$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft File: ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json) Hash identifier: kuXRD+yPccBjKwuPhcPv5haXKNpdR90M8wLXZINkn48= Subject key identifier: E2:80:05:33:2B:2D:7F:AE:F1:C9:96:F7:13:E7:ED:85:61:C9:DF:43 Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Certificate serial: 1FE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft Manifest number: 1FBE Signing time: Mon 02 Mar 2026 02:53:09 +0000 Manifest this update: Mon 02 Mar 2026 02:53:07 +0000 Manifest next update: Mon 09 Mar 2026 02:53:07 +0000 Files and hashes: 1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: C841CIRhE+KWHboYG6QD8ZZvgeX2WnYwcFQ7+bTZtK8=) 2: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: gIJDeDXsBAdTnzpKBgTObqoJlW46Zst5h0OM2UbypNE=) 3: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: zcqW/ZXB+9LNht1rDVWtc7/J4aWwiJffD6rwYXfDvmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8168 (0x1fe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Validity Not Before: Mar 2 02:53:07 2026 GMT Not After : Mar 9 02:53:07 2026 GMT Subject: CN=69a4fb94-43af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bf:d0:43:25:16:2c:d4:3b:96:a2:ac:00:5b: 82:a5:c1:c0:7b:64:ff:76:01:b2:84:d7:83:ae:fa: 06:62:17:fc:d2:94:3c:80:06:21:27:df:78:db:c8: 4e:80:2a:98:27:4c:8d:51:36:28:9a:4f:33:d6:b8: de:6b:12:eb:3a:a9:03:7d:89:cb:3d:89:dd:1b:21: 69:ab:2b:53:fe:23:9e:25:73:f1:e5:58:70:38:c1: 8a:99:18:d5:9c:93:fa:6c:bf:b3:5c:a8:7b:d9:53: 58:d9:a3:fa:c4:99:bc:da:3f:b8:c3:8e:16:c9:2b: 4f:e4:23:4a:0b:7c:09:36:67:f4:cf:39:9a:f0:1f: da:fc:f9:c4:29:13:03:af:3e:b0:df:8d:3f:a4:39: 00:df:68:06:c6:c4:7f:31:94:90:0a:55:85:67:08: b0:81:c0:73:90:ed:6f:2c:87:cc:e5:0a:63:24:27: 15:b0:38:ea:75:fe:01:c4:fa:4d:72:d8:93:84:db: 5a:2b:2d:4b:d7:27:6c:bb:52:63:1a:49:c0:c3:2c: fb:3f:3c:61:0f:11:24:dc:46:1d:37:89:b0:dc:b9: ce:8f:a6:db:92:7a:8e:e8:22:53:f0:35:15:f0:76: bf:72:18:85:02:8d:78:27:d4:ae:47:5c:49:d7:fd: b4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:80:05:33:2B:2D:7F:AE:F1:C9:96:F7:13:E7:ED:85:61:C9:DF:43 X509v3 Authority Key Identifier: keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:f0:82:02:9c:ba:9f:ca:66:42:60:58:65:47:66:cf:bc:ae: 68:d5:20:73:87:96:19:f1:e5:7c:62:90:99:bf:6b:e9:13:d1: 04:0a:d8:45:23:96:ba:d6:a6:52:fe:5d:47:81:5a:ef:eb:a5: 17:aa:49:fd:9b:5c:04:a9:b6:19:43:11:b8:d6:76:1d:98:f2: a0:24:f4:80:9e:e6:0d:12:6d:c8:a3:02:41:16:b5:ac:4a:6e: e8:3a:7a:54:2e:b5:35:00:62:c2:f1:a9:83:db:22:36:b2:7a: 24:89:13:c0:67:f2:a9:3a:11:10:97:dc:41:50:da:d8:f4:1e: 3b:b3:63:f5:c2:53:51:9b:00:01:1c:5d:d1:d7:d4:62:78:b1: fc:ae:20:6c:d8:c3:ca:12:50:0c:8f:38:da:12:62:88:95:de: 8a:c3:f8:e4:40:9d:49:b6:ef:75:49:be:2f:65:84:49:a1:37: 86:5c:ee:e2:9a:ea:54:3a:00:0a:24:b8:2a:0a:bc:3c:27:e7: cd:c3:42:b2:0b:58:ce:f9:c6:0b:17:aa:37:41:d3:a7:51:63: d0:d2:5b:30:0a:ec:a8:09:0f:e9:cc:f8:ab:2d:42:10:e6:23: 27:b6:b5:31:6e:55:4a:c4:05:33:1d:b7:c0:d2:dc:4b:59:e8: f4:f4:0e:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q1ODYxMTAvBgNVBAUTKDRFMTBGRTE3NDdFREE2QUJCQkJGMkMyMTMwREI0NTU0 NEU2RDMyOUYwHhcNMjYwMzAyMDI1MzA3WhcNMjYwMzA5MDI1MzA3WjAYMRYwFAYD VQQDEw02OWE0ZmI5NC00M2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuL/QQyUWLNQ7lqKsAFuCpcHAe2T/dgGyhNeDrvoGYhf80pQ8gAYhJ99428hO gCqYJ0yNUTYomk8z1rjeaxLrOqkDfYnLPYndGyFpqytT/iOeJXPx5VhwOMGKmRjV nJP6bL+zXKh72VNY2aP6xJm82j+4w44WyStP5CNKC3wJNmf0zzma8B/a/PnEKRMD rz6w340/pDkA32gGxsR/MZSQClWFZwiwgcBzkO1vLIfM5QpjJCcVsDjqdf4BxPpN ctiThNtaKy1L1ydsu1JjGknAwyz7PzxhDxEk3EYdN4mw3LnOj6bbknqO6CJT8DUV 8Ha/chiFAo14J9SuR1xJ1/20XwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOKABTMr LX+u8cmW9xPn7YVhyd9DMB8GA1UdIwQYMBaAFE4Q/hdH7aaru78sITDbRVRObTKf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDU4Ni84RjAwQzZCNjU1 MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBxdTd2eXdoTU50RlZFNXRN cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRC1GMGZ0cHF1N3Z5d2hNTnRGVkU1dE1wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDU4Ni84RjAwQzZCNjU1MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBx dTd2eXdoTU50RlZFNXRNcDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ/CCApy6n8pmQmBYZUdmz7yuaNUgc4eWGfHlfGKQmb9r6RPRBArYRSOWutam Uv5dR4Fa7+ulF6pJ/ZtcBKm2GUMRuNZ2HZjyoCT0gJ7mDRJtyKMCQRa1rEpu6Dp6 VC61NQBiwvGpg9siNrJ6JIkTwGfyqToREJfcQVDa2PQeO7Nj9cJTUZsAARxd0dfU Ynix/K4gbNjDyhJQDI842hJiiJXeisP45ECdSbbvdUm+L2WESaE3hlzu4prqVDoA CiS4Kgq8PCfnzcNCsgtYzvnGCxeqN0HTp1Fj0NJbMArsqAkP6cz4qy1CEOYjJ7a1 MW5VSsQFMx23wNLcS1no9PQOxQ== -----END CERTIFICATE-----Generated at Mon Mar 2 07:33:46 2026 by rpki-client