
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
File: Th_fBBxL3f1RF0jkuYPctGJbmoA.mft (raw, json)
Hash identifier: mwjal3jzjP3RyWGvjMaALUhzIrKxlpbkk77QBRTDZ9s=
Subject key identifier: 9C:AB:61:3D:8A:B5:70:4E:28:7D:A4:3B:E4:D0:5C:A0:9E:F5:2B:8C
Authority key identifier: 4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80
Certificate issuer: /CN=A91827F2/serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80
Certificate serial: 02EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
Manifest number: 02E7
Signing time: Mon 05 Oct 2026 01:16:04 +0000
Manifest this update: Mon 05 Oct 2026 01:16:03 +0000
Manifest next update: Mon 12 Oct 2026 01:16:03 +0000
Files and hashes: 1: Th_fBBxL3f1RF0jkuYPctGJbmoA.crl (hash: uYarQqqps3jdorQIYbTQ6HGOfbAVtrNIFu/ApjWb+QI=)
2: 3CCE23342EF211EE8BE1AB1DC4F9AE02.roa (hash: oSOPa5PXvIuggnUAWdjwD208QEjv6p1RYpA0Azk+9ms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl
rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 01:16:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 750 (0x2ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91827F2, serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80
Validity
Not Before: Oct 5 01:16:03 2026 GMT
Not After : Oct 12 01:16:03 2026 GMT
Subject: CN=6ac2fa54-b97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:16:6d:d3:93:7f:9f:e4:dd:90:af:ee:d4:c0:
56:40:83:fd:42:a7:00:3c:f6:5e:e2:ad:57:26:9c:
ee:72:35:b2:8b:b4:c6:c5:ac:0c:5b:4f:7f:2a:07:
c8:b7:38:82:c5:6e:8b:1a:02:00:72:1d:3b:56:cd:
c3:5d:18:62:9c:45:a8:4c:fd:ca:7f:a7:11:4d:cc:
b5:f0:08:6e:0a:fe:73:e4:b4:e6:17:69:20:5e:aa:
9f:d9:04:53:8a:2d:56:33:26:db:6c:8e:1f:fb:34:
ed:20:8a:c3:1f:9d:c9:e2:e6:fd:3a:b4:4c:b0:d9:
83:15:94:87:d7:1d:5c:f1:14:90:86:83:2d:55:78:
91:82:1f:ad:e8:e5:6a:b0:ed:ab:21:ac:15:77:d2:
d8:77:2f:65:ae:12:74:2f:75:cc:a6:6f:d8:f8:f3:
d0:bf:58:cc:df:47:94:58:62:c8:38:95:39:3e:0c:
56:85:56:ef:b2:d5:f2:e6:77:d4:59:a2:e5:2c:34:
31:6e:90:61:b3:e0:ae:b7:c3:4a:e7:86:bc:fe:94:
a8:07:0e:ba:c9:b3:ed:f6:f0:67:28:1a:16:96:f4:
d6:d3:6a:bc:1d:e9:53:fd:b9:29:aa:51:00:a4:64:
a9:35:5d:76:73:f5:56:d9:22:ac:5a:41:1f:f7:a1:
5b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AB:61:3D:8A:B5:70:4E:28:7D:A4:3B:E4:D0:5C:A0:9E:F5:2B:8C
X509v3 Authority Key Identifier:
keyid:4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7a:a6:5a:d4:9d:03:b0:8f:2a:2b:8c:a9:1e:15:62:5a:5e:
3d:5f:71:aa:9a:cf:b4:52:b4:63:0a:2c:66:0f:c4:74:52:a4:
ee:51:5b:c2:8c:b6:20:79:e2:92:79:e8:67:3b:7a:d3:b6:97:
bd:0d:54:be:13:86:29:7a:59:2a:1c:c6:12:70:13:b4:81:05:
26:de:2a:70:16:fb:8d:89:6c:38:78:29:a6:d8:28:18:f3:2e:
8d:e5:4e:4a:fd:91:af:35:39:c2:c2:56:7a:18:1d:ad:8a:fc:
18:47:4e:18:6c:bb:6f:30:b2:cc:4b:46:c4:3b:bd:c0:39:ce:
f8:d7:39:4f:3c:a7:53:da:e8:f6:9b:ee:d5:f0:78:4b:fc:52:
1d:84:48:0c:5b:5b:4f:9a:5d:09:ff:75:d1:e8:41:83:02:b1:
ef:cd:e3:db:ea:ab:bf:b2:10:2b:14:3e:77:6c:f9:b5:5b:c8:
ca:5e:7b:5f:cc:cd:3f:2f:c1:1f:c3:27:6d:60:57:80:f4:b7:
2c:28:3e:8a:a5:57:46:05:28:51:6f:2e:c3:7b:08:1e:a4:60:
a2:19:de:ca:3e:d2:25:17:2c:54:ca:d9:70:cc:f8:d0:f5:8e:
df:bb:fa:94:d6:d0:33:de:85:9b:a1:f2:3d:3b:1e:56:a9:b4:
54:0a:82:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:03:30 2026 by rpki-client