
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
File: toWM6JkRXyxWHHZl74vgaIBoEJw.mft (raw, json)
Hash identifier: iz4ZygmlgN3ER2gEspEWQwtHR3+wnqVp2ig6VffRczk=
Subject key identifier: 1D:8A:11:17:A1:38:46:3A:C6:13:E1:00:8D:15:72:19:67:7E:19:DC
Authority key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
Certificate issuer: /CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
Certificate serial: 0A13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
Manifest number: 09EC
Signing time: Tue 28 Jul 2026 20:10:53 +0000
Manifest this update: Tue 28 Jul 2026 20:10:53 +0000
Manifest next update: Tue 04 Aug 2026 20:10:53 +0000
Files and hashes: 1: toWM6JkRXyxWHHZl74vgaIBoEJw.crl (hash: DvdFiz/JXct7ar2mTQi0Jbf6FQgWiMf0ZtyxIXKYjXU=)
2: 9D83F4E6FB7711EDA78AAC1DC4F9AE02.roa (hash: 8s3OLywFU0iSe0asfoBu9okI5WeihCkAQz7KzNUA7Rc=)
3: 8C79CFC6A6FD11EAA1B00744C4F9AE02.roa (hash: ZfiWnW2QWI/riqicAikvVoOAgBW+tB/Nt2Y+DVitm8Q=)
4: 9C454274FB7711EDA78AAC1DC4F9AE02.roa (hash: hhZNB/58biqDU/puvBuRkIn6cgsCh7V3z4s20oQo9/c=)
5: 95DC9990D0A211EE9C97373FC4F9AE02.roa (hash: l2egmQd3zsdtRbINJVQmYS6+Vjf9g6ZTB8lsSZj6OnM=)
6: 1A4ED0E8A71811EA80A77B1FC4F9AE02.roa (hash: oq37cvFdf0Lwnn48NX4zkotyv1ewB96NkLUyO7/90Dg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl
rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:10:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2579 (0xa13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D120D, serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
Validity
Not Before: Jul 28 20:10:53 2026 GMT
Not After : Aug 4 20:10:53 2026 GMT
Subject: CN=6a690ccd-b003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:17:54:85:6d:0c:2d:18:8d:1b:bd:79:a6:
d3:5b:1c:e7:13:89:d4:e1:ee:3e:5b:c0:74:56:51:
c4:2d:20:ee:60:c0:a4:7e:45:18:f8:be:1c:f9:a3:
36:75:9c:c7:3c:ac:71:03:93:86:e7:3b:50:22:b9:
89:23:e9:91:e9:d0:46:eb:65:5b:b6:e9:19:72:27:
04:7e:fe:b4:63:fd:3d:e3:f4:f2:c5:79:6e:9a:be:
4f:64:70:59:37:10:1f:ec:a0:95:2c:93:90:66:2c:
34:56:f0:dc:8b:f0:b6:d9:02:52:c0:18:5e:14:7f:
d7:52:a7:44:fd:e4:98:d4:19:39:1f:a5:27:86:65:
2b:f5:a1:6b:17:0b:72:c6:ea:32:dd:64:79:ed:81:
bb:f5:9e:1f:bc:6e:dc:d1:67:a4:a3:f7:4c:02:be:
ea:33:22:41:c1:06:f7:09:ad:ab:47:30:11:ae:2b:
a9:d6:4c:a0:68:3e:66:3e:d3:46:8f:9b:b9:e6:8e:
24:0f:b3:b1:30:2e:75:88:e6:41:c7:d9:99:86:6c:
ba:9f:b4:69:c9:aa:30:cd:75:ef:d5:b2:3b:c6:96:
5c:40:dd:85:5d:d3:80:f9:b5:f7:c9:bd:d8:5a:38:
5d:1b:83:b6:29:b7:d7:8d:f7:a7:4b:2a:65:92:fd:
09:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8A:11:17:A1:38:46:3A:C6:13:E1:00:8D:15:72:19:67:7E:19:DC
X509v3 Authority Key Identifier:
keyid:B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:df:79:3e:1b:3e:a2:6e:e0:03:23:76:58:5d:28:5a:f0:35:
55:3c:31:2b:4d:46:13:c0:fd:7e:43:05:40:79:c4:a1:db:4c:
5b:34:dc:ab:a7:95:16:24:56:0f:4d:4a:0a:9b:8c:09:aa:85:
ba:f6:d0:32:94:a7:25:e0:a0:ee:89:4b:e4:8a:d0:0c:e3:f8:
db:e5:94:05:c2:17:15:b9:50:f6:3d:25:c4:a5:01:83:d8:d5:
07:53:75:31:2d:71:ae:cd:1d:20:f2:6b:89:de:25:1d:98:47:
97:95:b1:9a:08:d2:91:47:ec:af:19:e8:96:7f:93:78:0a:15:
db:04:d5:8b:d9:a4:c9:b7:89:45:0f:79:05:2d:0a:ee:a2:02:
35:97:8c:42:a4:94:96:1e:5f:85:d9:df:a4:55:89:bd:18:89:
98:4b:c2:92:aa:05:ed:2b:84:d4:c8:cc:07:71:86:4b:e9:3a:
94:23:99:c4:96:c5:59:b0:34:10:28:c8:e7:68:ef:3f:15:be:
0c:7e:3f:ab:87:7c:2e:a1:32:b0:ff:22:0b:08:b4:c6:05:27:
11:52:ea:60:46:c2:2f:04:d6:5e:c7:91:9e:c5:ac:11:37:e5:
00:1c:ed:f8:0e:60:6a:6b:48:07:0c:d3:0a:46:4c:eb:8b:8a:
ea:e2:36:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:38:41 2026 by rpki-client