
$ rpki-client -vvf rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
File: THCMnrGnIEQyp34ljBbNGCB8VXM.mft (raw, json)
Hash identifier: 5JcZJVGQCf7f/0/HVApy3JJNT+7y07+Fy2P8oJ7Aqko=
Subject key identifier: 8D:67:4E:4C:C9:35:C9:5A:0B:09:43:C3:30:61:C2:06:6E:88:2B:36
Authority key identifier: 4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73
Certificate issuer: /CN=A91880A4/serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
Manifest number: 5A
Signing time: Sun 01 Mar 2026 09:31:34 +0000
Manifest this update: Sun 01 Mar 2026 09:31:34 +0000
Manifest next update: Sun 08 Mar 2026 09:31:34 +0000
Files and hashes: 1: THCMnrGnIEQyp34ljBbNGCB8VXM.crl (hash: wEBy2SjiFnZFoY7feo53g5KY1BtzdRD2G2Ojx0vvkj0=)
2: 006500928EE611F094A24C77C4F9AE02.roa (hash: JvNAPDalguuZAryPwlyPinfBOmbcTwSQAasxzcL/9JE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl
rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91880A4, serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573
Validity
Not Before: Mar 1 09:31:34 2026 GMT
Not After : Mar 8 09:31:34 2026 GMT
Subject: CN=69a40776-f8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cb:ce:38:4f:d2:ef:b4:1b:25:c2:9b:3e:82:
80:a5:a7:17:98:61:7c:ce:72:0b:57:46:5c:ec:57:
54:ef:9f:c5:db:13:81:f6:2d:ea:17:22:4d:9c:bb:
64:44:90:48:88:79:a3:7b:09:99:d7:eb:4d:e3:56:
77:b2:bc:6d:a9:c9:ed:9a:78:4a:b8:75:35:49:79:
e4:8f:60:1c:06:29:e6:ca:78:ab:22:5a:4c:93:8d:
19:1b:aa:52:bf:fe:78:09:08:14:9c:ac:bb:77:ec:
05:d8:f2:bd:fc:00:f7:90:4b:f3:38:1a:b2:d3:83:
06:9f:47:18:99:ea:1e:cc:8c:60:22:37:63:f0:b2:
2b:fb:c3:e0:9c:0b:23:4a:d4:23:f4:04:22:8b:a3:
61:30:3a:94:a4:67:a2:c3:97:6b:a5:7b:28:14:2e:
79:5e:1c:de:86:1e:36:e9:83:a1:2a:4d:0d:76:18:
1e:06:5d:ea:e4:e3:f6:3b:a1:ba:33:d1:a3:66:11:
44:d3:e6:36:42:3e:df:e5:73:a9:0a:1f:27:d7:af:
53:e0:56:54:5d:aa:0e:66:0f:30:3f:47:95:81:45:
b1:15:6c:59:34:ff:9a:c4:d0:be:a3:3e:7b:e0:cc:
dc:3d:eb:9d:83:c6:af:46:33:06:2a:d8:0e:6b:da:
3a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:67:4E:4C:C9:35:C9:5A:0B:09:43:C3:30:61:C2:06:6E:88:2B:36
X509v3 Authority Key Identifier:
keyid:4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:3b:1f:95:59:30:ef:db:d2:a3:ba:5b:65:ef:c0:e7:bb:35:
dd:6e:69:31:a5:5e:15:a2:9f:b9:ce:ec:82:80:79:5f:f4:a6:
46:fc:a9:ce:96:47:e9:0d:91:1d:9a:8d:52:6f:15:cc:55:14:
55:b4:46:73:9e:ef:6e:97:58:1c:a5:54:8e:19:a5:ef:cd:4d:
e9:25:0d:0f:35:b9:ee:a1:16:69:3a:21:20:03:d1:ce:8c:33:
4f:86:a6:71:60:d4:d8:d8:8e:ae:2c:99:a3:ba:dc:3c:03:20:
7f:6b:3c:bf:e6:c5:22:11:f3:ab:40:b7:c9:06:1b:d3:8d:a7:
db:2b:da:b5:1c:7d:d0:d6:ec:32:29:b1:43:ea:55:17:b1:68:
e4:e8:63:dc:71:e4:ae:05:61:d7:80:a7:a8:ef:ee:d6:be:be:
06:95:f7:5a:f5:fb:ac:19:1b:0d:07:de:13:1d:0f:8c:81:88:
36:a6:8c:d6:58:8d:e7:0f:5c:a7:1a:ca:34:ff:72:62:f6:ad:
6e:d5:d4:8a:76:6e:81:15:6a:ef:47:40:3e:cb:0f:28:e0:a4:
19:80:35:1c:4b:d5:22:6e:59:fb:db:f2:4f:8b:e0:71:4a:33:
81:61:fa:52:60:a9:57:75:ea:eb:fa:d4:13:3e:da:e9:eb:6b:
41:5c:25:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:46:04 2026 by rpki-client