
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
File: toWM6JkRXyxWHHZl74vgaIBoEJw.mft (raw, json)
Hash identifier: lCwJuYVFYV/WqU2yFTC2osKeIp0eur61X1rrdYtU3GE=
Subject key identifier: F7:48:43:82:BB:42:02:90:15:8B:F0:53:18:1F:B1:1F:ED:C3:8E:87
Authority key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
Certificate issuer: /CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
Certificate serial: 0A37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
Manifest number: 0A10
Signing time: Tue 06 Oct 2026 19:53:20 +0000
Manifest this update: Tue 06 Oct 2026 19:53:19 +0000
Manifest next update: Tue 13 Oct 2026 19:53:19 +0000
Files and hashes: 1: toWM6JkRXyxWHHZl74vgaIBoEJw.crl (hash: yJs2u7s7JCmv2tWNXnz9m9GiCMsU7M5YP4kIfPyzhEI=)
2: 95DC9990D0A211EE9C97373FC4F9AE02.roa (hash: l2egmQd3zsdtRbINJVQmYS6+Vjf9g6ZTB8lsSZj6OnM=)
3: 9D83F4E6FB7711EDA78AAC1DC4F9AE02.roa (hash: 8s3OLywFU0iSe0asfoBu9okI5WeihCkAQz7KzNUA7Rc=)
4: 9C454274FB7711EDA78AAC1DC4F9AE02.roa (hash: hhZNB/58biqDU/puvBuRkIn6cgsCh7V3z4s20oQo9/c=)
5: 8C79CFC6A6FD11EAA1B00744C4F9AE02.roa (hash: ZfiWnW2QWI/riqicAikvVoOAgBW+tB/Nt2Y+DVitm8Q=)
6: 1A4ED0E8A71811EA80A77B1FC4F9AE02.roa (hash: oq37cvFdf0Lwnn48NX4zkotyv1ewB96NkLUyO7/90Dg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl
rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2615 (0xa37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D120D, serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
Validity
Not Before: Oct 6 19:53:19 2026 GMT
Not After : Oct 13 19:53:19 2026 GMT
Subject: CN=6ac551b0-822b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:8f:aa:69:01:9b:92:f0:40:b2:f1:8e:44:
1c:81:c9:44:a6:96:cc:fb:33:1a:51:24:62:06:23:
42:30:fb:04:a7:ee:2c:0c:2b:92:84:34:5a:81:e8:
39:a4:94:52:40:e2:67:df:2e:24:5b:5a:eb:13:4e:
da:9f:d4:05:73:ee:11:41:41:06:a9:68:d8:13:04:
81:99:e7:65:ca:92:f6:51:0a:6e:37:04:39:e7:4b:
42:ff:bc:19:29:ae:14:78:bd:fc:7f:61:69:60:7f:
2b:77:f2:0c:f6:c9:ba:da:8c:75:82:2d:9a:7b:f7:
f2:73:b5:39:86:7e:12:0d:12:fe:98:3c:28:0a:5e:
5d:93:1b:7a:aa:b1:2b:81:ba:17:9e:28:80:e2:04:
53:a3:6a:9d:3a:ec:80:79:71:81:fe:53:5a:78:e6:
11:8e:1d:32:5a:d5:3a:f0:74:e6:1a:40:7e:79:5d:
a4:b6:67:b6:29:58:f5:39:07:99:96:bb:54:36:2b:
be:29:ca:56:37:f9:f9:d0:d1:54:6b:5f:bc:c1:20:
07:cb:68:da:35:16:28:a4:bd:3f:0b:8e:b3:a6:4f:
8c:e0:07:61:bd:fa:bc:6a:51:f2:16:23:d1:ca:09:
00:35:a7:dd:e0:09:44:c3:e0:e0:cb:99:a0:df:a9:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:48:43:82:BB:42:02:90:15:8B:F0:53:18:1F:B1:1F:ED:C3:8E:87
X509v3 Authority Key Identifier:
keyid:B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:40:62:9b:37:6a:64:dc:b5:e0:66:37:48:cd:8e:b1:44:2d:
99:9f:0c:1e:1e:a2:d3:37:b0:f5:21:70:6d:a0:32:82:d8:6f:
75:bf:84:a9:7f:46:af:3b:ac:15:e1:5f:75:7d:3f:f9:3d:e5:
a8:29:e7:d4:20:d5:12:9d:df:dc:4d:e2:24:d6:ee:b0:90:9d:
7b:10:33:c5:49:f2:dd:89:26:e0:8f:ba:74:b4:f3:19:b4:21:
04:2c:eb:8f:a3:f4:85:08:48:b2:d9:a5:db:51:d3:02:7d:69:
bc:b4:71:2f:4f:2c:88:44:18:09:be:ad:08:af:68:15:a6:48:
a4:71:7e:c0:27:cf:8b:bf:93:fb:75:8b:b1:96:90:c1:b1:4e:
6f:19:cd:7e:38:93:8c:6e:ae:8b:2d:55:9f:cc:b8:9e:97:a2:
37:f3:9c:c8:68:48:82:c6:e0:97:1c:ac:c2:15:cc:1f:7c:cf:
68:91:a0:d8:94:41:41:12:2a:d3:60:2d:a4:e2:22:0a:c5:b3:
70:82:01:29:ce:a5:a5:8a:58:e4:43:5e:04:2d:75:a0:d4:b6:
cc:a9:ef:cd:59:8e:11:e9:c7:91:2e:cf:c2:34:be:bc:c9:b8:
9d:4a:0c:73:7f:64:15:bc:96:a9:4c:33:80:eb:79:db:8c:ce:
85:2b:ce:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:27:34 2026 by rpki-client