
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft
File: toNIsZBwY8BERWnOsijqUkbQLxk.mft (raw, json)
Hash identifier: o8ffsULJpTXek7pOckRyW5S+kXjBbDVGtHoFihN3Dl8=
Subject key identifier: 80:69:E7:97:6F:FE:00:D1:80:05:B5:2C:D0:9C:8A:40:B2:7A:8F:24
Authority key identifier: B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19
Certificate issuer: /CN=A91B3CB5/serialNumber=B68348B1907063C0444569CEB228EA5246D02F19
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft
Manifest number: 86
Signing time: Wed 22 Jul 2026 18:25:23 +0000
Manifest this update: Wed 22 Jul 2026 18:25:23 +0000
Manifest next update: Wed 29 Jul 2026 18:25:23 +0000
Files and hashes: 1: toNIsZBwY8BERWnOsijqUkbQLxk.crl (hash: tCIIxct7ajj6gMbSqgCx5R1NnkgLjPhCVkrGuzK3+0s=)
2: 3AF6CDE4CE7E11F0BDD3E452C4F9AE02.roa (hash: 0wi2dknpR06NzdVHMhDQvzTD3ZFfo6Ir3jbrCyXBQX4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl
rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3CB5, serialNumber=B68348B1907063C0444569CEB228EA5246D02F19
Validity
Not Before: Jul 22 18:25:23 2026 GMT
Not After : Jul 29 18:25:23 2026 GMT
Subject: CN=6a610b13-c53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ee:44:a3:74:8e:a0:87:ab:c4:22:72:de:ea:
66:93:d0:33:1b:dc:c7:7b:ac:d4:0c:f1:a4:76:bf:
4e:96:93:a4:49:38:bc:cd:f9:c9:41:ac:db:7c:dc:
7c:f3:af:c2:ec:2b:e6:73:88:36:da:bd:5f:ab:19:
ab:0f:01:45:d4:7f:8c:d3:4d:c3:47:cc:71:eb:2a:
05:e5:9e:81:3c:83:50:e0:dc:62:f2:ad:f5:bb:b6:
20:67:e7:b4:1c:d4:73:c4:2f:a3:57:ca:38:b2:bc:
e7:8b:97:eb:44:a9:e5:19:0d:eb:ea:38:b9:47:14:
cc:1a:87:89:df:ca:f5:07:ce:d9:54:12:2a:bb:13:
6a:0f:88:3c:2d:34:65:ee:b7:9a:06:98:cd:b3:ae:
4b:f5:1e:39:19:ca:a1:c1:db:98:5e:f4:29:44:b5:
10:a5:7b:c2:b9:2e:c3:d2:22:04:a0:86:cb:f0:9d:
21:07:56:43:e5:7e:6f:e3:32:f2:42:00:78:ca:7b:
b6:96:f9:a2:f0:98:a3:d9:a1:d8:36:7c:9f:49:f9:
a3:0b:13:13:95:a1:0d:64:67:64:6b:f8:e6:28:dc:
20:5b:9b:f2:ad:47:27:8e:c1:a5:fb:fc:f2:2c:20:
49:fb:94:71:71:06:50:0b:24:21:a2:25:6b:38:95:
7b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:69:E7:97:6F:FE:00:D1:80:05:B5:2C:D0:9C:8A:40:B2:7A:8F:24
X509v3 Authority Key Identifier:
keyid:B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:34:f9:04:4e:e4:8e:09:cc:1f:a8:95:44:ac:5d:d5:36:7e:
da:de:53:56:18:d4:ab:be:7e:5e:3b:44:e9:f0:8c:e2:70:70:
e4:97:3a:e7:71:76:45:d4:50:d6:3b:c0:3d:01:d3:99:8a:b3:
83:ac:6f:4e:fb:86:ad:77:ec:d1:02:59:98:f8:f9:79:12:bd:
45:10:6e:09:af:b2:4f:f7:21:e4:b1:1e:55:8b:4a:81:7b:f2:
cc:1e:48:14:7e:80:c3:c5:c9:3d:58:f7:20:52:44:57:93:4b:
6f:45:01:19:cc:dc:ad:fb:a2:69:58:7a:91:0e:e9:fb:49:14:
28:e7:a2:14:13:db:74:d5:fb:45:6d:b6:95:70:fb:78:85:1a:
38:34:23:eb:e9:06:cd:2c:7c:79:87:aa:f8:3f:2c:e2:4c:d8:
cf:85:c9:ab:20:60:d9:49:6c:8e:6d:cf:ae:c4:ec:32:17:c0:
cc:8d:e0:41:af:a2:27:5e:ec:34:7d:9f:33:55:e0:cb:b5:c3:
71:71:f2:c6:7c:65:56:0f:1d:19:a6:05:7f:7c:5d:a8:bf:25:
f3:7b:7a:0d:cc:95:87:a3:cb:27:0d:15:67:11:73:59:b8:fb:
2d:9e:cf:af:eb:7b:96:f5:8a:a2:11:3a:d3:d6:5b:2b:34:ef:
c5:37:03:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:26:00 2026 by rpki-client