
$ rpki-client -vvf rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
File: THCMnrGnIEQyp34ljBbNGCB8VXM.mft (raw, json)
Hash identifier: tZHN9lDbI62+13D9U/0nUcXUQMW6r6LTYoT8xWWUgPs=
Subject key identifier: B0:86:ED:04:FF:14:2A:BF:C0:E7:8F:98:CA:B1:82:49:FD:4A:FE:9C
Authority key identifier: 4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73
Certificate issuer: /CN=A91880A4/serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
Manifest number: 83
Signing time: Thu 21 May 2026 07:42:49 +0000
Manifest this update: Thu 21 May 2026 07:42:48 +0000
Manifest next update: Thu 28 May 2026 07:42:48 +0000
Files and hashes: 1: THCMnrGnIEQyp34ljBbNGCB8VXM.crl (hash: img9uQGqr5xs/EYo8qW4ADlMhnAs9VQAfw2hkBSCNDc=)
2: 006500928EE611F094A24C77C4F9AE02.roa (hash: JvNAPDalguuZAryPwlyPinfBOmbcTwSQAasxzcL/9JE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl
rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91880A4, serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573
Validity
Not Before: May 21 07:42:48 2026 GMT
Not After : May 28 07:42:48 2026 GMT
Subject: CN=6a0eb779-a3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0e:f6:6f:c8:ae:93:e3:cf:8f:80:57:bb:f7:
b0:4a:96:8c:69:3b:84:17:19:cf:f6:ac:07:f4:9a:
5d:71:c1:78:1d:78:ee:5c:fc:93:71:d6:a4:f4:cd:
f6:a9:9e:88:f5:ce:fb:2e:ad:d5:5b:90:3f:5e:e4:
82:f7:84:43:89:4a:fd:b2:e3:3f:ed:c2:27:e7:20:
b2:3c:92:3b:1c:d7:56:4f:2b:61:c7:08:03:39:30:
6d:86:9f:ff:2a:fb:43:4c:a4:12:36:a6:cf:18:16:
f3:50:0a:7d:6d:fa:c3:0a:62:91:77:30:55:6d:6e:
03:24:d2:6c:69:38:7c:fb:bd:bd:37:e0:87:ff:90:
97:2d:29:20:c9:18:fb:0e:72:32:93:3d:f6:cb:64:
b7:69:e2:68:61:a9:22:12:34:3c:cf:ed:f3:7d:f8:
49:42:e5:47:67:d4:85:37:9b:57:ea:9e:91:0b:ae:
26:58:b5:55:11:45:39:76:c0:2d:43:5f:86:ec:d4:
4b:94:2a:63:21:c8:b0:6e:d7:4f:e3:f9:c6:5a:d6:
cd:ac:3d:9b:93:f9:15:29:8e:51:50:2e:c1:67:41:
05:ed:ca:7e:1b:44:ec:27:63:2a:56:2e:d7:cf:47:
19:79:7e:31:60:14:47:b5:c4:0a:ea:b9:4f:2f:de:
0e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:86:ED:04:FF:14:2A:BF:C0:E7:8F:98:CA:B1:82:49:FD:4A:FE:9C
X509v3 Authority Key Identifier:
keyid:4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:1e:e8:b9:ee:e0:04:1a:e4:62:ad:eb:d1:ac:02:4c:80:91:
58:4f:4e:62:92:41:25:42:7b:59:32:cd:7e:be:51:3b:12:89:
18:99:d8:2f:02:42:2a:2c:79:7c:83:1e:c3:58:7b:d4:16:93:
ba:8d:f0:02:95:b6:0f:cc:31:94:c0:70:68:b4:e7:c1:94:fb:
d4:53:dc:98:c0:cd:b2:e2:20:d1:1e:ea:bb:dc:c7:ef:f7:10:
84:3a:d6:81:54:63:41:35:da:e1:15:19:81:50:fd:99:05:41:
3a:08:b1:b7:d6:61:e3:4c:2e:df:b4:b0:0f:a0:de:6e:22:86:
8a:ae:96:3a:76:cc:36:50:2b:32:1c:52:93:6a:7e:fb:71:1d:
3f:8f:ce:58:fa:a3:7a:05:74:06:27:fe:6a:a8:25:15:85:08:
b2:fa:ea:67:f6:35:bd:d7:2a:d3:dc:7b:06:b0:05:59:46:d4:
7d:e4:80:51:c0:67:26:a5:d5:c0:c2:53:7e:5e:2f:57:55:06:
b9:4f:0a:af:92:8c:32:50:d6:a7:4d:fd:93:fd:a7:63:f9:e2:
18:fe:db:90:06:bf:71:70:45:d5:a1:19:70:1f:e5:af:2c:ee:
b2:42:8b:52:de:9a:42:ba:d1:04:a5:ac:29:64:00:20:34:74:
e9:d7:00:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:24 2026 by rpki-client