
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft
File: fToi3tGr8M05CSgLibI3bFRfbwc.mft (raw, json)
Hash identifier: dyJWzei+WR1RXeJPTibYdMh7hug7UK3w9HjJKqOj8Sw=
Subject key identifier: 5A:01:F1:A1:E4:C0:13:55:83:20:34:E2:C7:A1:48:0E:DB:D2:CC:AE
Authority key identifier: 7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07
Certificate issuer: /CN=A91AC232/serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07
Certificate serial: 0790
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft
Manifest number: 0786
Signing time: Wed 20 May 2026 21:36:45 +0000
Manifest this update: Wed 20 May 2026 21:36:45 +0000
Manifest next update: Wed 27 May 2026 21:36:45 +0000
Files and hashes: 1: fToi3tGr8M05CSgLibI3bFRfbwc.crl (hash: bbh97jWW1wTE97wl7T3Era7HqlUhqVIRJ4qJl8lT0JM=)
2: D93244BAF2EF11ED91F08A4FC4F9AE02.roa (hash: Hti98hcC+ag2IJ3RoxadOaVc5hLgBIiE7Elxt08Tr5c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl
rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:36:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1936 (0x790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC232, serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07
Validity
Not Before: May 20 21:36:45 2026 GMT
Not After : May 27 21:36:45 2026 GMT
Subject: CN=6a0e296d-055a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:d3:9e:e3:aa:df:77:6f:9b:69:11:01:c7:
3c:b4:f1:87:bd:49:dc:2a:c2:ff:79:82:be:7b:73:
e6:27:f2:4f:eb:61:19:31:33:e9:99:b1:a8:f4:35:
b8:a2:9f:39:5e:e3:3e:46:cc:e4:d2:9d:68:3e:8e:
df:36:4c:2f:4c:81:8b:4f:a9:b3:fb:4a:58:c5:d6:
e0:a1:64:f5:5c:d3:c1:cf:60:1b:51:16:46:1a:04:
7b:f4:1e:28:79:3c:0f:b6:ee:31:ff:4c:0f:5a:b7:
63:de:b3:21:a6:94:a9:05:b4:7b:e3:6c:f6:3d:5d:
ad:ad:53:96:64:7c:a0:c4:30:d7:ed:c0:b4:85:08:
3a:45:92:e4:3f:5c:d5:28:d1:82:62:4a:02:74:6f:
f1:73:75:6d:4a:3d:bc:63:36:be:2a:b0:34:f6:e6:
96:b3:47:d8:38:07:b0:1c:0c:32:49:94:85:59:76:
69:be:a3:08:e8:f4:8d:02:b2:b2:86:97:a6:00:bc:
e9:8f:a1:ed:d8:2e:61:f2:48:2d:7c:2c:98:ee:73:
14:96:74:0e:41:b3:36:18:f5:f9:f0:87:df:8f:77:
4a:e8:59:41:69:e4:d8:80:b8:bb:cc:b2:84:94:c3:
a4:ae:0b:4c:5e:3b:cb:a5:af:0b:15:3c:ba:84:c4:
bb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:01:F1:A1:E4:C0:13:55:83:20:34:E2:C7:A1:48:0E:DB:D2:CC:AE
X509v3 Authority Key Identifier:
keyid:7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:35:3b:07:2a:d5:a6:a2:f0:2e:23:6a:f2:1a:d6:0d:05:6b:
ad:1b:d5:a4:46:81:53:eb:a9:b3:f6:a5:84:1e:16:57:cc:0d:
37:c5:2d:91:02:a8:4e:1b:ba:1a:b5:ed:75:8f:cf:22:fb:ad:
fa:26:09:5e:83:ca:4c:23:21:2a:de:15:1e:00:12:d9:87:f6:
7f:5d:ab:06:b6:f9:93:1d:14:b4:85:0c:dc:95:38:e4:ee:14:
c0:40:83:15:cb:cb:ed:48:f3:8c:6c:77:94:fb:6b:b3:20:36:
c8:7f:3b:c8:bc:88:0d:de:e3:c7:00:93:23:23:c3:32:0c:26:
77:51:24:c5:c6:43:15:98:96:e1:00:3c:e0:d7:8d:02:c3:c9:
dc:2e:25:e0:28:10:5d:00:b9:77:23:1b:71:12:a6:2c:83:af:
52:73:e6:bd:07:ba:70:ed:b4:ad:59:59:9a:f2:58:6f:61:d0:
88:72:56:c4:84:da:95:18:e9:53:27:58:ec:8a:62:95:f7:25:
69:b4:ff:97:92:72:1e:0b:ad:ae:f8:74:f2:cf:be:ed:d3:fb:
a4:33:b4:1f:2f:45:cf:3b:66:ed:9e:06:3c:b7:bc:a2:73:f8:
08:c5:b8:9b:d1:6b:ae:4e:03:0b:73:eb:cf:a9:36:8f:f4:35:
6d:75:aa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:13:43 2026 by rpki-client