
$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
File: ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json)
Hash identifier: 7y2iPEjW98qx3J1a5jnkJIYHZr9c9/MdeeXQjrAZgpc=
Subject key identifier: 97:35:AC:3F:19:D5:AD:00:5F:27:2A:A4:D9:92:E3:DA:5D:19:71:97
Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
Certificate serial: 05DC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
Manifest number: 05C6
Signing time: Sat 28 Feb 2026 23:42:32 +0000
Manifest this update: Sat 28 Feb 2026 23:42:31 +0000
Manifest next update: Sat 07 Mar 2026 23:42:31 +0000
Files and hashes: 1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: zWhMfbihNtVUAqBj+4MQXnEeAKTlDR8V1XGpSCkR5Vg=)
2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: ysl1ZBjVp+SRF53raaGNsY7NWXYxc5RoL/xzGfRsS0E=)
3: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: /t1afH0km8QSurkM4QTi1HV8BFIKxmQMxZ1B3BKeJz8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl
rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1500 (0x5dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
Validity
Not Before: Feb 28 23:42:31 2026 GMT
Not After : Mar 7 23:42:31 2026 GMT
Subject: CN=69a37d67-82d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:66:14:4f:44:19:5e:7a:dc:27:c8:35:2d:
a0:57:c8:6a:b6:f4:9c:45:22:7b:1b:59:8a:1d:08:
17:dc:05:0c:3a:15:76:3f:8a:ad:88:10:7a:13:cc:
87:ce:25:a1:40:c2:56:6e:32:08:a8:41:ab:75:64:
36:f6:5d:87:9b:ff:6e:ac:e6:f6:eb:e1:b1:5f:76:
bd:a9:db:7a:b0:9a:98:9f:26:6f:eb:53:ee:f9:47:
8f:1d:37:80:2d:cc:03:82:2d:d8:05:bd:9a:9a:9b:
1b:21:31:c9:94:24:b9:bc:0a:cc:9d:c0:1b:84:cb:
e5:2c:fe:a1:dd:5c:e0:61:a2:20:20:b7:a8:ce:09:
7d:0e:17:72:83:80:a4:73:77:1e:5d:2e:96:95:ee:
2f:68:24:a4:3a:d0:3f:7b:89:dd:bb:b2:02:2f:1f:
23:20:f3:e7:92:a7:f1:d5:9d:98:39:fc:4b:23:29:
2a:55:52:3e:02:ee:fb:e9:82:2e:43:fb:d0:1d:fd:
b3:64:ee:27:2b:fe:2a:8c:73:3c:ed:da:bb:2b:69:
ba:55:88:23:68:bd:52:b9:78:4d:20:cc:83:2c:b6:
e2:4b:ed:8a:9a:95:cd:87:ac:de:71:12:66:87:8d:
e8:08:e1:ae:fa:96:ea:1a:d4:46:d6:dd:b0:e7:66:
ae:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:35:AC:3F:19:D5:AD:00:5F:27:2A:A4:D9:92:E3:DA:5D:19:71:97
X509v3 Authority Key Identifier:
keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:dd:ac:b4:20:86:c5:bb:a8:5a:55:31:f6:d8:31:e2:9f:ec:
31:50:4e:bb:63:8a:23:68:44:6d:d9:1a:b6:7b:bb:16:d4:e2:
b0:50:a4:91:6a:87:6b:93:19:60:e1:21:1f:01:cf:41:98:25:
e7:c5:b2:3d:6d:c6:c4:58:d0:a4:31:0e:fb:77:c6:82:36:15:
b0:69:a5:6f:92:b2:ce:35:70:72:36:6c:fc:12:4b:32:ab:46:
ee:22:67:91:de:4e:ee:e8:ad:bf:27:98:08:97:96:18:b5:b4:
fd:e8:c3:e5:5f:9a:53:59:75:4d:5c:be:85:de:94:0b:54:16:
1c:f4:3b:a1:e3:ed:ff:5e:3f:ad:1c:c0:6b:55:04:cb:19:bb:
4b:61:87:02:15:48:74:e6:18:7e:51:03:ba:0f:9d:20:53:14:
64:a0:d7:00:ad:6b:27:de:5f:7b:66:83:11:f9:80:d2:de:38:
69:af:e5:f0:d7:1e:f6:23:fa:24:50:5b:dc:c7:20:d5:8e:ad:
fe:02:46:75:4a:93:e1:e5:05:16:4b:6c:96:d3:3d:27:53:90:
0e:16:c4:1e:9e:39:bc:04:c4:02:29:ee:72:55:54:01:c2:2c:
1e:8f:0f:56:d2:ee:24:54:20:0f:e8:5f:8d:7b:ba:77:9c:d7:
32:1b:f3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:49 2026 by rpki-client