
$ rpki-client -vvf rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
File: Th_fBBxL3f1RF0jkuYPctGJbmoA.mft (raw, json)
Hash identifier: 28KcMc3iyClu6Ozc0SPvTtpWU7evNVp4W/5bLM/UY6E=
Subject key identifier: 80:E0:E6:C3:D6:80:BE:16:81:CE:7E:AD:E0:96:47:F6:1E:95:74:CF
Authority key identifier: 4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80
Certificate issuer: /CN=A91827F2/serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80
Certificate serial: 0292
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
Manifest number: 028B
Signing time: Sun 05 Apr 2026 01:21:24 +0000
Manifest this update: Sun 05 Apr 2026 01:21:24 +0000
Manifest next update: Sun 12 Apr 2026 01:21:24 +0000
Files and hashes: 1: Th_fBBxL3f1RF0jkuYPctGJbmoA.crl (hash: W8xLIaxjdV57M4KV1Jn4AEN/3GyMXCRhp/0sqLhxGBs=)
2: 3CCE23342EF211EE8BE1AB1DC4F9AE02.roa (hash: oSOPa5PXvIuggnUAWdjwD208QEjv6p1RYpA0Azk+9ms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl
rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:21:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91827F2, serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80
Validity
Not Before: Apr 5 01:21:24 2026 GMT
Not After : Apr 12 01:21:24 2026 GMT
Subject: CN=69d1b914-8ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:0d:85:9b:ab:fd:53:14:80:08:f0:09:06:
b1:d1:2a:55:90:5a:de:14:9f:ea:da:5a:60:87:01:
c5:1c:ee:e4:2d:1b:5f:af:ef:1c:9a:5d:28:f0:fe:
f3:ff:fd:53:85:8b:98:56:87:88:fd:70:8d:ba:a6:
a5:62:db:a9:dd:39:a7:26:8c:46:ea:cf:c0:88:f7:
52:fe:ef:66:8e:48:2a:ed:34:98:88:5e:2c:02:10:
25:95:2c:fd:66:93:6f:16:51:e3:70:94:6b:7d:c3:
84:f8:fb:30:d7:b0:b0:13:42:47:62:b9:33:e8:20:
8a:b0:5a:70:52:55:26:84:7f:60:6f:49:a3:ee:f3:
8c:19:3a:cf:c9:f7:19:da:15:a3:56:3d:7f:3d:26:
c1:64:5f:fd:ee:c0:8f:19:b6:2f:94:a5:13:bd:c2:
57:f2:fd:50:f9:ce:36:6f:c0:d7:12:55:cf:f9:b1:
bb:7e:7e:e3:c9:cb:74:62:6b:a1:4f:ed:34:ed:f6:
2f:3e:84:81:0f:5e:9c:d3:cb:7f:a9:05:ab:81:fd:
3c:ab:ce:91:4f:68:7b:e9:10:1c:e6:34:9a:24:09:
b6:31:ac:58:bf:ee:89:bb:43:f7:1a:2a:b9:e4:98:
da:d2:e5:78:80:d6:a6:02:a2:82:47:0a:ed:29:67:
da:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E0:E6:C3:D6:80:BE:16:81:CE:7E:AD:E0:96:47:F6:1E:95:74:CF
X509v3 Authority Key Identifier:
keyid:4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:02:e6:3b:31:be:65:35:54:eb:fe:b2:9c:ca:70:b8:6a:90:
e3:6f:cf:51:1b:c1:98:98:aa:e6:88:9f:6a:ac:93:da:b8:dd:
ee:c3:10:65:c6:e8:51:9d:bc:5b:6d:58:9e:2f:de:9f:7a:31:
4d:7e:82:63:2e:df:68:fd:ef:bc:b4:04:cb:03:42:e8:3b:41:
ec:d5:c2:51:4c:5c:da:21:b3:3f:25:e2:b5:9c:85:1e:17:61:
67:80:d5:f4:36:f4:ca:1a:b9:6d:8a:fd:cc:9b:64:2f:db:63:
20:5d:f8:68:e9:ab:06:5b:cc:49:5a:ab:43:d2:e9:28:cd:d4:
bb:51:26:f2:d0:08:84:48:13:5b:7c:28:3a:18:42:16:91:f6:
88:13:1d:06:b4:23:a0:7b:c8:db:0a:ce:fe:17:c3:6b:78:35:
21:56:7d:76:4c:2b:80:2e:cd:e3:bc:38:60:c9:cd:76:b4:39:
7c:84:33:b2:84:16:c0:95:6d:b8:6f:0a:08:01:29:a3:a3:82:
dc:a6:41:e9:5f:b7:dd:2a:c1:c8:cc:b1:f8:b6:0c:59:69:4f:
cf:98:4a:03:2b:36:2f:c6:d0:0d:e4:41:d6:74:86:aa:29:79:
d4:8d:75:72:37:bf:d5:77:2d:d8:4f:72:96:07:d2:cf:0e:29:
c2:93:d7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:47:17 2026 by rpki-client