
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
File: toWM6JkRXyxWHHZl74vgaIBoEJw.mft (raw, json)
Hash identifier: n9W/YhGTMBNBU+8OpzU8/xhcTkvE44mbUDPf8C7Fvks=
Subject key identifier: 48:B5:43:04:B9:77:C8:EE:9F:03:E9:B3:03:67:62:2F:D2:04:AC:9E
Authority key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
Certificate issuer: /CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
Certificate serial: 0A1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
Manifest number: 09F7
Signing time: Tue 18 Aug 2026 20:07:33 +0000
Manifest this update: Tue 18 Aug 2026 20:07:32 +0000
Manifest next update: Tue 25 Aug 2026 20:07:32 +0000
Files and hashes: 1: toWM6JkRXyxWHHZl74vgaIBoEJw.crl (hash: bpaPuBcZ52Bzxbzx0LyKqPm88lF6yjGpsU0gyg0qVgI=)
2: 9D83F4E6FB7711EDA78AAC1DC4F9AE02.roa (hash: 8s3OLywFU0iSe0asfoBu9okI5WeihCkAQz7KzNUA7Rc=)
3: 9C454274FB7711EDA78AAC1DC4F9AE02.roa (hash: hhZNB/58biqDU/puvBuRkIn6cgsCh7V3z4s20oQo9/c=)
4: 95DC9990D0A211EE9C97373FC4F9AE02.roa (hash: l2egmQd3zsdtRbINJVQmYS6+Vjf9g6ZTB8lsSZj6OnM=)
5: 8C79CFC6A6FD11EAA1B00744C4F9AE02.roa (hash: ZfiWnW2QWI/riqicAikvVoOAgBW+tB/Nt2Y+DVitm8Q=)
6: 1A4ED0E8A71811EA80A77B1FC4F9AE02.roa (hash: oq37cvFdf0Lwnn48NX4zkotyv1ewB96NkLUyO7/90Dg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl
rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:07:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2590 (0xa1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D120D, serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
Validity
Not Before: Aug 18 20:07:32 2026 GMT
Not After : Aug 25 20:07:32 2026 GMT
Subject: CN=6a84bb85-ec4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:f5:f5:86:6d:e2:67:a7:c1:2a:e7:64:7c:
e7:f0:eb:0e:be:85:e5:b2:f9:f5:21:75:44:19:6c:
62:b7:2c:6f:05:9a:88:0a:46:80:4a:59:50:ae:f6:
44:22:bb:e3:78:ed:a8:b3:eb:82:50:bc:85:e2:24:
ff:e5:cc:4c:87:ce:63:3e:07:71:05:e7:40:6d:26:
39:7b:f4:3b:ad:75:14:e6:2c:5b:ad:ea:13:a5:98:
6a:f2:af:52:be:ea:53:e3:77:ab:f5:7c:da:89:54:
76:7e:fc:a8:02:a1:22:44:48:cc:54:80:69:a4:51:
3e:97:bc:dc:85:12:2a:f1:55:95:a1:d3:75:87:27:
95:dd:b6:e3:7f:65:d3:84:8d:53:33:18:7f:55:31:
e2:f5:8c:2b:07:ec:f1:4e:ae:41:75:08:86:39:93:
1e:42:3e:b7:2d:fc:ac:74:3d:fd:3e:92:0e:b0:f8:
ee:65:ce:b6:42:68:b4:c5:0b:cd:0b:94:ec:03:21:
01:2f:1f:a4:7c:66:19:10:be:06:5b:fe:c9:93:70:
c6:3b:0b:6e:0c:e7:b4:e9:19:5b:4f:c3:2b:96:85:
b5:b9:a7:06:29:19:ba:50:71:22:e5:91:d8:77:ce:
67:d6:06:4d:6b:85:fa:c8:16:8d:30:4f:71:51:26:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B5:43:04:B9:77:C8:EE:9F:03:E9:B3:03:67:62:2F:D2:04:AC:9E
X509v3 Authority Key Identifier:
keyid:B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:9b:e0:c9:c1:0e:74:3f:4e:b9:3f:f9:3b:b4:c8:9c:91:b3:
3e:bd:4b:49:64:70:19:f5:ce:0f:2b:e8:69:2e:8f:30:2a:22:
21:ae:20:d8:0e:2a:88:bc:1e:af:8c:89:d4:eb:6f:0a:09:17:
63:83:24:b0:84:ed:0f:c1:a5:a7:fa:59:b8:cf:5c:01:62:8f:
34:ec:fd:d5:0f:f2:40:01:ad:30:6d:87:0d:da:38:8c:dd:48:
ce:3a:a4:8e:ae:82:77:ec:9f:12:44:b5:9f:ea:5d:19:29:65:
86:03:ab:93:cc:11:32:9f:88:df:74:07:fc:81:13:21:35:ca:
1b:ab:3b:ca:9f:a4:40:64:1d:06:d5:3d:01:3c:7e:58:f8:02:
09:19:00:49:dc:28:10:a9:37:38:5e:f6:13:e1:44:d0:16:2c:
43:52:e5:f1:41:6e:f2:be:cd:8f:5d:23:6c:3b:96:bb:37:dd:
96:46:d8:ea:ce:b7:bc:84:1e:68:df:67:73:4c:89:50:0d:92:
ce:24:7a:a4:95:c2:d8:f2:58:4a:0a:e4:44:8e:92:bd:35:13:
a2:58:fc:c1:45:31:8b:f2:2d:c3:be:cf:aa:e5:a9:00:d0:be:
d8:d5:78:81:c5:a5:07:c8:c4:e2:0f:78:a4:32:59:f3:25:af:
82:59:47:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:55:24 2026 by rpki-client