
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
File: ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json)
Hash identifier: cQh3b+MYaxvD7aRxFNLFym/ndSqKLLuZMBjGoLOpXKw=
Subject key identifier: 14:56:F4:3B:07:48:EA:72:2D:F2:D8:16:35:B2:79:CE:0A:C9:EB:63
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial: 27E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
Manifest number: 276F
Signing time: Sat 28 Feb 2026 15:41:16 +0000
Manifest this update: Sat 28 Feb 2026 15:41:16 +0000
Manifest next update: Sat 07 Mar 2026 15:41:16 +0000
Files and hashes: 1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: /7a3LeWjeZHvcdaS6cco8FPbi/e+LxnXB461QQ4JDV0=)
2: C4F9C4A03CCB11F0A0971A87C4F9AE02.roa (hash: xHCZ2/dEn0nHhWiq6+O/i6vGEe0ccZlJVNPLmFkzdOM=)
3: C1B9CC1239DE11F0B191D94AC4F9AE02.roa (hash: C5mtfa3ZF1KEnyDRrBvvk8V/nxHuXLLm9mRYEmWk30I=)
4: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: E1JyH+1tKEsb7p5LJOJ8T2MOoIqLysA7phnqVuKQpiE=)
5: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: 4N1cyp7Yk8laCKHeEBSScZbHkAV+qb2GWLjTCKYKuMc=)
6: A225B08645C411F0BF201021C4F9AE02.roa (hash: IvX8ILiXhHWFM5uyZnAUJPESwgV0Xv5NKCdd1JDWi+U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10215 (0x27e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Validity
Not Before: Feb 28 15:41:16 2026 GMT
Not After : Mar 7 15:41:16 2026 GMT
Subject: CN=69a30c9c-b8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f6:c0:8e:7c:f6:06:1f:03:f9:c2:c9:83:8b:
1f:d9:da:c5:49:c2:6e:60:31:e0:84:02:e6:31:40:
fe:a9:90:82:47:2a:5f:de:bf:1d:06:59:61:b0:53:
bf:c6:06:07:3f:25:82:e9:49:e7:3e:32:16:3b:e0:
9f:01:78:4c:bb:f3:73:fb:13:c1:09:b5:db:ce:ec:
50:67:ea:94:96:73:31:8b:30:ef:0c:62:63:88:bc:
21:87:db:b4:a6:2b:a1:78:46:a4:46:ed:1b:a0:af:
25:a3:68:fb:dd:ed:bf:18:54:9e:03:5a:97:04:8c:
fb:9f:41:4f:88:90:e4:5a:dd:4c:5e:e2:c5:e3:44:
cc:d1:5e:82:41:ff:b0:54:21:4e:95:19:3d:cc:d1:
70:e5:d5:bb:3a:ea:de:0d:41:0f:22:e2:40:80:d9:
ff:40:aa:23:b7:2a:12:c4:29:d9:d3:c0:6e:05:5f:
61:41:8e:55:a3:a9:3a:64:50:d7:1b:a6:65:b7:46:
0b:0a:aa:00:99:64:05:63:4e:32:82:44:02:5d:48:
c0:f0:2a:dd:45:49:6f:56:4b:d5:bc:57:06:10:08:
56:56:5c:d0:7b:23:8c:8b:a1:70:77:1f:ec:af:df:
c6:71:50:e7:99:a0:fa:01:c1:fa:d5:4b:fb:23:11:
5e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:56:F4:3B:07:48:EA:72:2D:F2:D8:16:35:B2:79:CE:0A:C9:EB:63
X509v3 Authority Key Identifier:
keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:1b:ac:a7:9f:ea:48:b9:d6:0b:c6:fc:40:84:3a:fe:38:f8:
36:a4:e3:70:46:b7:9a:8a:50:3b:4e:63:91:f2:61:b3:05:52:
16:10:70:d9:26:3d:e7:3c:f0:01:0f:4c:ad:8c:f7:48:77:2b:
3a:a2:d4:cc:e2:91:dc:83:a6:37:f7:b0:d1:c8:f4:98:e2:d4:
7d:a2:3c:13:99:72:7e:b3:00:be:44:3c:46:50:93:67:1e:df:
76:28:64:dc:62:23:e5:8b:50:d1:3a:3a:f0:01:6d:98:80:8c:
d9:d9:d3:20:eb:15:52:27:39:de:87:b8:a7:a2:f1:7f:64:e5:
23:bc:a6:88:2c:ac:68:35:f2:2e:b6:52:84:02:fc:f2:15:13:
92:68:34:4e:19:d3:9b:06:00:61:41:5e:9b:05:93:13:0d:2d:
10:b0:7e:5d:b3:b5:84:84:7e:77:e3:45:7a:1e:c5:36:48:63:
58:8d:c6:eb:b1:30:ea:3d:8b:de:8a:46:48:43:c7:10:81:62:
1d:0c:92:f5:b3:39:c3:a3:29:29:03:d0:12:e5:c6:72:b0:83:
50:50:3b:3e:0c:0e:03:10:36:9e:64:3a:50:2a:f2:b5:cb:b9:
bc:b4:5c:d9:14:a0:ba:ae:73:8f:b0:3d:c5:76:98:d5:db:e5:
46:b2:68:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:27:04 2026 by rpki-client