$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft File: ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json) Hash identifier: d2fhPp/qjQhB19IOd5w2MVUegJiw/g0PQTNKVozULmI= Subject key identifier: 7C:70:BE:8C:19:30:8F:98:11:4C:A4:BE:D6:A9:93:43:43:97:C7:FB Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Certificate serial: 2054 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft Manifest number: 2028 Signing time: Sun 20 Sep 2026 15:55:54 +0000 Manifest this update: Sun 20 Sep 2026 15:55:53 +0000 Manifest next update: Sun 27 Sep 2026 15:55:53 +0000 Files and hashes: 1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: E6tqo1IsCFIKi0+aaSPn2tiG84n4fT1K07wb9iRE4fM=) 2: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: 3FqVhcILKyx1ie/mCdr5JeGQHFvwQQEyZoxdiLnn9AY=) 3: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: iYBhniNMDK4Ta8s80jc754k/NLgBpZwzYFFo6cTU2CI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 15:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8276 (0x2054) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Validity Not Before: Sep 20 15:55:53 2026 GMT Not After : Sep 27 15:55:53 2026 GMT Subject: CN=6ab0020a-10cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0e:59:32:b9:1a:43:c6:9f:6a:e0:85:98:d8: d5:3c:ff:e3:5a:c5:09:e8:16:72:3e:84:fb:f9:69: 70:24:5e:3f:af:bf:fb:01:d5:59:74:88:b1:c3:96: f1:2c:cf:c4:ea:63:35:9e:0d:c7:d1:c4:ae:bf:a4: 79:3b:1a:cf:eb:8d:93:10:da:63:ac:74:aa:9d:05: f2:5a:b4:79:b0:2a:1b:1e:d4:ca:63:b0:5d:c9:b3: b6:02:2f:84:5b:10:ec:cc:79:b3:c1:68:b0:b0:07: 4b:f6:ce:17:45:75:10:68:9f:da:90:9e:7e:b5:61: 64:55:6e:46:61:42:b4:5f:09:93:c1:58:ec:df:f2: 12:82:32:5a:ab:88:e2:89:8d:a5:ba:6e:04:15:9c: 7f:8c:05:a9:07:ae:e9:c0:69:b3:63:a8:86:5f:aa: e0:f0:de:7e:44:1a:2a:fe:8e:be:92:18:6b:68:84: 7b:e3:b5:15:29:5d:a9:df:09:bf:45:f1:fa:0e:3f: 4b:35:f5:6e:e0:7e:cd:e4:92:bc:54:36:05:04:74: 76:e7:6d:eb:2b:08:d3:a0:59:ba:86:a7:37:a0:50: f0:f4:25:5e:e5:f5:40:e8:c3:bf:a0:87:21:68:f9: a0:48:ea:1a:1d:e9:16:f6:6a:8e:34:2b:3d:bf:0d: 8c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:70:BE:8C:19:30:8F:98:11:4C:A4:BE:D6:A9:93:43:43:97:C7:FB X509v3 Authority Key Identifier: keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3f:65:e9:c8:e8:da:f4:28:99:9e:1c:2e:81:7f:da:5d:86: 5d:09:14:04:fc:01:0c:8f:9a:f9:a7:b9:79:c6:5b:30:81:5d: b0:59:f0:0c:1c:46:49:6d:76:56:f8:85:8c:52:ba:1b:68:be: 85:8f:50:bb:7c:77:09:4e:c9:dd:77:d5:9f:4b:7a:79:98:b9: 2b:3d:43:a4:35:4b:27:c8:2d:ae:f1:ca:d6:a2:bb:ae:d2:a2: 78:fa:d1:66:93:16:86:f6:4b:05:9a:08:89:7f:e3:8b:b0:d0: 61:c8:9d:e2:15:50:98:a4:b0:1b:de:f7:43:c3:a9:86:db:b5: 44:cd:96:cc:ee:e6:7b:4b:6c:37:91:40:bf:9b:e2:5a:27:2b: cc:b7:bb:ed:63:a1:20:15:16:3c:ad:44:d5:0b:bb:ac:1c:d2: e0:9b:f2:ec:7a:a6:05:b6:8d:f4:3b:c7:dd:f5:ed:21:cc:6d: 35:09:32:fe:69:48:6a:8f:fe:05:39:63:23:a1:5a:d4:4c:46: a7:08:9e:fc:51:9d:f9:ad:db:aa:f2:a2:4d:b6:f0:02:28:3f: 73:94:fb:32:f7:32:ff:f1:28:11:c0:10:21:e3:83:60:f4:ae: 2a:bf:91:dd:59:c1:d2:1f:22:2d:81:38:d2:31:90:d5:d2:f3: 06:ce:d8:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q1ODYxMTAvBgNVBAUTKDRFMTBGRTE3NDdFREE2QUJCQkJGMkMyMTMwREI0NTU0 NEU2RDMyOUYwHhcNMjYwOTIwMTU1NTUzWhcNMjYwOTI3MTU1NTUzWjAYMRYwFAYD VQQDEw02YWIwMDIwYS0xMGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmg5ZMrkaQ8afauCFmNjVPP/jWsUJ6BZyPoT7+WlwJF4/r7/7AdVZdIixw5bx LM/E6mM1ng3H0cSuv6R5OxrP642TENpjrHSqnQXyWrR5sCobHtTKY7BdybO2Ai+E WxDszHmzwWiwsAdL9s4XRXUQaJ/akJ5+tWFkVW5GYUK0XwmTwVjs3/ISgjJaq4ji iY2lum4EFZx/jAWpB67pwGmzY6iGX6rg8N5+RBoq/o6+khhraIR747UVKV2p3wm/ RfH6Dj9LNfVu4H7N5JK8VDYFBHR2523rKwjToFm6hqc3oFDw9CVe5fVA6MO/oIch aPmgSOoaHekW9mqONCs9vw2MxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHxwvowZ MI+YEUykvtapk0NDl8f7MB8GA1UdIwQYMBaAFE4Q/hdH7aaru78sITDbRVRObTKf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDU4Ni84RjAwQzZCNjU1 MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBxdTd2eXdoTU50RlZFNXRN cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRC1GMGZ0cHF1N3Z5d2hNTnRGVkU1dE1wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDU4Ni84RjAwQzZCNjU1MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBx dTd2eXdoTU50RlZFNXRNcDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALT9l6cjo2vQomZ4cLoF/2l2GXQkUBPwBDI+a+ae5ecZbMIFdsFnwDBxGSW12 VviFjFK6G2i+hY9Qu3x3CU7J3XfVn0t6eZi5Kz1DpDVLJ8gtrvHK1qK7rtKiePrR ZpMWhvZLBZoIiX/ji7DQYcid4hVQmKSwG973Q8Ophtu1RM2WzO7me0tsN5FAv5vi WicrzLe77WOhIBUWPK1E1Qu7rBzS4Jvy7HqmBbaN9DvH3fXtIcxtNQky/mlIao/+ BTljI6Fa1ExGpwie/FGd+a3bqvKiTbbwAig/c5T7Mvcy//EoEcAQIeODYPSuKr+R 3VnB0h8iLYE40jGQ1dLzBs7YPg== -----END CERTIFICATE-----Generated at Mon Sep 21 21:04:41 2026 by rpki-client