
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
File: THDgIDLqWcKv1UGhhw10sEDRtqI.mft (raw, json)
Hash identifier: 4C0A/FXg3pq6li24/eRTNsQ3zFBSCd/Eod7tm1P6mQU=
Subject key identifier: A2:AE:1E:76:95:CE:DD:84:D5:43:74:85:35:FC:4D:62:C3:8B:0B:50
Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
Certificate issuer: /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
Certificate serial: 09EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
Manifest number: 09DC
Signing time: Sat 04 Jul 2026 19:59:01 +0000
Manifest this update: Sat 04 Jul 2026 19:59:00 +0000
Manifest next update: Sat 11 Jul 2026 19:59:00 +0000
Files and hashes: 1: THDgIDLqWcKv1UGhhw10sEDRtqI.crl (hash: GVc+YPZYwXm3JPZfOqvSC2UJ3D3rgFn4K/oLwQhTfPw=)
2: 193128AAD15D11EE8BD5C02BC4F9AE02.roa (hash: GsGKse+jvZV0Ypq4tt+9yydVOYc4iOZZx7JlseayyeQ=)
3: 05CABF92A64111EAB544074CC4F9AE02.roa (hash: SF124PgFJdMgEInYT/GtV8Bi1Qw6o/zRPCKi4I6lOOw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl
rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 19:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2539 (0x9eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D615F, serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
Validity
Not Before: Jul 4 19:59:00 2026 GMT
Not After : Jul 11 19:59:00 2026 GMT
Subject: CN=6a496605-23c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:a8:9b:2d:10:ae:43:99:33:aa:7f:5a:f5:
86:4a:95:d5:40:23:e4:66:67:ed:27:bf:9f:36:a5:
fe:44:61:25:b0:71:5e:e6:50:20:6c:8d:d7:e0:e7:
12:26:ed:15:62:b3:24:49:4e:0d:85:50:ed:a6:f7:
86:73:b4:56:97:c3:79:34:5b:af:34:8b:d1:6a:f5:
20:0b:cf:a4:be:39:a2:ad:17:ec:53:98:44:13:78:
0d:09:cd:fb:00:ea:ac:cb:c9:3a:a1:29:3e:7b:11:
71:53:06:94:13:d0:bc:7b:ab:ee:61:ef:a8:c5:b2:
c2:f1:3b:7a:09:14:a4:09:11:fd:30:c5:ac:52:85:
9c:d1:ad:c3:c8:7b:1e:8a:a7:89:3b:b0:64:64:17:
ff:f8:8c:3c:55:9e:9a:0a:60:3e:17:07:ce:e6:bd:
3e:b9:10:45:5e:3c:65:87:a6:fd:0b:22:31:91:1e:
a6:88:1f:70:01:56:96:65:56:37:01:70:a2:e0:c4:
64:cc:56:d7:97:46:12:2e:9a:01:7b:c6:c8:5d:53:
58:85:a4:a4:97:17:de:45:1b:e3:4f:7b:03:7e:02:
9d:a1:54:f2:99:06:5f:c2:38:83:bc:2d:e8:80:d1:
36:28:42:4f:57:84:29:77:62:32:dc:db:91:09:8b:
c6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AE:1E:76:95:CE:DD:84:D5:43:74:85:35:FC:4D:62:C3:8B:0B:50
X509v3 Authority Key Identifier:
keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:da:a9:17:68:b4:c6:8e:53:ff:2c:bb:92:c7:7d:42:44:1a:
3f:c4:80:bb:a3:18:33:d3:1a:ed:8a:3c:a1:58:e9:3c:3f:92:
5d:61:e6:07:43:53:8a:f7:bb:10:41:88:16:d3:79:69:36:3b:
6b:62:94:55:3b:e2:4a:c3:43:8b:39:99:c6:41:8a:ad:95:e9:
c9:08:51:1c:17:19:e1:6c:04:20:a8:6a:11:a2:59:be:76:fc:
0c:a6:68:a5:25:65:24:42:e3:12:aa:b8:1c:e5:46:ea:9f:82:
c4:90:95:2b:5e:d9:e5:2d:98:6a:1d:96:5e:2f:ce:dd:b5:9d:
b5:ec:6b:7f:cc:07:73:70:36:26:99:8f:3f:d7:a2:54:35:46:
ed:a7:09:7e:15:e4:c3:20:c0:ca:28:5c:99:7b:25:35:08:75:
b0:be:76:ff:c2:1c:9b:09:0c:ce:82:4b:af:e5:b4:c0:2c:f6:
b6:f8:4d:de:88:90:28:43:4d:e5:d7:a3:85:01:bf:2d:81:16:
35:45:17:4c:c2:58:18:b6:fa:35:b2:fc:d2:ec:45:80:2b:7a:
3b:c1:c1:db:fc:d5:92:de:b4:96:32:d5:62:98:b5:7e:64:aa:
71:b8:95:79:e4:a4:2d:07:58:52:b5:a5:f6:49:66:36:cf:d7:
73:0d:f1:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDYxNUYxMTAvBgNVBAUTKDRDNzBFMDIwMzJFQTU5QzJBRkQ1NDFBMTg3MEQ3NEIw
NDBEMUI2QTIwHhcNMjYwNzA0MTk1OTAwWhcNMjYwNzExMTk1OTAwWjAYMRYwFAYD
VQQDEw02YTQ5NjYwNS0yM2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1uuomy0QrkOZM6p/WvWGSpXVQCPkZmftJ7+fNqX+RGElsHFe5lAgbI3X4OcS
Ju0VYrMkSU4NhVDtpveGc7RWl8N5NFuvNIvRavUgC8+kvjmirRfsU5hEE3gNCc37
AOqsy8k6oSk+exFxUwaUE9C8e6vuYe+oxbLC8Tt6CRSkCRH9MMWsUoWc0a3DyHse
iqeJO7BkZBf/+Iw8VZ6aCmA+FwfO5r0+uRBFXjxlh6b9CyIxkR6miB9wAVaWZVY3
AXCi4MRkzFbXl0YSLpoBe8bIXVNYhaSklxfeRRvjT3sDfgKdoVTymQZfwjiDvC3o
gNE2KEJPV4Qpd2Iy3NuRCYvGbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKKuHnaV
zt2E1UN0hTX8TWLDiwtQMB8GA1UdIwQYMBaAFExw4CAy6lnCr9VBoYcNdLBA0bai
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjE1Ri9GMzEyQ0EyNkE2
M0YxMUVBOEQwNjgyNEFDNEY5QUUwMi9USERnSURMcVdjS3YxVUdoaHcxMHNFRFJ0
cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RIRGdJRExxV2NLdjFVR2hodzEwc0VEUnRxSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NjE1Ri9GMzEyQ0EyNkE2M0YxMUVBOEQwNjgyNEFDNEY5QUUwMi9USERnSURMcVdj
S3YxVUdoaHcxMHNFRFJ0cUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAptqpF2i0xo5T/yy7ksd9QkQaP8SAu6MYM9Ma7Yo8oVjpPD+SXWHmB0NTive7
EEGIFtN5aTY7a2KUVTviSsNDizmZxkGKrZXpyQhRHBcZ4WwEIKhqEaJZvnb8DKZo
pSVlJELjEqq4HOVG6p+CxJCVK17Z5S2Yah2WXi/O3bWdtexrf8wHc3A2JpmPP9ei
VDVG7acJfhXkwyDAyihcmXslNQh1sL52/8IcmwkMzoJLr+W0wCz2tvhN3oiQKENN
5dejhQG/LYEWNUUXTMJYGLb6NbL80uxFgCt6O8HB2/zVkt60ljLVYpi1fmSqcbiV
eeSkLQdYUrWl9klmNs/Xcw3xuA==
-----END CERTIFICATE-----
Generated at Sun Jul 5 07:54:45 2026 by rpki-client