
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
File: THDgIDLqWcKv1UGhhw10sEDRtqI.mft (raw, json)
Hash identifier: FJe5kxMZtOBkZssdoBrlgLEfnjxTgYhy6xc9I58lorg=
Subject key identifier: 0E:3C:7C:97:27:A4:42:92:D4:4F:83:78:5C:0D:D0:52:5B:FB:8B:74
Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
Certificate issuer: /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
Certificate serial: 0A15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
Manifest number: 0A06
Signing time: Thu 24 Sep 2026 19:43:31 +0000
Manifest this update: Thu 24 Sep 2026 19:43:30 +0000
Manifest next update: Thu 01 Oct 2026 19:43:30 +0000
Files and hashes: 1: THDgIDLqWcKv1UGhhw10sEDRtqI.crl (hash: NZJjmkk4hJ8wFEJ5Hiwgz9IwIfzpyk9/Q8ai4Cmuxqw=)
2: 193128AAD15D11EE8BD5C02BC4F9AE02.roa (hash: GsGKse+jvZV0Ypq4tt+9yydVOYc4iOZZx7JlseayyeQ=)
3: 05CABF92A64111EAB544074CC4F9AE02.roa (hash: SF124PgFJdMgEInYT/GtV8Bi1Qw6o/zRPCKi4I6lOOw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl
rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:43:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2581 (0xa15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D615F, serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
Validity
Not Before: Sep 24 19:43:30 2026 GMT
Not After : Oct 1 19:43:30 2026 GMT
Subject: CN=6ab57d63-0bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:95:6d:5c:63:80:e3:84:5e:f8:bc:84:09:
23:66:7a:70:82:85:1f:0c:4d:51:43:f5:0c:07:a4:
d4:33:8d:62:f5:40:df:21:42:e5:14:e6:c8:0a:d3:
fe:79:23:b4:cd:02:86:a1:77:c8:9f:13:27:70:2a:
ec:71:82:bb:31:16:cf:25:f4:5e:34:44:a1:1c:e2:
6c:d1:d7:5a:e0:c4:8c:48:6f:29:39:bf:ea:af:2b:
17:80:94:3d:31:7b:ca:2d:ad:ed:74:41:54:f2:72:
ef:69:b4:58:d6:a0:4a:d6:e4:b0:58:f9:7c:2d:99:
93:0c:7c:b0:88:0b:b7:94:85:de:8f:bc:1b:9c:f2:
95:fd:fd:35:2f:90:62:62:fe:84:9a:92:39:06:49:
02:89:22:0b:ba:44:bd:40:6a:c0:79:5d:66:3a:c7:
8a:19:11:e1:5e:dc:50:9e:31:9d:9e:96:0b:c0:e2:
6f:25:3f:20:7a:52:a7:e9:15:e2:ca:ed:b9:12:29:
e0:c0:80:ee:6f:25:b1:94:c8:a1:6c:02:0e:f0:45:
f5:d9:d0:9c:05:60:50:8e:b5:1c:e7:9f:6e:67:35:
4f:35:8e:53:f9:e0:a4:15:c5:1f:c9:e6:49:75:3d:
3e:5f:75:c0:a6:af:fd:f6:a8:35:4b:c4:b7:4b:71:
34:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3C:7C:97:27:A4:42:92:D4:4F:83:78:5C:0D:D0:52:5B:FB:8B:74
X509v3 Authority Key Identifier:
keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:5f:1c:4a:a4:68:77:0b:8f:02:e3:a5:a8:3c:c1:b6:31:c2:
57:2e:a7:79:5a:80:d1:9f:e8:7a:28:c8:46:00:9f:10:9e:a7:
12:e9:84:f8:00:13:f5:74:b1:2a:eb:b9:98:11:89:65:04:83:
40:8a:67:fb:df:35:3b:19:cb:83:9c:ed:4d:ad:98:2f:b3:2b:
08:78:1a:2b:e3:76:72:62:ee:02:b8:98:ea:49:99:50:ef:09:
d8:4a:4a:4c:4f:18:3b:86:3c:67:c1:a9:85:7d:ea:a4:de:97:
cd:5b:83:b2:98:88:37:6b:9c:f4:f0:2a:78:34:54:c3:a7:3e:
e4:94:57:80:ce:60:1c:2e:75:c1:ad:9e:16:90:58:1b:87:b2:
0f:53:77:7f:2b:0d:ec:7e:80:8e:1a:59:9a:55:fa:a7:0a:0e:
a4:7e:80:18:93:6f:0e:76:97:a3:f9:e4:35:75:de:46:c9:20:
65:19:c5:b5:56:f9:bd:62:cd:56:59:a1:ea:9b:ef:e4:4c:31:
80:95:7a:ed:a7:69:ea:db:3f:7f:c3:17:98:d7:aa:5e:44:9d:
8c:93:fd:cf:1b:a7:3a:e6:38:10:f0:f7:50:a3:7b:7e:53:cf:
6e:b8:c1:4c:68:ef:67:15:1d:22:a6:6b:81:64:e6:b6:b2:05:
67:f5:03:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:02:07 2026 by rpki-client