
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft
File: TH2sISA9rkFsH87q_FVlcgIiCKE.mft (raw, json)
Hash identifier: lcFmU4XqSd4ifELEMaRRO+itCJNz3BLgewFQDEWYtDE=
Subject key identifier: 8B:AD:2F:6F:6C:69:3A:DD:55:E6:50:A3:58:23:03:AB:77:02:CC:19
Authority key identifier: 4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1
Certificate issuer: /CN=A91C0CD5/serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1
Certificate serial: 0262
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft
Manifest number: 0256
Signing time: Wed 19 Aug 2026 02:56:47 +0000
Manifest this update: Wed 19 Aug 2026 02:56:46 +0000
Manifest next update: Wed 26 Aug 2026 02:56:46 +0000
Files and hashes: 1: TH2sISA9rkFsH87q_FVlcgIiCKE.crl (hash: kos90jIFc8eXG1U0K079lpJCoxBisLbHXrSJYlW35/8=)
2: 6EB972341D6011EEB28A4323C4F9AE02.roa (hash: T4FmHotpF1HHb51u8RCZ4c2+jncHifjTPC5b1o41MQs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl
rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:56:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 610 (0x262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0CD5, serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1
Validity
Not Before: Aug 19 02:56:46 2026 GMT
Not After : Aug 26 02:56:46 2026 GMT
Subject: CN=6a851b6f-e1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3e:05:11:44:17:4c:b0:62:72:b0:1c:13:c8:
7f:3e:20:a7:fc:07:65:60:f4:3a:96:e5:a6:93:9a:
ad:e6:de:1d:bf:b4:e0:be:62:1a:87:cd:4b:7c:ff:
9d:b0:40:45:1a:0a:ab:1e:4e:33:6f:c0:c1:75:61:
7a:b8:29:79:4b:6b:37:12:a2:e4:c3:a4:a6:c5:df:
bc:05:c5:e2:2d:42:3f:73:91:09:3c:ad:5b:a1:da:
ba:b1:bb:66:d4:ef:a6:ad:c4:98:e7:ab:8e:9e:d0:
a7:1c:62:cf:a0:ea:1e:30:a7:fe:4d:e7:d8:97:3b:
68:f8:3d:6e:39:73:4e:2c:91:e6:e3:54:9a:de:3c:
1c:7b:55:fa:55:4c:81:e4:67:70:a9:05:07:32:90:
f6:fe:b4:75:5b:4e:9e:73:d5:1f:b9:da:b6:b8:aa:
c7:2f:90:22:ae:da:3c:0c:e9:f6:01:9d:10:f5:62:
41:85:a8:31:a4:91:ac:db:9a:9b:d2:1c:cd:5e:d1:
9a:51:5d:f3:42:5f:77:58:c2:42:74:b3:a4:3d:08:
b0:00:f9:d8:87:66:ac:05:9f:16:f8:71:3e:fe:38:
31:f8:94:43:76:5a:9e:80:8a:8c:90:92:3e:3b:bb:
6e:bc:fa:58:5b:5e:f0:c9:7f:c5:44:27:df:0c:80:
a3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AD:2F:6F:6C:69:3A:DD:55:E6:50:A3:58:23:03:AB:77:02:CC:19
X509v3 Authority Key Identifier:
keyid:4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:0a:d0:d3:27:22:5a:d1:a5:f0:18:7e:3c:8a:c3:ef:0f:b5:
c1:e3:00:69:fd:c1:a6:17:92:a0:35:7c:dc:44:a4:9d:20:b1:
28:dc:be:9b:9c:0b:05:26:2e:cc:fd:a8:78:96:5a:5f:9c:5a:
aa:d6:89:d8:75:46:40:80:ce:8a:69:0f:ce:23:21:96:d4:b2:
04:7d:f9:3f:6e:5f:24:9c:c5:52:5b:73:0d:c2:9c:66:d0:fd:
2b:01:c0:19:89:bc:95:dc:64:9b:5e:4a:df:df:e7:01:68:d1:
4b:c8:74:fa:9c:85:c9:3c:c2:ee:43:6b:f5:f1:f9:86:d5:29:
2f:5e:84:79:3b:eb:55:9e:da:9d:70:37:ea:ad:20:79:d1:6b:
71:b7:08:cb:ac:9f:7e:fc:54:37:87:bb:73:eb:d3:f7:7a:7e:
68:61:ba:2e:19:d9:9d:0b:5c:80:62:27:e0:94:cb:fa:7b:16:
5e:67:17:b9:c1:ee:7d:dd:fb:3d:02:8a:7f:a8:97:4b:32:9f:
75:42:9f:d5:65:72:17:70:ff:1c:e0:ec:e5:b5:c4:27:d8:ee:
a4:d9:0c:63:91:ed:22:21:08:12:e8:be:ca:60:f5:03:cd:ad:
1a:96:8b:12:ce:53:8e:1d:2e:5d:f2:e6:3b:2d:15:35:4f:09:
6f:39:5a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:43:48 2026 by rpki-client