlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhKHOPCzVDGuckFlEH5SLDg2IgqwlDWH5NijvRf6ZiBnOLYDpXtqUEuB41qAg
tU/JUI4rSDnYRbzECR77QosMW1Uz2azgxq+TPFDOPG19k2NzoyWvPMrejIzgrIWG
5LaHPprR+8E30+l0DT/s6iTSKZ3Er9sGe28ysZGvZ8Ui2waTcEEGoE7HdKrIrdiE
SMOsTKWwlXXoqvwd/leS2s2hAB1Vz6d7Vl3saSs8ZwdoT+yPq8lXocWlfNTXbwNq
ESguiGlE2yrriwSBl1juzIgsovsbw876R/9ysUapON4R3Y2FqXhWs79ceYVOE+36
reelr0WN+e+t5brUeXGS6qdk4Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 03:21:31 2026 by rpki-client