
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
File: ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json)
Hash identifier: TqvqC+/HpoLi8GeigiL9FD0GIFyQVtvOueiyrb8Lk+4=
Subject key identifier: 09:FA:EE:30:7F:DA:19:9E:28:41:97:EC:DF:1D:00:5F:2E:03:C3:47
Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F
Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F
Certificate serial: 202D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
Manifest number: 2001
Signing time: Mon 06 Jul 2026 16:02:19 +0000
Manifest this update: Mon 06 Jul 2026 16:02:18 +0000
Manifest next update: Mon 13 Jul 2026 16:02:18 +0000
Files and hashes: 1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: cAtubswgy+Hsf1jOncdsRb4QGm8SdWyOQQVH7qiymz0=)
2: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: 3FqVhcILKyx1ie/mCdr5JeGQHFvwQQEyZoxdiLnn9AY=)
3: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: iYBhniNMDK4Ta8s80jc754k/NLgBpZwzYFFo6cTU2CI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl
rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 16:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8237 (0x202d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F
Validity
Not Before: Jul 6 16:02:18 2026 GMT
Not After : Jul 13 16:02:18 2026 GMT
Subject: CN=6a4bd18b-c91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:ec:ba:0e:70:b0:d3:3d:2b:66:14:1f:ff:
54:1e:53:b4:bc:4b:f1:b4:70:b4:d7:be:fb:0e:36:
94:4d:9b:0e:ee:72:48:7d:f0:0b:ea:11:23:48:bf:
f5:bd:32:09:86:f9:7e:72:50:bc:be:4d:55:35:fc:
7d:7d:60:30:ad:96:54:e8:8f:0c:08:e2:cf:01:e5:
55:51:ee:67:4e:03:70:da:89:16:90:a2:58:67:e1:
c4:23:52:64:87:28:ef:53:96:f2:47:d9:c8:06:52:
5c:9c:7a:c0:cf:4c:32:37:30:21:b7:51:56:a1:f8:
d3:83:bb:d8:4e:eb:36:ce:4f:c5:2b:8f:85:16:2d:
0f:c2:67:a8:3a:e3:90:e2:e7:a2:af:c5:0c:25:0a:
e4:42:33:8b:fb:d4:59:22:b3:d4:45:f5:bd:db:dc:
18:a0:ec:d5:9f:ca:88:d7:10:04:18:a6:ae:48:bf:
59:6b:50:c9:0d:6c:64:89:62:b9:63:5f:6e:14:ff:
a0:c3:a2:b1:b8:52:e4:37:8d:e8:f8:37:7a:4a:73:
2d:16:eb:ac:20:a5:31:7f:0e:78:07:cf:11:18:03:
e4:17:99:bc:0b:76:5b:10:99:22:71:3e:3e:65:7b:
d1:94:85:db:7f:38:55:25:05:1b:6f:fb:eb:f5:ba:
9b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FA:EE:30:7F:DA:19:9E:28:41:97:EC:DF:1D:00:5F:2E:03:C3:47
X509v3 Authority Key Identifier:
keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:a3:ec:84:bd:02:92:31:7b:46:e3:c7:1c:a9:7b:09:d5:2a:
b4:f3:02:67:4d:df:e6:db:56:15:62:5d:f3:08:24:27:f6:c5:
65:6a:77:84:4a:f4:84:72:d9:65:8c:02:7b:4b:74:2d:83:28:
aa:f5:ff:51:4a:52:2b:45:1d:65:bd:33:61:f2:ba:a5:40:98:
44:0f:3f:05:6c:e3:f1:03:27:97:23:ee:76:86:1a:15:3a:d9:
59:5a:2e:80:7d:0b:90:2d:85:71:e4:b4:ba:12:03:26:ea:c6:
82:40:ea:cd:26:6d:ac:53:46:f8:05:e4:ab:a6:64:f6:fd:90:
83:73:ed:e2:17:05:5d:63:0a:42:b2:88:83:c4:88:bc:26:5b:
81:7b:11:47:02:c9:09:1a:f8:58:86:ec:67:a4:a1:03:35:06:
0b:f5:dd:ef:fa:d3:56:7f:93:e9:fb:c3:cf:dc:fe:25:66:f5:
90:f1:db:3b:6b:fc:00:3b:2a:1b:54:52:21:2d:7b:5d:6d:c1:
56:80:39:30:28:10:9a:6f:b3:e4:6c:c0:e2:8d:93:96:a1:38:
7e:50:83:34:a1:c6:6b:26:8d:32:63:06:6b:c2:72:a8:c6:1e:
85:09:4f:67:83:70:d6:89:07:01:16:3f:2a:62:af:da:d2:6b:
f6:97:95:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:46:44 2026 by rpki-client