
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
File: toWM6JkRXyxWHHZl74vgaIBoEJw.mft (raw, json)
Hash identifier: 1Jmsk4B34G5lT8BbvCtTezFg4o5tfq3FcTBoLl/3qOQ=
Subject key identifier: 03:D0:A6:93:87:96:57:81:69:46:8C:F6:89:F8:14:A6:12:6D:33:97
Authority key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
Certificate issuer: /CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
Certificate serial: 09EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
Manifest number: 09C7
Signing time: Sat 16 May 2026 19:53:32 +0000
Manifest this update: Sat 16 May 2026 19:53:31 +0000
Manifest next update: Sat 23 May 2026 19:53:31 +0000
Files and hashes: 1: toWM6JkRXyxWHHZl74vgaIBoEJw.crl (hash: P4zMGPlxl+1HsE3K7OiGDnO/9eiDuVLxMa+WJLhelPo=)
2: 9D83F4E6FB7711EDA78AAC1DC4F9AE02.roa (hash: 8s3OLywFU0iSe0asfoBu9okI5WeihCkAQz7KzNUA7Rc=)
3: 8C79CFC6A6FD11EAA1B00744C4F9AE02.roa (hash: ZfiWnW2QWI/riqicAikvVoOAgBW+tB/Nt2Y+DVitm8Q=)
4: 1A4ED0E8A71811EA80A77B1FC4F9AE02.roa (hash: oq37cvFdf0Lwnn48NX4zkotyv1ewB96NkLUyO7/90Dg=)
5: 9C454274FB7711EDA78AAC1DC4F9AE02.roa (hash: hhZNB/58biqDU/puvBuRkIn6cgsCh7V3z4s20oQo9/c=)
6: 95DC9990D0A211EE9C97373FC4F9AE02.roa (hash: l2egmQd3zsdtRbINJVQmYS6+Vjf9g6ZTB8lsSZj6OnM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl
rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2542 (0x9ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D120D, serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
Validity
Not Before: May 16 19:53:31 2026 GMT
Not After : May 23 19:53:31 2026 GMT
Subject: CN=6a08cb3c-52f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:81:d5:01:86:d6:0d:d7:d6:67:4a:2b:69:fc:
c9:04:9a:8b:04:d2:81:cc:10:42:05:77:a8:ba:e3:
8a:7d:67:15:48:41:96:e1:af:da:0d:b5:5d:45:e5:
3f:24:67:8a:c0:92:c4:b3:b3:64:d1:69:6a:cf:01:
f0:a5:7f:da:97:40:89:c9:3d:c3:5d:e4:98:c4:b6:
04:aa:e7:a5:98:5a:fd:56:f9:27:80:a2:d9:5a:f6:
ad:2d:ec:67:9f:6e:f6:d1:84:c3:26:71:77:6a:ef:
b2:48:98:11:f9:9c:87:78:a6:1b:8e:87:84:9f:2e:
9b:c8:cc:8c:fd:6d:4a:55:ac:c8:3a:6a:88:9f:12:
6b:44:75:4d:0d:3f:11:92:37:9b:79:ea:64:52:a0:
18:e2:30:9f:20:6e:04:9f:d8:18:86:b4:35:d3:13:
52:74:c9:3b:53:b9:86:53:d3:7e:56:5a:2e:13:32:
66:61:20:ec:16:b7:d9:7b:cb:25:85:3f:e6:62:c6:
9f:f4:36:30:a1:9d:6e:e6:95:76:60:96:fe:78:43:
3d:81:16:ed:98:9f:e2:3d:f7:ce:40:93:82:45:ec:
15:f9:a9:77:c9:91:e6:38:dd:8c:5f:0d:61:c6:48:
d4:6e:09:94:5c:6e:0a:5c:45:64:a1:4e:85:60:cc:
2e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D0:A6:93:87:96:57:81:69:46:8C:F6:89:F8:14:A6:12:6D:33:97
X509v3 Authority Key Identifier:
keyid:B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:d5:08:2a:e5:c7:2f:8b:9e:ec:55:8e:87:60:ec:08:86:40:
b3:36:c6:10:74:9e:6e:e7:9d:bf:53:ac:a0:7b:f7:ce:c9:d1:
bd:c9:56:d5:a5:c3:c0:7b:37:5c:39:ca:46:6e:59:3d:60:cb:
d3:a3:a9:71:4b:da:b7:d4:f4:8e:d5:ed:03:91:4c:7f:5a:5a:
b3:0e:79:bf:2b:d6:bc:25:95:6f:6f:28:e0:53:be:1c:a1:4b:
45:b5:6b:ee:ab:48:dc:45:e5:22:30:b6:59:9a:40:c5:54:eb:
a7:5c:fb:c6:be:8d:ee:df:ad:1c:3f:a8:6e:e4:fa:6d:69:1b:
9a:36:83:35:8c:bc:74:f1:31:2a:8c:6f:48:36:24:bf:d7:48:
a4:a6:de:dd:92:4c:8a:39:77:cf:31:23:ee:8b:14:34:71:7c:
f0:3c:21:b7:df:60:35:45:68:83:6c:79:68:b7:ad:58:17:88:
7b:bf:a3:80:23:a9:b3:c5:4c:ec:8a:73:c3:80:13:66:1c:2b:
26:46:70:4e:14:89:82:5e:d1:2c:b8:4b:c3:6e:80:18:06:ec:
9b:e3:aa:01:27:5b:f1:5b:3a:96:b4:6d:23:a9:1a:69:3d:b7:
a4:eb:47:c5:85:3e:23:a1:c9:c1:51:86:c3:64:02:a1:a3:a2:
98:f9:1c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:02:59 2026 by rpki-client