$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft File: ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json) Hash identifier: g9Cilffvr7tz0ihmDCr+Kcxb50bKOPVDyIzR2PFJvAk= Subject key identifier: CE:A4:8E:3E:2C:90:FC:C2:EE:A4:A3:30:D7:72:C2:C3:26:98:77:82 Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Certificate serial: 2044 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft Manifest number: 2018 Signing time: Thu 20 Aug 2026 15:56:38 +0000 Manifest this update: Thu 20 Aug 2026 15:56:37 +0000 Manifest next update: Thu 27 Aug 2026 15:56:37 +0000 Files and hashes: 1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: E4cvxjN5CsSeXOrjxG4YtQVjo8HOMz/ClRt3hr+mMw8=) 2: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: iYBhniNMDK4Ta8s80jc754k/NLgBpZwzYFFo6cTU2CI=) 3: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: 3FqVhcILKyx1ie/mCdr5JeGQHFvwQQEyZoxdiLnn9AY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8260 (0x2044) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Validity Not Before: Aug 20 15:56:37 2026 GMT Not After : Aug 27 15:56:37 2026 GMT Subject: CN=6a8723b6-0772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:be:88:82:b6:19:ad:6c:df:66:49:f8:73:89: e8:e1:37:ee:0d:cd:7b:e5:bd:dd:03:38:d2:d6:de: 5d:42:52:f4:d3:34:30:7d:99:c4:ec:31:a4:d5:1f: 87:be:c2:f7:b6:4c:e3:bf:cd:d4:56:e0:b0:a0:de: f7:8e:93:c0:ee:f5:ed:3d:72:5b:c7:27:7e:20:69: 2c:c0:72:02:4a:ee:29:89:44:38:71:bf:65:31:4c: 67:ec:3b:5e:0e:a0:e0:2a:c2:fa:3e:60:b8:8e:81: b3:7f:3e:0f:02:0a:61:27:b6:37:b1:32:32:20:e0: dd:58:a0:1b:78:5a:00:71:94:23:d2:b4:ef:21:77: 74:11:4f:24:0a:6e:5f:53:10:95:3f:fc:ec:5f:f1: 2d:2d:21:33:3a:3a:74:87:6a:67:9c:5f:d8:c3:e4: e1:7b:a3:fc:94:9f:11:23:94:b1:ed:8a:d8:47:bf: e2:91:4f:9e:6f:bf:9b:18:cb:51:66:9c:24:bd:8b: 3f:77:6b:c2:13:8d:a8:c3:54:ea:2a:17:44:53:99: a7:c6:af:64:e3:ad:86:ef:89:ce:e1:85:5e:d0:5a: e3:c6:64:e9:26:9d:34:fc:89:89:4f:bb:8b:a4:68: e2:1a:7f:3d:af:24:f3:33:e1:f8:01:cc:9e:2a:4a: 5f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A4:8E:3E:2C:90:FC:C2:EE:A4:A3:30:D7:72:C2:C3:26:98:77:82 X509v3 Authority Key Identifier: keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:2c:c9:f4:e6:2d:ca:60:72:70:cd:c0:ab:e2:08:44:0b:86: 48:c3:b5:2e:6d:5a:e3:b6:28:a0:91:64:1e:34:37:5e:27:94: ec:cc:29:50:91:6b:3d:a8:f1:51:8b:2e:a0:df:41:26:01:e6: 0b:1f:db:50:47:4a:e0:b9:53:4b:21:b7:a2:a7:44:e6:28:9c: 99:0a:d8:b2:fd:26:09:b1:de:88:78:df:91:72:20:0a:1d:5a: 2c:10:a6:f9:55:b1:66:a4:46:81:7a:83:9a:4f:00:b2:4a:f6: f4:9c:0c:db:0f:5e:be:3b:e1:a4:c6:21:da:14:fb:e4:c8:9d: 63:d2:59:ee:11:7b:76:27:5f:68:e8:19:95:c5:70:ca:e2:2c: a0:9f:96:9e:02:ae:6b:6a:cc:da:b3:c3:fd:0b:4a:5d:80:35: ac:b4:93:1c:d4:30:99:6a:9e:08:ec:af:9f:7e:62:2a:0e:1b: f8:d1:05:58:24:52:89:5e:aa:24:cf:d8:fd:3a:3c:b8:10:d3: 10:8a:dc:54:c2:d7:08:fa:16:5f:94:09:59:4c:1c:ea:67:fc: 31:e3:da:a3:b1:52:dc:64:5e:e2:b1:55:5c:c9:6e:1e:bb:68: 6a:f1:25:34:e2:a4:65:c5:fd:3b:07:77:2a:fd:73:ef:c8:e5: 0d:f5:67:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q1ODYxMTAvBgNVBAUTKDRFMTBGRTE3NDdFREE2QUJCQkJGMkMyMTMwREI0NTU0 NEU2RDMyOUYwHhcNMjYwODIwMTU1NjM3WhcNMjYwODI3MTU1NjM3WjAYMRYwFAYD VQQDEw02YTg3MjNiNi0wNzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0b6IgrYZrWzfZkn4c4no4TfuDc175b3dAzjS1t5dQlL00zQwfZnE7DGk1R+H vsL3tkzjv83UVuCwoN73jpPA7vXtPXJbxyd+IGkswHICSu4piUQ4cb9lMUxn7Dte DqDgKsL6PmC4joGzfz4PAgphJ7Y3sTIyIODdWKAbeFoAcZQj0rTvIXd0EU8kCm5f UxCVP/zsX/EtLSEzOjp0h2pnnF/Yw+The6P8lJ8RI5Sx7YrYR7/ikU+eb7+bGMtR ZpwkvYs/d2vCE42ow1TqKhdEU5mnxq9k462G74nO4YVe0FrjxmTpJp00/ImJT7uL pGjiGn89ryTzM+H4AcyeKkpfbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM6kjj4s kPzC7qSjMNdywsMmmHeCMB8GA1UdIwQYMBaAFE4Q/hdH7aaru78sITDbRVRObTKf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDU4Ni84RjAwQzZCNjU1 MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBxdTd2eXdoTU50RlZFNXRN cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRC1GMGZ0cHF1N3Z5d2hNTnRGVkU1dE1wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDU4Ni84RjAwQzZCNjU1MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBx dTd2eXdoTU50RlZFNXRNcDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjCzJ9OYtymBycM3Aq+IIRAuGSMO1Lm1a47YooJFkHjQ3XieU7MwpUJFrPajx UYsuoN9BJgHmCx/bUEdK4LlTSyG3oqdE5iicmQrYsv0mCbHeiHjfkXIgCh1aLBCm +VWxZqRGgXqDmk8Askr29JwM2w9evjvhpMYh2hT75MidY9JZ7hF7didfaOgZlcVw yuIsoJ+WngKua2rM2rPD/QtKXYA1rLSTHNQwmWqeCOyvn35iKg4b+NEFWCRSiV6q JM/Y/To8uBDTEIrcVMLXCPoWX5QJWUwc6mf8MePao7FS3GRe4rFVXMluHrtoavEl NOKkZcX9Owd3Kv1z78jlDfVnaw== -----END CERTIFICATE-----Generated at Fri Aug 21 23:10:40 2026 by rpki-client