
$ rpki-client -vvf rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
File: THCMnrGnIEQyp34ljBbNGCB8VXM.mft (raw, json)
Hash identifier: YRlKKqTjlOvsLlhWQQ2qCdYfgD451KlmO6FPQtp2da0=
Subject key identifier: 9B:8E:62:4A:2A:E6:70:89:12:36:3E:12:B2:A7:83:D9:08:DC:E1:27
Authority key identifier: 4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73
Certificate issuer: /CN=A91880A4/serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573
Certificate serial: 90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
Manifest number: 8E
Signing time: Sat 13 Jun 2026 07:33:06 +0000
Manifest this update: Sat 13 Jun 2026 07:33:05 +0000
Manifest next update: Sat 20 Jun 2026 07:33:05 +0000
Files and hashes: 1: THCMnrGnIEQyp34ljBbNGCB8VXM.crl (hash: n236V3sOpxS+XRJZyYckDaeQLACrJT1DHAnkys4XyQI=)
2: 006500928EE611F094A24C77C4F9AE02.roa (hash: JvNAPDalguuZAryPwlyPinfBOmbcTwSQAasxzcL/9JE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl
rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91880A4, serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573
Validity
Not Before: Jun 13 07:33:05 2026 GMT
Not After : Jun 20 07:33:05 2026 GMT
Subject: CN=6a2d07b1-40d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:8c:90:3a:fc:db:d0:53:71:65:60:8c:b4:
97:77:15:62:56:cc:8d:1b:97:53:df:d7:02:0d:f2:
45:fe:18:79:96:01:53:f4:f6:f5:d6:b1:18:7b:af:
c4:fa:b2:41:78:4b:bd:f4:0e:61:5a:4f:de:ed:57:
5c:d8:31:e3:29:7c:99:d6:0f:65:f3:bc:5d:f6:2c:
3c:2e:62:7a:40:b9:12:37:40:bf:6a:af:d8:8a:0d:
f0:46:6d:b8:06:65:67:a0:9d:dc:db:5e:1f:06:26:
41:31:c1:6a:80:9b:10:22:7e:ed:0b:28:be:32:51:
35:55:77:e8:ea:22:46:31:ef:f7:65:8f:31:ad:24:
6e:99:74:75:57:ba:b5:60:ce:54:8b:f8:8a:54:a5:
5a:27:d1:3a:af:dc:e2:94:d5:cf:8a:a9:19:4d:44:
28:c3:91:89:5b:95:c0:04:0a:89:1c:1a:57:96:89:
48:46:9c:3c:fc:98:bc:18:2a:d1:ab:b5:13:a8:85:
eb:6b:1a:39:a2:66:05:04:9b:90:55:85:fe:be:43:
65:c3:6c:57:ad:6b:97:f9:69:6c:f2:e2:9c:dd:27:
68:38:c2:76:b9:fd:e3:56:2a:49:e4:c9:8e:b3:9a:
da:40:a6:a2:e4:d1:ef:e8:07:a0:57:11:69:33:9e:
ff:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8E:62:4A:2A:E6:70:89:12:36:3E:12:B2:A7:83:D9:08:DC:E1:27
X509v3 Authority Key Identifier:
keyid:4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:fe:a4:07:9d:df:50:04:65:b7:e3:20:fe:b8:ac:b8:96:f4:
0c:5b:72:8d:24:65:6e:19:fa:de:84:34:15:72:33:59:87:94:
46:a3:e8:a3:7a:f4:9b:69:0a:e6:d5:9b:8f:03:6c:b5:09:15:
e8:95:92:9b:d1:e6:02:fc:b3:63:7d:4b:00:21:c6:dd:11:d2:
e1:1e:bf:97:aa:77:d0:3e:db:39:7f:50:fa:2d:fb:da:cd:72:
95:75:1b:98:41:e9:42:b1:22:76:74:81:00:6e:ba:bc:83:49:
84:22:65:d8:bf:76:2d:60:2b:0a:d8:63:d9:58:e5:a2:81:fe:
2f:6a:fb:31:c4:00:9c:c8:5f:1f:05:df:31:0a:53:22:8c:99:
bd:01:ac:bf:05:44:f4:71:d4:1a:cc:f4:0b:6e:43:33:03:6c:
c6:4d:c5:c1:de:da:8a:47:4f:61:f1:29:f3:66:62:60:6d:d4:
b3:4c:44:b1:28:59:ed:73:d1:da:a3:57:8f:2e:9c:f5:04:2c:
7e:c2:b0:98:0c:14:5a:11:c0:7a:dc:d6:46:09:9f:b8:bd:5f:
ad:d4:ce:47:8c:94:1e:8e:ad:df:4e:42:46:fb:fa:fd:e0:28:
16:72:1f:91:f4:2c:45:34:66:19:8d:61:a4:38:57:18:79:c9:
eb:94:0b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:32:33 2026 by rpki-client