
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
File: toWM6JkRXyxWHHZl74vgaIBoEJw.mft (raw, json)
Hash identifier: l8UAX/zAYvS8C8zmPCBuv8TPe+0jBu1TT5LJOuasNLU=
Subject key identifier: D6:5D:8E:22:44:CE:02:1D:2A:0C:91:73:9D:C1:A2:04:DB:41:AA:71
Authority key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
Certificate issuer: /CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
Certificate serial: 0A3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
Manifest number: 0A14
Signing time: Wed 14 Oct 2026 19:58:16 +0000
Manifest this update: Wed 14 Oct 2026 19:58:16 +0000
Manifest next update: Wed 21 Oct 2026 19:58:16 +0000
Files and hashes: 1: toWM6JkRXyxWHHZl74vgaIBoEJw.crl (hash: A+FsIOjTVzAMi9ahOksAdJ+G1xqjqD9zix88MXg+v8M=)
2: 95DC9990D0A211EE9C97373FC4F9AE02.roa (hash: l2egmQd3zsdtRbINJVQmYS6+Vjf9g6ZTB8lsSZj6OnM=)
3: 1A4ED0E8A71811EA80A77B1FC4F9AE02.roa (hash: oq37cvFdf0Lwnn48NX4zkotyv1ewB96NkLUyO7/90Dg=)
4: 8C79CFC6A6FD11EAA1B00744C4F9AE02.roa (hash: ZfiWnW2QWI/riqicAikvVoOAgBW+tB/Nt2Y+DVitm8Q=)
5: 9C454274FB7711EDA78AAC1DC4F9AE02.roa (hash: hhZNB/58biqDU/puvBuRkIn6cgsCh7V3z4s20oQo9/c=)
6: 9D83F4E6FB7711EDA78AAC1DC4F9AE02.roa (hash: 8s3OLywFU0iSe0asfoBu9okI5WeihCkAQz7KzNUA7Rc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl
rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 18:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2619 (0xa3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D120D, serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
Validity
Not Before: Oct 14 19:58:16 2026 GMT
Not After : Oct 21 19:58:16 2026 GMT
Subject: CN=6acfded8-fd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:df:e8:c4:97:ea:52:e1:73:cc:ba:c9:4f:db:
85:f4:eb:a7:cc:44:b2:43:cc:8b:80:5d:3d:de:52:
b3:a6:67:84:20:bf:d6:7b:6b:f4:3c:81:9e:e8:49:
ba:20:4f:fd:42:e6:fb:7b:95:c8:a5:43:9c:dd:0a:
fc:fe:09:08:a1:b9:70:1a:53:b1:63:9e:b4:43:df:
58:a5:a2:cb:d7:db:24:19:9e:21:06:72:87:92:b4:
a4:71:fe:59:19:0f:11:67:c5:af:51:5d:f5:91:74:
6e:ae:71:35:97:73:49:4a:6a:2d:43:7c:d6:62:b5:
ae:31:56:50:c7:37:db:4c:bb:bd:76:32:f8:d0:2b:
67:a6:d6:dd:73:61:22:b0:ab:b9:5e:3b:1a:82:76:
72:17:fb:26:97:6a:e4:fd:06:3c:07:f0:f0:c8:fc:
81:5d:79:77:95:52:22:e0:3b:30:00:22:64:81:4a:
3e:cf:c2:42:96:8a:7d:f5:11:bb:c2:d6:c2:b4:87:
5e:36:9a:81:df:26:ae:01:60:50:63:bc:17:fc:25:
c2:b0:8b:3e:ea:c9:8f:5b:54:52:12:a1:09:06:f3:
d6:5e:0d:f8:8b:98:5f:0a:6f:9b:2c:88:98:73:d3:
79:64:22:17:a5:21:ba:a7:1d:de:d8:d0:02:21:68:
0a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5D:8E:22:44:CE:02:1D:2A:0C:91:73:9D:C1:A2:04:DB:41:AA:71
X509v3 Authority Key Identifier:
keyid:B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9d:6d:20:70:cc:96:67:71:d2:68:b7:ae:18:7a:f2:2a:23:
85:80:95:25:69:12:ab:8c:a8:49:43:6d:c2:75:11:52:ae:70:
cc:ac:a6:13:42:66:c0:32:41:1c:19:f9:f7:b4:1e:a4:75:c5:
fe:f2:29:29:b3:e3:86:8f:e8:57:5e:33:76:d1:f3:4e:6b:3f:
f7:a7:6e:ee:4e:2f:01:c3:50:ab:5c:8b:49:f8:39:cd:f9:7e:
36:15:3a:41:22:e3:9a:37:43:80:72:c5:41:9e:d9:80:00:1d:
ba:7e:14:17:42:b3:48:f5:90:6b:d9:01:82:53:25:c7:16:bb:
39:b0:1b:56:22:4c:a6:e1:26:82:e3:25:94:ee:6d:6b:40:bb:
4e:93:e2:a3:48:97:5d:9d:8e:56:2d:51:c9:c0:73:7c:46:e2:
07:0f:f5:ff:d0:6b:b7:fa:0b:a4:05:6f:08:d4:8c:22:a6:c8:
98:29:34:c0:b3:76:d2:bd:61:c3:87:d5:d6:5e:71:2a:b4:c1:
3c:19:c4:40:77:d6:cd:1f:57:2a:d4:ec:e8:00:44:51:5b:cd:
48:ca:38:7f:48:e6:fc:6b:2f:c6:0b:68:94:90:df:c9:3b:04:
5e:3f:e2:38:35:d6:36:61:84:f9:e5:32:45:bb:b8:9f:a0:fa:
0b:75:6c:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDEyMEQxMTAvBgNVBAUTKEI2ODU4Q0U4OTkxMTVGMkM1NjFDNzY2NUVGOEJFMDY4
ODA2ODEwOUMwHhcNMjYxMDE0MTk1ODE2WhcNMjYxMDIxMTk1ODE2WjAYMRYwFAYD
VQQDEw02YWNmZGVkOC1mZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7N/oxJfqUuFzzLrJT9uF9OunzESyQ8yLgF093lKzpmeEIL/We2v0PIGe6Em6
IE/9Qub7e5XIpUOc3Qr8/gkIoblwGlOxY560Q99YpaLL19skGZ4hBnKHkrSkcf5Z
GQ8RZ8WvUV31kXRurnE1l3NJSmotQ3zWYrWuMVZQxzfbTLu9djL40Ctnptbdc2Ei
sKu5XjsagnZyF/sml2rk/QY8B/DwyPyBXXl3lVIi4DswACJkgUo+z8JClop99RG7
wtbCtIdeNpqB3yauAWBQY7wX/CXCsIs+6smPW1RSEqEJBvPWXg34i5hfCm+bLIiY
c9N5ZCIXpSG6px3e2NACIWgKSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNZdjiJE
zgIdKgyRc53BogTbQapxMB8GA1UdIwQYMBaAFLaFjOiZEV8sVhx2Ze+L4GiAaBCc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIwRC81MUU4MEU5OEE2
RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkprUlh5eFdISFpsNzR2Z2FJQm9F
SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RvV002SmtSWHl4V0hIWmw3NHZnYUlCb0VKdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTIwRC81MUU4MEU5OEE2RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkprUlh5
eFdISFpsNzR2Z2FJQm9FSncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbp1tIHDMlmdx0mi3rhh68iojhYCVJWkSq4yoSUNtwnURUq5wzKymE0JmwDJB
HBn597QepHXF/vIpKbPjho/oV14zdtHzTms/96du7k4vAcNQq1yLSfg5zfl+NhU6
QSLjmjdDgHLFQZ7ZgAAdun4UF0KzSPWQa9kBglMlxxa7ObAbViJMpuEmguMllO5t
a0C7TpPio0iXXZ2OVi1RycBzfEbiBw/1/9Brt/oLpAVvCNSMIqbImCk0wLN20r1h
w4fV1l5xKrTBPBnEQHfWzR9XKtTs6ABEUVvNSMo4f0jm/GsvxgtolJDfyTsEXj/i
ODXWNmGE+eUyRbu4n6D6C3VsxA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 01:53:39 2026 by rpki-client