
$ rpki-client -vvf rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
File: Th_fBBxL3f1RF0jkuYPctGJbmoA.mft (raw, json)
Hash identifier: 8zH+vQqTlUoS1qF9p4uhtr+JdRyWO5jn7KpvWOuYEGk=
Subject key identifier: 36:59:A6:0F:FE:47:EC:A7:A3:B1:1C:68:88:48:F2:CB:49:7D:5D:00
Authority key identifier: 4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80
Certificate issuer: /CN=A91827F2/serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80
Certificate serial: 0298
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
Manifest number: 0291
Signing time: Fri 17 Apr 2026 01:30:14 +0000
Manifest this update: Fri 17 Apr 2026 01:30:13 +0000
Manifest next update: Fri 24 Apr 2026 01:30:13 +0000
Files and hashes: 1: Th_fBBxL3f1RF0jkuYPctGJbmoA.crl (hash: +MKr1j1daiVIt6WWr3etR8mEAjwIx9ye+lVRD2paiD4=)
2: 3CCE23342EF211EE8BE1AB1DC4F9AE02.roa (hash: oSOPa5PXvIuggnUAWdjwD208QEjv6p1RYpA0Azk+9ms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl
rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664 (0x298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91827F2, serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80
Validity
Not Before: Apr 17 01:30:13 2026 GMT
Not After : Apr 24 01:30:13 2026 GMT
Subject: CN=69e18d25-f5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:07:9d:89:ea:55:fc:03:5e:83:21:2b:5b:38:
f2:d6:20:fa:d9:63:f2:89:f0:86:30:9a:15:d4:8c:
1e:ce:f3:f6:ce:0a:58:21:54:58:80:57:e4:11:cf:
05:5b:23:79:cb:24:27:cc:72:62:f3:62:08:88:de:
26:ac:9f:51:58:a5:0d:1d:50:3c:73:e4:e6:0d:54:
fc:bd:3e:df:93:d5:15:2b:fc:23:b0:c2:5a:9a:c9:
ff:16:bb:2d:5a:94:3f:da:eb:86:58:b5:fb:8b:87:
c0:b5:2a:05:cc:2e:0c:2e:36:04:eb:9a:f1:b1:c2:
86:e9:3b:20:6a:55:f4:20:da:c8:99:a5:98:54:4b:
2e:21:ce:b9:db:e4:9f:73:2f:15:fa:1f:98:1b:ec:
32:d9:6a:51:33:d0:56:36:44:ff:ef:23:1b:5b:ee:
08:f8:e5:5e:d6:85:8e:44:82:45:44:b6:4c:51:a8:
2f:b3:04:68:38:0d:49:ab:eb:90:9a:48:a4:19:af:
f3:ef:94:26:69:80:e6:b0:cd:48:c6:65:43:9c:f5:
e1:fd:a0:a9:57:de:04:a6:f4:b8:73:92:e3:81:e0:
ae:cf:e9:e9:67:ac:c4:63:4e:ee:66:38:da:bd:de:
1c:3b:58:c1:60:37:87:e9:bd:03:53:e1:26:90:92:
60:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:59:A6:0F:FE:47:EC:A7:A3:B1:1C:68:88:48:F2:CB:49:7D:5D:00
X509v3 Authority Key Identifier:
keyid:4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:75:1f:05:a4:24:c8:93:56:31:f5:1e:78:db:27:5b:90:10:
3e:f0:b0:29:32:de:e8:92:fa:23:2d:18:97:ce:87:83:d6:50:
cd:e6:72:1c:16:13:1e:92:90:c8:17:73:8d:7a:93:82:a1:60:
00:f6:8e:bb:45:30:2e:b8:8d:f6:86:eb:a6:dd:99:6f:df:77:
18:c0:3d:27:8e:92:37:e2:ed:73:58:ee:61:b9:37:82:2f:ed:
3e:6d:ea:b4:fc:2a:1e:7c:83:39:0a:aa:ce:55:99:4c:3d:87:
17:66:53:ec:64:4d:13:07:d2:b1:71:fe:ab:c4:a8:1f:c6:6b:
e8:6c:75:4f:61:07:14:1e:85:f0:e3:8e:0e:99:d5:3a:d2:f8:
aa:87:ff:ef:a9:9b:89:12:ca:6a:28:57:65:03:27:98:24:70:
5f:d0:f7:ed:fd:14:8c:9e:e6:12:09:66:96:8e:bb:ed:37:64:
56:21:8a:64:e0:3d:c8:68:f2:50:ef:50:52:1b:59:08:06:12:
53:50:da:14:51:ed:5c:0a:09:ae:e9:f8:15:20:3e:5b:82:e9:
3b:5c:9e:a3:61:b4:e8:e3:9f:e0:aa:05:53:cf:c8:74:41:19:
07:94:c8:78:09:6f:81:21:d0:b3:64:b8:5d:7d:bd:8c:42:55:
52:c6:d8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:51 2026 by rpki-client