
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft
File: TH2sISA9rkFsH87q_FVlcgIiCKE.mft (raw, json)
Hash identifier: 247E4ZDDMxR9VTMqlEhMRx+cgQbHXJpKlxGSZn5jeKU=
Subject key identifier: 24:66:3D:A4:B4:B4:BF:0B:EE:35:31:10:AE:1E:C8:01:D5:E7:E1:B2
Authority key identifier: 4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1
Certificate issuer: /CN=A91C0CD5/serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1
Certificate serial: 0253
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft
Manifest number: 0248
Signing time: Mon 27 Jul 2026 04:00:21 +0000
Manifest this update: Mon 27 Jul 2026 04:00:20 +0000
Manifest next update: Mon 03 Aug 2026 04:00:20 +0000
Files and hashes: 1: TH2sISA9rkFsH87q_FVlcgIiCKE.crl (hash: Q8y5E2g4Qe89jhc72TNCgAZiOKARYMxhXvOxLLJELzM=)
2: 6EB972341D6011EEB28A4323C4F9AE02.roa (hash: Z4KCS8pqQW+6GdcUPkPrmcDRtL0IMSdenxwSxo9PlTw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl
rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0CD5, serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1
Validity
Not Before: Jul 27 04:00:20 2026 GMT
Not After : Aug 3 04:00:20 2026 GMT
Subject: CN=6a66d7d5-30ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:20:30:38:d8:03:24:4d:55:cb:81:d8:60:
cb:99:3f:58:fe:46:f6:9c:0e:5b:62:fc:9a:42:19:
ba:4c:f9:bc:cb:53:1a:b4:ed:06:17:94:43:77:0d:
a4:ee:43:99:82:8e:d3:d9:53:19:ac:66:e3:9c:e1:
0f:ad:6a:43:5d:44:c4:50:f3:95:a9:4c:2a:3b:54:
73:8c:d7:a5:fa:d8:20:90:44:f7:5e:61:8a:d0:bf:
43:b5:ce:5e:57:36:bf:3a:1b:b6:0e:c2:e3:17:1c:
8d:bd:ab:d1:3d:69:30:c7:58:9b:84:07:60:67:84:
b1:0c:7a:a8:7d:47:a7:48:6c:eb:30:e7:73:c0:dc:
14:17:37:e4:20:30:50:cb:50:78:72:1c:b5:94:70:
a8:cf:c7:94:62:97:70:e9:98:41:e2:98:dd:32:63:
17:1c:6d:cf:d4:ae:fb:23:1e:49:4f:89:a1:8a:a7:
44:b6:8d:76:dd:81:c2:d1:68:e8:04:1b:6e:22:1b:
14:81:97:4b:36:90:6d:61:ce:c8:25:55:4f:8d:71:
20:eb:95:b1:8e:c5:cc:97:88:52:0f:87:03:cc:3a:
2c:9a:38:5d:39:87:14:57:e1:d1:8e:50:7c:26:59:
c7:89:4a:a2:cd:87:a7:ac:e8:79:f4:fc:fe:01:f5:
12:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:66:3D:A4:B4:B4:BF:0B:EE:35:31:10:AE:1E:C8:01:D5:E7:E1:B2
X509v3 Authority Key Identifier:
keyid:4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:db:6c:91:69:26:b4:14:23:62:24:b7:53:78:ab:b9:a8:5b:
cb:d1:54:78:83:45:28:97:b7:ae:9d:c8:0c:b1:61:d7:c2:c6:
f9:41:53:f6:7a:1f:58:33:98:9f:fa:b5:14:3b:2f:94:2f:ba:
7b:e3:ee:f8:44:7b:8f:19:9e:34:8e:5a:d9:a7:ce:9d:6d:c3:
1e:44:58:b0:47:3f:12:df:94:9b:19:86:be:15:5a:04:0e:c0:
c3:d0:db:b0:0f:02:3c:d1:c7:6b:75:94:aa:86:c1:2d:82:50:
fe:67:f3:ba:7d:4f:7c:c1:1f:c3:e9:30:7d:52:1a:02:52:f7:
fb:6f:c9:09:62:09:35:a9:1e:36:de:ad:22:20:49:64:ae:5f:
58:6b:1b:1f:0d:cc:1e:8b:f4:7b:cc:4e:77:88:e3:0b:df:1e:
b9:fb:18:6e:d4:12:f2:60:13:f5:a2:1a:7f:e0:c4:df:f3:46:
a1:ec:06:ab:27:f6:e8:d6:76:d6:b6:91:1f:4a:0f:22:e6:16:
6e:2b:93:c3:bb:88:5f:b1:5f:39:e4:8f:60:f1:2c:39:74:03:
a9:9d:ad:c8:d2:1d:aa:f6:55:6b:ac:f9:c2:88:c1:a6:2a:ad:
86:d5:2f:58:3b:c8:9c:04:b9:5e:f8:67:1d:33:88:cc:67:c2:
61:ff:b9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:25:59 2026 by rpki-client