
$ rpki-client -vvf rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
File: THCMnrGnIEQyp34ljBbNGCB8VXM.mft (raw, json)
Hash identifier: zmLfbBq+kCMVFpuQVhqHAZMSOMoRqsV+H8Re8YIuWK8=
Subject key identifier: EE:96:30:89:52:2A:CD:99:73:CD:BB:3C:35:8D:3D:91:7B:78:A7:89
Authority key identifier: 4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73
Certificate issuer: /CN=A91880A4/serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
Manifest number: A4
Signing time: Mon 27 Jul 2026 09:22:36 +0000
Manifest this update: Mon 27 Jul 2026 09:22:35 +0000
Manifest next update: Mon 03 Aug 2026 09:22:35 +0000
Files and hashes: 1: THCMnrGnIEQyp34ljBbNGCB8VXM.crl (hash: wzY4fjsjbagXEYi4M4urAJX/+INrhmQ+d1fZBY2/onk=)
2: 006500928EE611F094A24C77C4F9AE02.roa (hash: JvNAPDalguuZAryPwlyPinfBOmbcTwSQAasxzcL/9JE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl
rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:22:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91880A4, serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573
Validity
Not Before: Jul 27 09:22:35 2026 GMT
Not After : Aug 3 09:22:35 2026 GMT
Subject: CN=6a67235c-dc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:27:25:ee:8a:67:b2:03:27:e0:d4:e5:55:85:
61:1b:46:40:41:75:35:86:58:41:15:5f:f3:5d:9c:
86:88:33:0d:c4:35:16:8e:09:92:33:d4:e7:5b:d1:
fa:9a:fa:53:19:75:b8:41:ff:61:b4:9f:37:ad:3c:
fd:5f:74:45:19:39:f0:93:80:9f:db:bb:52:d9:04:
78:5d:3c:c0:8d:a6:ac:ef:77:d2:b2:bf:97:1d:ee:
b9:a1:03:ed:87:ff:f8:01:67:d8:ff:3e:29:a2:14:
ad:04:f3:1c:0e:24:dc:55:36:8a:fa:25:b5:5e:db:
b6:66:0b:e9:ec:8d:66:85:93:80:18:29:72:15:5b:
56:67:c2:cf:63:b1:62:3d:fb:86:ae:b7:23:c2:8b:
5b:5b:bb:5d:c6:be:f7:37:d0:ca:32:48:04:4e:1b:
fb:44:d8:0e:11:4c:02:a5:e1:52:71:29:82:d1:29:
9e:25:28:c0:2b:13:12:e0:d0:59:f2:4a:a5:a8:a5:
ca:f2:3f:33:9f:eb:b6:7e:01:a7:3e:ff:58:72:06:
c5:df:3e:2c:db:f8:7a:b7:c0:78:72:4f:f9:60:81:
25:78:59:74:12:35:1b:cc:a9:5e:1e:ba:ad:f7:12:
28:cf:c1:4d:95:bd:0e:53:b2:9d:68:51:47:ee:95:
a7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:96:30:89:52:2A:CD:99:73:CD:BB:3C:35:8D:3D:91:7B:78:A7:89
X509v3 Authority Key Identifier:
keyid:4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:b0:0e:dc:35:46:24:76:a8:7d:28:b1:f1:b5:16:6b:ad:2d:
1e:7f:9a:42:d1:c8:6b:0c:fb:27:73:16:fa:f0:c6:c4:88:6c:
ec:4f:d8:5e:f5:3c:d2:68:17:6a:70:d2:0e:8c:95:db:7a:91:
c1:f5:3f:e1:dd:fa:2f:42:c3:ab:47:2c:b0:6f:ac:17:b9:c1:
27:fd:d2:19:95:90:1f:8a:3a:fe:49:f7:f4:1f:43:fd:7a:25:
18:6b:82:a4:ff:a5:05:41:8c:2e:ab:f8:13:45:85:5c:cc:67:
22:da:55:ae:7a:5e:d8:75:a5:65:1d:69:b2:7a:9b:6f:f3:dc:
f2:ec:f0:fd:f5:24:0c:15:62:aa:82:72:13:8a:63:70:5e:4e:
c5:9b:96:08:88:15:c4:9d:4b:da:9d:a5:7e:22:80:0e:f6:43:
8f:50:a4:0b:70:44:30:1a:f5:f4:4b:6a:c1:2e:c5:38:72:c4:
fa:fd:15:00:15:63:2f:09:c1:e0:32:21:97:3d:58:30:3a:85:
a3:40:5a:27:1f:f8:b9:1d:ca:09:0f:69:62:de:00:bc:8d:95:
02:40:44:0e:ff:64:3d:57:29:04:ea:c8:7e:64:b2:70:b9:ce:
6c:3a:b6:3e:27:0b:8a:93:41:80:a6:4c:c9:b1:e7:5b:1a:28:
63:f9:e0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:39:49 2026 by rpki-client