
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
File: ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json)
Hash identifier: ZrNIWIkhlTj17BjXU1h95o+2YT3V8LeQPoVyfvjG4rs=
Subject key identifier: 0D:A6:62:5E:1A:90:56:2E:13:4A:5A:7E:4A:BF:9C:19:AC:E7:69:94
Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
Certificate serial: 064F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
Manifest number: 0635
Signing time: Fri 18 Sep 2026 22:44:41 +0000
Manifest this update: Fri 18 Sep 2026 22:44:41 +0000
Manifest next update: Fri 25 Sep 2026 22:44:41 +0000
Files and hashes: 1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: gvL5kruZgUfq7WHxVib0unw/qWu8tMQUwyPaxhafkG0=)
2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: 1+FeGN7/5ZQ3EY/0zpEcBQ4MJe9C6NybEMH9vk4Omh0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl
rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1615 (0x64f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
Validity
Not Before: Sep 18 22:44:41 2026 GMT
Not After : Sep 25 22:44:41 2026 GMT
Subject: CN=6aadbed9-b28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1a:2d:c8:6f:f4:91:bd:ff:48:7a:0a:df:76:
3c:d9:76:bd:18:04:de:95:50:49:e6:05:14:ef:12:
42:93:e9:20:8b:02:7e:39:71:68:27:4c:1e:a2:07:
db:b5:82:ca:db:1b:f5:17:f3:68:1a:65:3a:e3:88:
1c:a1:75:36:97:de:44:32:42:53:ec:8a:b6:18:02:
7e:d1:22:51:55:e4:40:84:3e:d6:13:2e:f7:f0:03:
a0:7b:12:fa:25:6d:d7:df:3d:d3:c2:f1:58:3c:34:
d8:6c:20:e1:0b:55:c6:af:3c:80:7e:f3:c0:86:4b:
3b:6e:cd:78:b5:c0:07:47:f7:4a:a0:25:35:2a:34:
fb:76:ce:a8:66:fc:3f:0e:f2:2a:ec:2f:8a:57:c6:
84:ed:ee:42:fc:17:87:13:9e:b9:b9:9d:fc:f3:b4:
ee:8e:a3:e8:58:6a:2b:8a:7d:f1:4a:3b:09:cd:17:
c1:79:ba:06:a8:6a:05:c6:03:df:af:72:79:7f:73:
b7:5e:09:5e:41:b3:22:39:02:ee:0a:c6:15:c7:f6:
f2:e4:af:09:0d:22:ec:eb:91:28:e0:fa:91:d9:43:
0c:01:cb:f8:69:03:21:b4:71:e1:99:52:ab:9f:a1:
b2:37:06:cc:b6:c6:f6:d9:4f:5f:fd:08:d4:36:99:
cc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A6:62:5E:1A:90:56:2E:13:4A:5A:7E:4A:BF:9C:19:AC:E7:69:94
X509v3 Authority Key Identifier:
keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:04:cc:4f:d6:7c:8b:c3:c9:6b:85:bc:0a:ce:16:1f:18:9f:
60:aa:82:37:5b:74:ea:9d:02:9d:8c:8e:e4:f5:25:af:77:94:
46:25:c9:95:ec:4a:59:63:21:d7:4d:d4:54:b8:05:96:89:cc:
9f:cb:7b:37:c1:34:ec:66:13:c3:7c:bf:d4:4b:89:85:fd:90:
ac:34:6d:03:3e:8d:9b:b2:68:d8:55:22:d0:3f:a1:5c:4b:9d:
cb:e8:58:0d:b1:59:46:20:64:d2:ba:e9:22:a9:bb:91:53:46:
04:db:07:55:d9:61:92:a1:f1:d4:22:d0:2c:cd:2a:5a:e2:f8:
c9:88:76:d6:4f:53:06:d0:42:34:fe:66:40:c9:e2:9f:6d:89:
5f:15:3e:93:dc:6a:0d:31:5f:57:73:22:73:dc:67:c9:42:6b:
fa:7b:ef:bc:33:5b:f5:5a:8a:76:3a:a3:07:83:91:22:04:0f:
19:1c:38:d3:7e:9c:fd:8c:e4:0f:35:a2:28:fa:f6:7c:d2:d4:
7e:4f:d6:c1:62:ae:62:15:5c:a2:83:3f:36:1e:0e:52:78:4a:
d1:16:e3:62:0d:40:e2:05:88:7c:1c:01:6d:58:be:06:a5:3a:
0a:ff:42:1e:9b:51:19:00:aa:00:bf:95:bd:11:f9:b4:6a:13:
17:ad:4c:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUzRDMxMTAvBgNVBAUTKDRFMUI4NDBGNUM2NjAxNkNFRDdFNjJFRUM2MUI4MzIy
QTMyMUI2QjYwHhcNMjYwOTE4MjI0NDQxWhcNMjYwOTI1MjI0NDQxWjAYMRYwFAYD
VQQDEw02YWFkYmVkOS1iMjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApBotyG/0kb3/SHoK33Y82Xa9GATelVBJ5gUU7xJCk+kgiwJ+OXFoJ0weogfb
tYLK2xv1F/NoGmU644gcoXU2l95EMkJT7Iq2GAJ+0SJRVeRAhD7WEy738AOgexL6
JW3X3z3TwvFYPDTYbCDhC1XGrzyAfvPAhks7bs14tcAHR/dKoCU1KjT7ds6oZvw/
DvIq7C+KV8aE7e5C/BeHE565uZ3887TujqPoWGorin3xSjsJzRfBeboGqGoFxgPf
r3J5f3O3XgleQbMiOQLuCsYVx/by5K8JDSLs65Eo4PqR2UMMAcv4aQMhtHHhmVKr
n6GyNwbMtsb22U9f/QjUNpnMmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA2mYl4a
kFYuE0pafkq/nBms52mUMB8GA1UdIwQYMBaAFE4bhA9cZgFs7X5i7sYbgyKjIba2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82NDgyREI3QzAw
MEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFXenRmbUx1eGh1RElxTWh0
clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RodUVEMXhtQVd6dGZtTHV4aHVESXFNaHRyWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTNEMy82NDgyREI3QzAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFX
enRmbUx1eGh1RElxTWh0clkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACgTMT9Z8i8PJa4W8Cs4WHxifYKqCN1t06p0CnYyO5PUlr3eURiXJlexKWWMh
103UVLgFlonMn8t7N8E07GYTw3y/1EuJhf2QrDRtAz6Nm7Jo2FUi0D+hXEudy+hY
DbFZRiBk0rrpIqm7kVNGBNsHVdlhkqHx1CLQLM0qWuL4yYh21k9TBtBCNP5mQMni
n22JXxU+k9xqDTFfV3Mic9xnyUJr+nvvvDNb9VqKdjqjB4ORIgQPGRw4036c/Yzk
DzWiKPr2fNLUfk/WwWKuYhVcooM/Nh4OUnhK0RbjYg1A4gWIfBwBbVi+BqU6Cv9C
HptRGQCqAL+VvRH5tGoTF61MoA==
-----END CERTIFICATE-----
Generated at Sat Sep 19 06:10:59 2026 by rpki-client