
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
File: toWM6JkRXyxWHHZl74vgaIBoEJw.mft (raw, json)
Hash identifier: GXQADyn+TYcXr6idTT2kLOV12JxgFyumU2Ua4606apY=
Subject key identifier: 99:27:28:56:B3:19:86:98:E8:0B:92:0F:EB:1B:54:9E:BE:48:4D:3A
Authority key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
Certificate issuer: /CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
Certificate serial: 0A11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
Manifest number: 09EA
Signing time: Fri 24 Jul 2026 20:19:49 +0000
Manifest this update: Fri 24 Jul 2026 20:19:48 +0000
Manifest next update: Fri 31 Jul 2026 20:19:48 +0000
Files and hashes: 1: toWM6JkRXyxWHHZl74vgaIBoEJw.crl (hash: vz/EeXWItwnWoYagrPBgzXvq6DeHMxBYm94/xtf5oYM=)
2: 9D83F4E6FB7711EDA78AAC1DC4F9AE02.roa (hash: 8s3OLywFU0iSe0asfoBu9okI5WeihCkAQz7KzNUA7Rc=)
3: 95DC9990D0A211EE9C97373FC4F9AE02.roa (hash: l2egmQd3zsdtRbINJVQmYS6+Vjf9g6ZTB8lsSZj6OnM=)
4: 8C79CFC6A6FD11EAA1B00744C4F9AE02.roa (hash: ZfiWnW2QWI/riqicAikvVoOAgBW+tB/Nt2Y+DVitm8Q=)
5: 9C454274FB7711EDA78AAC1DC4F9AE02.roa (hash: hhZNB/58biqDU/puvBuRkIn6cgsCh7V3z4s20oQo9/c=)
6: 1A4ED0E8A71811EA80A77B1FC4F9AE02.roa (hash: oq37cvFdf0Lwnn48NX4zkotyv1ewB96NkLUyO7/90Dg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl
rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 18:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2577 (0xa11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D120D, serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
Validity
Not Before: Jul 24 20:19:48 2026 GMT
Not After : Jul 31 20:19:48 2026 GMT
Subject: CN=6a63c8e5-e90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:98:63:ed:3c:05:31:01:e0:4c:92:3b:05:d9:
ea:16:2e:36:bc:9c:f6:53:8f:91:1e:45:6a:fb:f1:
2a:10:eb:66:3d:ac:f7:4d:da:db:4b:2f:21:fd:3d:
32:f4:94:d7:f1:66:26:de:8d:87:d0:a6:b9:a8:70:
85:17:48:54:27:f0:2c:30:63:79:3b:89:68:00:32:
77:29:db:18:2f:06:3f:cc:da:24:d0:59:6c:73:63:
d1:11:f6:80:30:c6:4a:43:80:5e:90:62:50:4d:b9:
ce:81:43:39:1a:d0:0f:b0:c6:22:77:7c:7f:41:7d:
57:3f:e3:94:6f:2a:ed:5e:ad:18:c6:91:6f:af:f9:
86:dc:ee:da:22:f5:63:69:75:6a:ec:e1:9c:8b:a5:
39:91:a5:77:4a:78:72:4e:28:33:2a:5b:56:92:e8:
73:4d:a2:2d:a3:4a:1c:7f:9a:c1:37:9e:0a:9f:d8:
75:e9:31:2a:99:22:d8:0c:4e:ab:15:87:c5:90:fa:
a1:75:cf:0a:db:a6:46:b7:d2:e6:2d:e5:ef:0b:97:
0e:4d:63:1c:c5:70:ef:7b:41:27:19:1e:c2:d6:0c:
11:06:42:5d:e0:7b:5c:e9:0c:b6:2e:20:5c:83:4f:
9a:07:3c:c3:0f:41:58:20:ba:c1:69:40:1a:5d:32:
a9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:27:28:56:B3:19:86:98:E8:0B:92:0F:EB:1B:54:9E:BE:48:4D:3A
X509v3 Authority Key Identifier:
keyid:B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:b0:35:42:c0:86:41:d9:8f:90:da:de:23:50:1f:b2:0d:11:
92:92:6a:5f:cf:f2:ac:1e:16:67:1b:4b:a1:0a:51:f8:b6:4d:
ef:fc:05:ae:da:f5:f3:d6:37:b1:c4:6f:a3:5a:c6:4e:83:2f:
3e:77:2e:a5:1a:80:7b:ab:f9:b1:94:da:e4:32:1e:1a:30:86:
df:e8:10:0e:43:8c:ca:85:c7:31:99:41:be:3d:4c:7e:7a:53:
c5:ac:3e:40:f4:a6:bd:98:ca:8a:f8:3f:7b:6a:81:82:56:d1:
e2:d0:9a:4e:d2:68:95:9c:5a:ba:6a:06:c3:48:eb:33:b3:fc:
39:8f:2e:eb:53:52:a4:07:12:78:af:12:23:69:6e:59:21:b8:
43:62:03:62:a2:ae:2a:d5:5d:62:b0:96:16:b6:62:30:a0:fe:
90:c9:9f:1e:8c:dd:8b:69:1e:bd:58:c0:7e:98:d0:48:38:d5:
ef:d6:10:40:e1:fb:1c:5c:de:2c:f2:b1:8a:df:51:e0:e5:15:
78:dd:5c:21:ef:d0:77:ac:b9:2d:e7:74:65:79:9e:20:9f:5f:
cb:aa:8c:b7:6f:98:18:00:b9:96:30:76:68:14:5e:5c:d6:65:
08:cc:5b:b6:da:93:22:10:cf:6f:4c:72:28:b4:55:75:66:25:
3a:fa:2a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:31:57 2026 by rpki-client