$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft File: ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json) Hash identifier: 5W+0ChdFwdbFfiYUqRLjtyJdJRqY2+3mhc1rSF0ycZM= Subject key identifier: 69:8F:98:6D:85:6F:A4:0C:80:56:BF:B8:EA:53:FC:B0:1B:70:45:5B Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Certificate serial: 2038 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft Manifest number: 200C Signing time: Tue 28 Jul 2026 16:03:52 +0000 Manifest this update: Tue 28 Jul 2026 16:03:52 +0000 Manifest next update: Tue 04 Aug 2026 16:03:52 +0000 Files and hashes: 1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: qZvSKybwP6Bq94CM+pQa7UkixJ5JB7aXzjGBL2fbims=) 2: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: 3FqVhcILKyx1ie/mCdr5JeGQHFvwQQEyZoxdiLnn9AY=) 3: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: iYBhniNMDK4Ta8s80jc754k/NLgBpZwzYFFo6cTU2CI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8248 (0x2038) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Validity Not Before: Jul 28 16:03:52 2026 GMT Not After : Aug 4 16:03:52 2026 GMT Subject: CN=6a68d2e8-43bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:57:07:42:71:a7:61:31:5e:25:57:1a:d7:90: aa:9c:ea:61:ec:81:c7:0e:d1:a9:f1:00:05:f7:3c: df:59:b5:c1:93:e7:61:a5:81:29:6d:8c:56:00:1e: 4c:41:42:fe:75:97:f7:7d:43:8d:03:7c:1c:bc:7a: 0d:13:e3:63:33:dc:57:0d:c8:1e:ca:86:2a:ac:67: ec:e6:fa:a4:34:13:25:b2:9c:9a:f4:b0:ae:5e:a1: 2c:73:bf:58:33:f6:1b:24:5c:9c:30:e9:c1:2c:45: a3:3c:07:73:68:6d:08:aa:68:c8:98:94:2d:bc:77: b9:ae:b1:10:89:80:f0:96:3c:0b:8f:c1:39:1e:8d: 23:2c:01:6c:9c:d9:69:4a:3f:2f:d5:b7:de:a8:73: 57:58:65:03:ea:04:48:bc:05:e7:0c:ff:07:7d:0f: b9:19:16:2d:22:fd:71:f7:22:f7:17:fc:30:fc:5a: 61:c5:cc:9a:8d:f7:02:52:c5:72:06:35:00:a4:86: 39:5c:37:40:8e:88:7f:0d:4d:4e:35:45:9c:5d:77: a6:5d:a3:ba:25:c9:89:a6:a2:35:11:21:fd:f2:42: b4:88:c8:ec:8e:ed:60:20:7a:68:2c:c2:a7:96:e6: fb:97:53:5f:c3:9b:85:87:7d:1b:89:c0:35:b8:01: 7c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8F:98:6D:85:6F:A4:0C:80:56:BF:B8:EA:53:FC:B0:1B:70:45:5B X509v3 Authority Key Identifier: keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:26:46:a5:86:2b:a8:1a:be:7d:64:45:53:43:87:a2:4b:80: 0d:2e:b6:5d:6f:0e:a3:95:e8:65:f9:e9:a9:a7:3d:cd:2d:39: bf:27:e8:4a:17:01:02:68:cb:58:f6:9c:db:a9:64:62:7d:b6: 7a:64:9e:ad:52:33:35:4e:f1:ca:e9:82:c5:fe:65:76:24:d6: 8d:31:b1:78:ea:09:1b:8a:2d:db:a4:55:2d:e2:84:37:a3:b6: 6e:b9:41:61:b2:f7:0f:8e:cf:bd:62:5c:64:95:67:91:7f:c9: b3:e2:b1:a1:57:66:77:b2:46:1f:b1:b2:08:13:91:ec:6e:d1: 59:2d:72:ba:30:6f:82:2c:af:e2:b1:54:c7:55:84:74:8c:05: f3:b1:65:4e:af:2e:ab:a8:fd:23:33:bc:43:ac:9d:c1:56:ab: 9d:d9:65:eb:ee:d2:09:99:a7:3d:3c:8b:40:a1:c6:7f:6d:e8: 0c:36:8f:01:45:b7:da:df:f6:ac:42:be:7b:ed:cd:0b:6f:1b: 3b:71:58:c9:8e:1f:83:9b:b3:1a:cd:84:8b:ce:c4:43:2a:a4: b1:67:e1:f2:86:20:60:98:d1:81:3a:cf:3a:62:75:fa:8e:c9: 21:c6:d3:cb:3c:54:2d:37:a1:65:80:70:9f:bb:9b:95:74:71: ae:ed:2a:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q1ODYxMTAvBgNVBAUTKDRFMTBGRTE3NDdFREE2QUJCQkJGMkMyMTMwREI0NTU0 NEU2RDMyOUYwHhcNMjYwNzI4MTYwMzUyWhcNMjYwODA0MTYwMzUyWjAYMRYwFAYD VQQDEw02YTY4ZDJlOC00M2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5FcHQnGnYTFeJVca15CqnOph7IHHDtGp8QAF9zzfWbXBk+dhpYEpbYxWAB5M QUL+dZf3fUONA3wcvHoNE+NjM9xXDcgeyoYqrGfs5vqkNBMlspya9LCuXqEsc79Y M/YbJFycMOnBLEWjPAdzaG0IqmjImJQtvHe5rrEQiYDwljwLj8E5Ho0jLAFsnNlp Sj8v1bfeqHNXWGUD6gRIvAXnDP8HfQ+5GRYtIv1x9yL3F/ww/FphxcyajfcCUsVy BjUApIY5XDdAjoh/DU1ONUWcXXemXaO6JcmJpqI1ESH98kK0iMjsju1gIHpoLMKn lub7l1Nfw5uFh30bicA1uAF8SwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGmPmG2F b6QMgFa/uOpT/LAbcEVbMB8GA1UdIwQYMBaAFE4Q/hdH7aaru78sITDbRVRObTKf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDU4Ni84RjAwQzZCNjU1 MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBxdTd2eXdoTU50RlZFNXRN cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRC1GMGZ0cHF1N3Z5d2hNTnRGVkU1dE1wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDU4Ni84RjAwQzZCNjU1MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBx dTd2eXdoTU50RlZFNXRNcDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAciZGpYYrqBq+fWRFU0OHokuADS62XW8Oo5XoZfnpqac9zS05vyfoShcBAmjL WPac26lkYn22emSerVIzNU7xyumCxf5ldiTWjTGxeOoJG4ot26RVLeKEN6O2brlB YbL3D47PvWJcZJVnkX/Js+KxoVdmd7JGH7GyCBOR7G7RWS1yujBvgiyv4rFUx1WE dIwF87FlTq8uq6j9IzO8Q6ydwVarndll6+7SCZmnPTyLQKHGf23oDDaPAUW32t/2 rEK+e+3NC28bO3FYyY4fg5uzGs2Ei87EQyqksWfh8oYgYJjRgTrPOmJ1+o7JIcbT yzxULTehZYBwn7ublXRxru0qRw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:22:49 2026 by rpki-client