
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
File: ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json)
Hash identifier: b67TSH+DzSZOv3/NYeOW+/EIGXKvudGFMpwaAXiZafE=
Subject key identifier: 31:5B:BF:B7:B2:74:9E:D9:C4:EF:EF:6E:1D:C1:6F:8C:50:89:23:6C
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial: 28CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
Manifest number: 2803
Signing time: Wed 04 Nov 2026 15:41:17 +0000
Manifest this update: Wed 04 Nov 2026 15:41:17 +0000
Manifest next update: Wed 11 Nov 2026 15:41:17 +0000
Files and hashes: 1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: Ie5U0KVePYZzQDaoJk2Zb6WppyBEXJnOVcZP3i+Z7fQ=)
2: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: Z4xoQcPBvcW/VbL6OWwtgSaSohFPMeVXuxF8gcgjMds=)
3: 95F76942870611F18212677BADEE528E.roa (hash: SOLLv4/IIVbij9uBLzZ1io1DQY7xHAS/qiToU32P5kU=)
4: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: H6EDGgrRbesY/HC/4QOk7KDGC4ogtYE/w/DKgTKt0yw=)
5: C1B9CC1239DE11F0B191D94AC4F9AE02.roa (hash: SiLYgZw1OeMIYBqXEe6pyhNgEn9BwkIumVDHZgIIEaI=)
6: 75CF2F9A873011F1B6B4C8A97AEE528E.roa (hash: mEYn2nIRyTCP8ZVcA/82XOrMyUlLvHd+g8HTmkjqqZU=)
7: C4F9C4A03CCB11F0A0971A87C4F9AE02.roa (hash: FVQ+j69/Aeib4yBQpBYMh3Ioo2GLCobZFDyx7BhU9SY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 15:41:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10445 (0x28cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Validity
Not Before: Nov 4 15:41:17 2026 GMT
Not After : Nov 11 15:41:17 2026 GMT
Subject: CN=6aeb521d-cd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:bb:a2:26:c7:92:95:a1:ad:f3:a3:54:1b:
1d:f9:d2:f1:c3:fb:bc:90:29:aa:ae:3a:db:34:8e:
c4:da:57:35:28:6e:02:89:87:e9:9d:00:be:bd:17:
10:43:d7:d8:90:7f:53:aa:55:d4:ba:ce:f4:99:25:
33:a6:ff:aa:54:ba:c2:ff:f7:81:78:26:10:bb:d8:
52:6c:1c:2f:a2:78:16:1b:4e:69:4f:6f:d2:3f:f1:
44:c8:2b:02:01:c9:9d:0c:07:dc:6a:a0:b5:f8:21:
e3:c3:82:76:e3:fd:ae:95:92:58:16:96:5f:4b:7c:
92:5f:ce:2e:2a:4a:f9:f1:ad:c9:40:4c:2f:cd:23:
1d:5f:bf:1d:fe:52:ea:e7:39:9e:b5:8b:98:03:3d:
c6:ef:89:43:ac:1c:82:e7:39:25:e8:02:e0:8d:c4:
68:90:0f:0f:37:d5:07:74:75:26:ad:90:30:7c:ef:
05:0e:1c:b4:1f:60:f0:a9:85:99:af:6c:0d:0c:22:
39:48:98:1b:cc:f1:96:ce:8c:d3:41:bd:47:b7:20:
18:fe:39:a9:d8:fe:56:8c:19:f3:e3:84:5e:65:43:
a3:43:49:aa:35:26:90:9b:b7:e6:a3:bc:9e:04:ac:
9f:9c:48:5a:5f:e7:8c:35:97:ff:dd:72:24:40:51:
6b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5B:BF:B7:B2:74:9E:D9:C4:EF:EF:6E:1D:C1:6F:8C:50:89:23:6C
X509v3 Authority Key Identifier:
keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:23:e3:82:31:77:a2:7e:38:8c:0b:8d:6d:01:45:e1:4c:75:
03:06:87:38:89:a8:85:5d:f8:42:82:25:09:4c:d9:90:35:33:
1e:5a:b2:0a:9e:db:27:49:2a:32:eb:d5:05:fe:79:a4:fe:26:
ac:2f:53:71:dd:bf:43:fd:b6:63:94:13:a0:64:60:7e:ca:b6:
b4:9c:99:fe:46:04:1b:56:bd:bf:b7:38:14:13:f7:90:76:dc:
e8:91:dd:e7:f8:a6:a8:c9:84:b5:20:44:cd:cc:29:7b:48:a7:
bc:e6:70:cd:91:92:3e:cf:4e:9c:ec:1b:d9:55:b0:30:70:39:
74:9c:91:7d:7c:81:c9:8c:6c:c9:69:37:69:9f:9e:56:e5:81:
26:0d:77:e2:a0:c7:23:2f:30:44:31:a9:c9:88:b3:3c:db:c6:
ef:57:1d:e1:99:6e:1a:a1:cf:a5:a0:b6:4c:6e:38:90:2b:10:
4e:2e:8c:50:3d:3c:68:60:09:9c:bb:ba:43:6c:33:c1:12:e3:
2d:d1:82:fb:3b:9b:b5:ce:3a:e0:af:eb:44:2f:49:dc:d3:de:
7a:01:2d:9f:66:4e:b7:fc:83:e5:b0:4f:84:8c:39:e7:72:d5:
80:a4:a9:14:e4:7b:02:ed:51:f3:37:9e:2e:40:17:4c:b0:fc:
16:74:f5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:25:42 2026 by rpki-client