
$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
File: ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json)
Hash identifier: g8dXok/MQpGaYwHvVrFS1u3NgPX+DwLpU4UgyW/bLoo=
Subject key identifier: 66:30:11:4C:DA:EC:28:6B:82:5C:AF:39:88:CF:D3:45:2C:FB:79:90
Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
Certificate serial: 0611
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
Manifest number: 05F7
Signing time: Thu 28 May 2026 22:52:31 +0000
Manifest this update: Thu 28 May 2026 22:52:30 +0000
Manifest next update: Thu 04 Jun 2026 22:52:30 +0000
Files and hashes: 1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: sv6dP+wD+JrYh6/71MdkgJOF82wTHrTMGmADIUBbzL0=)
2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: 1+FeGN7/5ZQ3EY/0zpEcBQ4MJe9C6NybEMH9vk4Omh0=)
3: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: qTi+k35z0mHRZj7qMe2beLJhL5VMNrzBjZFMcygcHSw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl
rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 22:52:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1553 (0x611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
Validity
Not Before: May 28 22:52:30 2026 GMT
Not After : Jun 4 22:52:30 2026 GMT
Subject: CN=6a18c72f-a5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f9:c5:98:d5:94:fa:e6:2f:f2:93:41:f3:c6:
ee:a2:d6:c3:ba:18:55:e3:10:38:61:7c:e9:da:b2:
7f:73:52:da:6c:37:67:f3:dd:69:46:d6:09:4c:72:
14:34:09:ad:37:de:f4:7f:8b:85:46:5a:7f:b8:38:
23:8d:ea:67:32:02:20:3c:03:c5:5f:90:2d:ef:e6:
1b:6c:54:9c:f8:89:37:d3:e2:7f:b6:b4:b0:2c:5d:
5c:d4:b3:d7:e0:e6:13:db:21:95:1e:11:b7:34:c4:
4f:b5:fd:b3:7c:31:c2:2a:58:80:2e:cb:ab:39:73:
02:42:5e:3a:ad:45:d1:e6:cb:c5:70:ab:dd:a9:4c:
fc:90:23:6f:7b:59:c9:a8:46:9f:01:9f:09:da:fb:
ee:19:9a:e9:a5:03:05:5a:24:5e:57:3b:97:c7:ab:
c4:f3:72:ae:04:79:7d:1a:f7:83:28:a7:bc:8f:11:
e8:b8:e9:3b:c8:32:8b:61:c0:49:e3:3b:96:e5:43:
1b:4b:c1:0c:17:70:8d:16:a6:76:7f:06:36:20:c3:
9e:a0:20:de:dc:1e:3c:8f:f9:58:92:12:dc:30:f7:
29:c2:58:72:37:7d:d7:83:47:de:4b:61:87:5e:9e:
53:56:d8:73:f4:42:1c:50:74:6f:9e:83:e0:b8:3f:
41:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:30:11:4C:DA:EC:28:6B:82:5C:AF:39:88:CF:D3:45:2C:FB:79:90
X509v3 Authority Key Identifier:
keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:c9:9a:0f:9a:d8:14:4a:6f:4d:32:76:b7:c4:00:19:27:a0:
d2:9b:7d:8d:0d:59:a1:a5:ca:cb:ab:19:44:32:4e:60:1e:e9:
f7:ad:20:c8:7d:e7:ec:7f:f0:ec:4a:07:fc:58:8b:9d:a8:0a:
70:fb:e3:bb:4f:8a:f9:8e:2f:c6:89:b4:20:52:ef:ed:88:02:
5b:da:4d:66:fa:cc:65:9f:06:f7:26:13:bf:85:3d:f2:ed:54:
c4:ac:c1:6c:1c:45:4f:09:f7:ee:67:9a:67:35:2b:cb:13:63:
c0:e5:8f:ef:62:d5:72:ff:c2:47:41:ef:a8:09:ca:a4:a7:92:
a3:7a:a2:de:90:12:23:70:30:be:e0:32:8e:f7:56:ea:c6:c6:
c4:80:ec:0a:c4:83:c1:5c:b6:91:97:63:53:16:5e:37:63:59:
60:69:6f:83:ec:7c:a6:68:de:7d:97:dc:2f:da:31:9f:e8:cd:
75:a1:8f:a1:0d:fa:03:8c:d4:f2:23:2d:20:00:28:8b:f2:60:
eb:de:78:7a:fa:ed:c9:77:84:ff:2e:41:7c:1f:59:a2:49:09:
a4:aa:95:fb:fe:ee:4e:81:ba:dc:45:1c:6e:20:ce:3b:60:f1:
97:fd:02:36:c5:1b:e5:65:e9:d2:90:ca:91:73:05:18:98:47:
39:ba:61:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 15:56:11 2026 by rpki-client