
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
File: ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json)
Hash identifier: 08Ch5tZRzSX0kaZcxD+CAHV8NEFLKA8BKEBX/ikYH/Y=
Subject key identifier: 95:E8:42:AF:32:4C:97:08:25:CA:69:5D:67:BA:D7:FD:D0:E1:B8:65
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial: 28A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
Manifest number: 27DB
Signing time: Tue 18 Aug 2026 15:43:34 +0000
Manifest this update: Tue 18 Aug 2026 15:43:33 +0000
Manifest next update: Tue 25 Aug 2026 15:43:33 +0000
Files and hashes: 1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: wvG7jGokXsBSsHsPQ51yI4u6tUgwr/xEnbwPcVTTY+w=)
2: C4F9C4A03CCB11F0A0971A87C4F9AE02.roa (hash: FVQ+j69/Aeib4yBQpBYMh3Ioo2GLCobZFDyx7BhU9SY=)
3: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: H6EDGgrRbesY/HC/4QOk7KDGC4ogtYE/w/DKgTKt0yw=)
4: C1B9CC1239DE11F0B191D94AC4F9AE02.roa (hash: SiLYgZw1OeMIYBqXEe6pyhNgEn9BwkIumVDHZgIIEaI=)
5: 75CF2F9A873011F1B6B4C8A97AEE528E.roa (hash: mEYn2nIRyTCP8ZVcA/82XOrMyUlLvHd+g8HTmkjqqZU=)
6: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: Z4xoQcPBvcW/VbL6OWwtgSaSohFPMeVXuxF8gcgjMds=)
7: 95F76942870611F18212677BADEE528E.roa (hash: SOLLv4/IIVbij9uBLzZ1io1DQY7xHAS/qiToU32P5kU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 15:43:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10405 (0x28a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Validity
Not Before: Aug 18 15:43:33 2026 GMT
Not After : Aug 25 15:43:33 2026 GMT
Subject: CN=6a847da5-6edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:7e:7d:ec:85:12:5d:62:e6:42:58:d3:74:
03:fc:b2:76:be:c5:77:46:93:64:e3:00:99:f8:57:
12:ba:3d:97:27:38:10:00:ab:57:b2:6f:98:ad:11:
4d:4b:8b:6d:9d:df:87:14:15:6a:ae:bb:9b:8b:bb:
60:92:8c:30:1a:af:06:01:27:f9:f2:5b:ba:87:10:
95:0f:12:ec:a7:65:3d:8c:73:d5:ed:f0:7c:ff:89:
43:ea:17:a7:8f:58:8f:0b:de:8c:b8:56:e7:24:18:
a5:6d:f7:bb:01:98:ca:da:93:e8:b4:a9:da:18:06:
d3:2b:54:e5:dc:0d:c9:12:f3:e9:01:2f:4b:dd:8e:
8b:fb:d2:f6:b0:23:16:d7:ee:02:90:03:c7:e2:d8:
52:85:74:a5:df:fe:55:09:e0:26:9a:f1:f1:4e:c2:
d0:de:a7:f3:1e:ad:44:01:31:40:32:d6:27:5d:c3:
2b:ea:d3:a6:ae:f5:4f:c6:45:d1:1c:a4:3a:45:a3:
f8:50:af:01:22:e9:a4:f8:8d:01:69:5f:cc:f9:a2:
92:58:74:f8:e7:72:2c:28:5e:37:ea:bf:6c:b1:1c:
33:64:50:52:ca:31:5e:fc:4d:c5:1d:01:e4:e7:0a:
e3:f9:5c:db:e2:30:95:22:05:e4:6f:44:97:6d:06:
0f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E8:42:AF:32:4C:97:08:25:CA:69:5D:67:BA:D7:FD:D0:E1:B8:65
X509v3 Authority Key Identifier:
keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:85:03:fa:ce:1e:11:87:3e:99:db:66:a5:32:3d:69:13:c9:
9f:12:e1:ea:e2:bf:60:ec:32:94:62:29:8f:83:de:0d:1e:99:
44:6f:c0:51:13:4f:73:69:76:ab:8d:9b:dd:03:3f:f7:df:61:
a6:27:cd:4e:8f:e9:d9:9f:f9:f4:20:28:da:93:ea:9f:79:c1:
a6:ea:6f:6f:f1:51:35:4a:d7:92:24:c5:2b:bb:bc:59:fd:b1:
f6:66:37:42:b7:a1:62:c3:64:d8:76:fa:07:cb:21:8e:20:cc:
d6:b0:f7:2f:a1:17:e3:85:25:17:83:23:ba:71:56:5f:95:f6:
6b:e8:cb:23:63:4f:d8:d3:85:7c:dd:be:35:62:a0:fa:de:ff:
04:a5:e7:d9:fd:cd:06:07:41:69:36:0d:cd:d1:2d:31:7f:0d:
15:4b:77:9a:41:58:44:ab:6f:86:10:b1:54:18:a1:64:59:e4:
53:bd:12:78:d4:43:24:47:5d:7b:e5:08:64:e5:cb:ee:66:f6:
be:4e:fe:e2:0e:3f:82:f5:af:5d:81:e9:e6:bd:26:22:9e:ee:
54:d5:ba:85:2c:28:75:9b:a4:29:3d:95:79:3b:18:ab:f1:d2:
08:38:f1:38:e8:c2:60:7e:54:fe:43:50:dd:82:e2:9e:32:ca:
ed:72:d9:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4
NTFBQThBRjUwHhcNMjYwODE4MTU0MzMzWhcNMjYwODI1MTU0MzMzWjAYMRYwFAYD
VQQDEw02YTg0N2RhNS02ZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwUx+feyFEl1i5kJY03QD/LJ2vsV3RpNk4wCZ+FcSuj2XJzgQAKtXsm+YrRFN
S4ttnd+HFBVqrrubi7tgkowwGq8GASf58lu6hxCVDxLsp2U9jHPV7fB8/4lD6hen
j1iPC96MuFbnJBilbfe7AZjK2pPotKnaGAbTK1Tl3A3JEvPpAS9L3Y6L+9L2sCMW
1+4CkAPH4thShXSl3/5VCeAmmvHxTsLQ3qfzHq1EATFAMtYnXcMr6tOmrvVPxkXR
HKQ6RaP4UK8BIumk+I0BaV/M+aKSWHT453IsKF436r9ssRwzZFBSyjFe/E3FHQHk
5wrj+Vzb4jCVIgXkb0SXbQYPcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJXoQq8y
TJcIJcppXWe61/3Q4bhlMB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF
Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp
dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzVGRC9FMUVGRDlCNkRFQ0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5
czFuSVRkMFdVYnlGR3FpdlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmYUD+s4eEYc+mdtmpTI9aRPJnxLh6uK/YOwylGIpj4PeDR6ZRG/AURNPc2l2
q42b3QM/999hpifNTo/p2Z/59CAo2pPqn3nBpupvb/FRNUrXkiTFK7u8Wf2x9mY3
QrehYsNk2Hb6B8shjiDM1rD3L6EX44UlF4MjunFWX5X2a+jLI2NP2NOFfN2+NWKg
+t7/BKXn2f3NBgdBaTYNzdEtMX8NFUt3mkFYRKtvhhCxVBihZFnkU70SeNRDJEdd
e+UIZOXL7mb2vk7+4g4/gvWvXYHp5r0mIp7uVNW6hSwodZukKT2VeTsYq/HSCDjx
OOjCYH5U/kNQ3YLinjLK7XLZCQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:07 2026 by rpki-client