
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft
File: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft (raw, json)
Hash identifier: IeKiQlEtRSJUn/UfCv/JlV+e++Gz8kse5TVSVbOgcW0=
Subject key identifier: E5:4D:32:99:FF:41:D9:A1:66:95:02:33:7B:81:BF:32:7B:16:54:34
Authority key identifier: 4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A
Certificate issuer: /CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A
Certificate serial: 0479
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft
Manifest number: 0454
Signing time: Tue 27 Oct 2026 00:05:06 +0000
Manifest this update: Tue 27 Oct 2026 00:05:05 +0000
Manifest next update: Tue 03 Nov 2026 00:05:05 +0000
Files and hashes: 1: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl (hash: b6jAXSNhv8NHiaWD6Zp9ZJDHE5Ota8nzXjq+iy3tnKk=)
2: 2A616414808A11EF813A8343C4F9AE02.roa (hash: txemr+/aiWiylW2NMSpuJdNgO6ny7R4M/jIvXezVeHw=)
3: 6D3CF65A134311EEA2AF3B1EC4F9AE02.roa (hash: 9Q3QJPd8i3UmG3NaIKu69p2zzUVJHcFuovuvNLo0Amg=)
4: 5E0B2804158811EEA0660D12C4F9AE02.roa (hash: RN/vw4EhhiGA2b5xq7QYgZp5qwRJ27nDeO7+pr9fwHE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl
rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 00:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1145 (0x479)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130138, serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A
Validity
Not Before: Oct 27 00:05:05 2026 GMT
Not After : Nov 3 00:05:05 2026 GMT
Subject: CN=6adfeab2-27aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:42:72:3b:08:20:7f:ae:2d:ea:f7:aa:3b:
9e:77:14:fe:49:4e:cb:ff:c8:f5:c1:19:4d:4c:19:
14:c4:67:18:81:b3:e7:df:e0:ae:4d:4c:dc:fe:1a:
f1:99:0d:83:27:aa:d4:fa:e2:38:3f:d7:61:f0:9a:
a3:c9:52:ef:ac:2e:58:7f:d7:02:fb:66:5d:f3:b6:
68:a1:28:ef:2b:f8:f0:fc:c6:02:43:71:48:87:f9:
47:0f:d2:c3:33:e5:4b:56:29:bf:06:61:78:dc:f6:
f5:23:d4:46:ae:a5:0b:1a:ec:73:bd:4d:2b:5f:00:
41:0f:39:c3:52:cd:77:d6:c7:25:48:ac:5e:6e:b0:
60:38:0f:d1:21:13:5f:92:4d:5e:39:0b:54:2c:7b:
b7:13:36:b2:7c:a3:2d:5e:c5:1c:b9:9a:bd:a0:77:
c6:d1:e6:b7:57:19:75:83:34:b2:68:80:42:3a:f5:
e3:cf:95:70:fc:0b:b4:b0:dd:0f:0f:1e:99:41:ae:
c9:0d:58:87:90:a0:b7:13:6c:93:bc:4a:4c:d4:22:
24:28:28:84:d2:c9:d0:31:91:d0:e3:5f:f8:ed:da:
66:df:24:0e:ef:69:ab:95:f0:12:ad:53:d0:2e:8b:
85:f3:b6:ab:64:c6:9a:ef:9c:55:25:3a:c5:68:dd:
61:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4D:32:99:FF:41:D9:A1:66:95:02:33:7B:81:BF:32:7B:16:54:34
X509v3 Authority Key Identifier:
keyid:4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5c:52:d0:83:fa:76:2e:36:ea:7d:46:85:ea:30:fd:7f:89:
e6:14:56:0c:b7:f6:60:1b:de:34:c4:96:cc:83:43:4e:34:7c:
9b:dd:ca:6f:7e:61:90:f1:fd:ab:7f:c3:87:65:5f:d1:ba:08:
72:a0:be:73:a2:6c:46:97:f3:fa:65:79:b1:1b:08:e3:59:90:
01:93:5f:6f:0e:da:1b:1b:5c:ee:0d:f5:31:93:6f:2e:58:a1:
b7:98:24:ae:e1:e9:92:3b:75:37:e7:d3:1a:4c:fa:d0:a7:45:
c9:f1:be:92:a6:7e:48:f2:c2:af:b0:82:dc:f0:48:92:66:6a:
d3:14:77:7a:9a:dd:7e:2d:6c:47:88:72:b2:ed:40:39:a3:4c:
11:b1:44:6a:0b:2a:e8:62:12:dd:2f:c2:48:78:86:79:48:e0:
8b:63:0e:19:e0:9f:7e:24:62:3c:a5:db:d7:53:85:54:41:6c:
10:39:a9:72:9a:da:2d:49:0e:5b:8c:fb:09:6d:06:31:15:d7:
28:a7:66:8f:24:26:75:e6:d8:8a:1a:2a:86:f3:41:77:50:32:
03:29:bd:85:55:6e:de:d9:b6:0f:47:b6:35:78:6c:15:0b:13:
4d:d7:5c:31:d5:d8:a7:9b:d5:ff:41:99:83:a1:22:3e:ba:a9:
44:c3:c3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:14:20 2026 by rpki-client