$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft File: ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json) Hash identifier: Z0VIYAOyY9+UaxKAx/zUA0T/cCouWDVKCpH1QyK+ZEM= Subject key identifier: A3:5D:8D:FC:09:B9:86:AF:5E:62:D5:2D:DB:E6:E2:9C:2A:43:82:59 Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Certificate serial: 1FFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft Manifest number: 1FD0 Signing time: Sat 04 Apr 2026 15:54:53 +0000 Manifest this update: Sat 04 Apr 2026 15:54:52 +0000 Manifest next update: Sat 11 Apr 2026 15:54:52 +0000 Files and hashes: 1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: 3gAdbWRyEqJnXOw5zv2+3DYKfUT8XtG9SCiveSYh0+U=) 2: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: gIJDeDXsBAdTnzpKBgTObqoJlW46Zst5h0OM2UbypNE=) 3: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: zcqW/ZXB+9LNht1rDVWtc7/J4aWwiJffD6rwYXfDvmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8186 (0x1ffa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Validity Not Before: Apr 4 15:54:52 2026 GMT Not After : Apr 11 15:54:52 2026 GMT Subject: CN=69d1344d-79f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c7:6b:a3:6e:cb:bd:4e:e1:ce:90:e1:21:3d: 79:c1:7c:ac:87:24:e0:ad:e1:03:5b:9b:3e:66:22: 4c:07:d1:8d:77:f0:48:25:51:c0:b9:7b:17:c3:8a: 0d:52:a8:27:4d:14:8b:98:8c:16:53:c8:59:04:bf: 8b:c0:87:ae:7c:3e:92:6e:0e:54:34:ad:55:2b:d9: d4:2b:be:24:61:05:2b:8c:10:d0:2f:10:13:d1:ff: 6f:53:3d:93:b3:b5:3e:99:d3:0c:e7:76:8b:99:be: 63:b6:f1:9c:aa:b7:96:ff:d0:06:f2:b2:7f:ee:a2: 77:45:36:3c:84:9a:ef:e4:02:94:77:79:0c:6e:91: 60:af:66:56:ae:f0:e7:e3:4a:f7:f5:80:00:0d:3d: 9c:bd:fe:aa:1d:6f:ef:09:9b:6d:a7:99:1f:c1:77: 2d:ec:2d:18:db:6d:ea:14:03:d8:2a:b3:6b:0c:fd: 07:c6:f0:20:4a:38:c0:82:b7:e2:98:b0:88:2e:03: 50:df:c5:4b:f4:70:ff:a4:a9:00:7a:43:23:25:98: da:f4:71:97:ba:ea:e2:7e:50:27:0b:ac:f8:35:0e: 55:a0:ca:3f:23:9e:a9:6c:5d:d9:bd:64:28:57:5e: 80:b2:9c:df:a0:ca:d3:18:ff:6d:50:7a:17:f1:85: a1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5D:8D:FC:09:B9:86:AF:5E:62:D5:2D:DB:E6:E2:9C:2A:43:82:59 X509v3 Authority Key Identifier: keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:cd:84:2d:45:1e:f4:d7:c9:ba:93:01:5c:82:ac:0e:03:13: 75:f2:93:33:28:9f:c3:2c:02:e4:fe:78:b7:f0:29:5d:be:f9: ed:15:70:f4:00:a6:37:0a:8b:17:e6:5e:df:2b:30:9b:02:5b: 1f:a8:ee:4f:34:a0:33:c3:9f:45:27:d0:3c:96:a5:fc:e4:01: 8b:cc:b6:c1:83:bd:62:4f:e2:d2:66:1b:d8:96:df:82:2f:2a: 50:7a:73:ab:46:56:b3:ef:4b:fc:4e:e3:02:51:6e:61:81:d0: 9f:23:73:4c:13:b7:8d:59:41:56:e8:bf:d6:1a:0b:5e:c7:f8: 23:a8:07:e4:c3:06:95:3b:a0:8b:da:69:64:6d:20:c0:8e:55: 3b:88:e2:b9:e8:8d:aa:e0:ac:21:eb:9b:20:87:ef:e2:fb:64: 1f:9b:e7:9d:e4:1f:d1:47:fc:a3:11:0c:e4:9c:a6:55:70:e0: b3:23:d7:4e:d6:86:ee:1e:83:79:3a:20:73:f0:0d:23:13:0f: 12:6c:71:29:06:13:dc:6e:07:d9:e7:e8:37:d4:49:52:2d:ae: e3:8a:11:99:db:ff:7f:28:cb:4c:26:62:a4:06:41:3d:c1:0d: 3e:7b:27:cc:14:2c:07:70:5d:63:40:59:16:29:a3:8d:c1:8a: 09:d9:c6:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q1ODYxMTAvBgNVBAUTKDRFMTBGRTE3NDdFREE2QUJCQkJGMkMyMTMwREI0NTU0 NEU2RDMyOUYwHhcNMjYwNDA0MTU1NDUyWhcNMjYwNDExMTU1NDUyWjAYMRYwFAYD VQQDEw02OWQxMzQ0ZC03OWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8dro27LvU7hzpDhIT15wXyshyTgreEDW5s+ZiJMB9GNd/BIJVHAuXsXw4oN UqgnTRSLmIwWU8hZBL+LwIeufD6Sbg5UNK1VK9nUK74kYQUrjBDQLxAT0f9vUz2T s7U+mdMM53aLmb5jtvGcqreW/9AG8rJ/7qJ3RTY8hJrv5AKUd3kMbpFgr2ZWrvDn 40r39YAADT2cvf6qHW/vCZttp5kfwXct7C0Y223qFAPYKrNrDP0HxvAgSjjAgrfi mLCILgNQ38VL9HD/pKkAekMjJZja9HGXuuriflAnC6z4NQ5VoMo/I56pbF3ZvWQo V16AspzfoMrTGP9tUHoX8YWhuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKNdjfwJ uYavXmLVLdvm4pwqQ4JZMB8GA1UdIwQYMBaAFE4Q/hdH7aaru78sITDbRVRObTKf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDU4Ni84RjAwQzZCNjU1 MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBxdTd2eXdoTU50RlZFNXRN cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRC1GMGZ0cHF1N3Z5d2hNTnRGVkU1dE1wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDU4Ni84RjAwQzZCNjU1MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBx dTd2eXdoTU50RlZFNXRNcDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP82ELUUe9NfJupMBXIKsDgMTdfKTMyifwywC5P54t/ApXb757RVw9ACmNwqL F+Ze3yswmwJbH6juTzSgM8OfRSfQPJal/OQBi8y2wYO9Yk/i0mYb2Jbfgi8qUHpz q0ZWs+9L/E7jAlFuYYHQnyNzTBO3jVlBVui/1hoLXsf4I6gH5MMGlTugi9ppZG0g wI5VO4jiueiNquCsIeubIIfv4vtkH5vnneQf0Uf8oxEM5JymVXDgsyPXTtaG7h6D eTogc/ANIxMPEmxxKQYT3G4H2efoN9RJUi2u44oRmdv/fyjLTCZipAZBPcENPnsn zBQsB3BdY0BZFimjjcGKCdnGAQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:50 2026 by rpki-client