
$ rpki-client -vvf rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
File: Jr1ToxmUC9VoemNFu1_hmIc453g.mft (raw, json)
Hash identifier: EUU3jUMCjYP4RGX6V8Deit08zQccnFBFkGJ/2032Da0=
Subject key identifier: 27:3D:56:C8:1D:85:CE:9A:67:EB:48:21:CD:FD:32:B2:53:47:7E:34
Authority key identifier: 26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78
Certificate issuer: /CN=A91584B7/serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778
Certificate serial: 0213
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
Manifest number: 0208
Signing time: Mon 03 Aug 2026 04:11:57 +0000
Manifest this update: Mon 03 Aug 2026 04:11:57 +0000
Manifest next update: Mon 10 Aug 2026 04:11:57 +0000
Files and hashes: 1: Jr1ToxmUC9VoemNFu1_hmIc453g.crl (hash: 7FSGOO+f0LlaJZi/ja3QpeZZM+peWZTAl+On8V1dKhQ=)
2: 8CF33914747D11EE96578C20C4F9AE02.roa (hash: ZqHcBcHbL9aMrX73GKd2/onOvCWVli3zOX/+W2Uy6f8=)
3: 8D6378A0747D11EE96578C20C4F9AE02.roa (hash: 94bY4dqJ+hKXNY5wzgPDkEiWpyyIl5u/grdGvd98z+Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl
rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Aug 2026 04:11:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 531 (0x213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91584B7, serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778
Validity
Not Before: Aug 3 04:11:57 2026 GMT
Not After : Aug 10 04:11:57 2026 GMT
Subject: CN=6a70150d-947f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:88:34:30:1e:72:7d:dd:53:d9:51:00:66:01:
38:73:8e:16:b8:89:e3:61:d9:8f:49:17:0a:22:c6:
ad:e2:24:4f:5e:63:81:d9:26:3c:8e:7c:75:ef:79:
be:72:b5:0c:37:c8:58:56:9e:8e:50:4e:73:ae:48:
7b:61:04:7b:2c:5e:56:8d:e3:e5:2f:c0:d3:31:d9:
83:3b:31:88:9b:63:6e:82:e6:19:9d:dc:1e:93:2a:
01:0a:d4:c9:12:45:5e:37:4c:23:08:f6:ec:d5:9a:
0f:6d:bf:5d:b7:d2:ae:96:8d:78:0b:88:3f:b0:5a:
97:61:7a:4b:2a:3f:b4:35:49:fe:95:59:d4:76:33:
f9:a7:66:26:a5:90:f5:cd:02:04:c3:f8:6a:2b:64:
3d:b6:a8:a4:5a:a8:34:ef:7a:a7:f6:a4:cd:fb:2b:
0e:96:5e:85:06:be:55:fb:d6:d4:51:5d:21:1c:c3:
8f:53:4f:a7:26:33:36:9e:3a:6e:d2:c6:ac:b8:d9:
bf:23:82:3e:0f:87:0c:b4:0e:74:42:dd:7c:a8:fa:
7e:c2:58:77:6b:45:bf:5c:23:81:9a:5f:c0:2e:e0:
0f:2d:df:54:31:d0:24:bb:96:c2:ee:8d:58:a7:81:
9b:8f:53:48:b4:3a:c6:ee:e2:49:6b:6d:a3:32:6b:
a4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3D:56:C8:1D:85:CE:9A:67:EB:48:21:CD:FD:32:B2:53:47:7E:34
X509v3 Authority Key Identifier:
keyid:26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:fa:92:60:c2:5e:f7:a4:df:8a:8f:b4:63:03:f2:14:8a:51:
b0:3f:cb:1c:79:67:c8:6b:4c:56:3e:2c:c2:b9:9e:eb:15:e9:
d9:c1:b2:35:31:89:01:f2:e0:e4:8b:b0:39:66:9c:07:f4:3d:
52:eb:fb:6f:1b:34:d7:e4:9b:c3:35:b9:b0:81:eb:8e:33:6b:
08:41:61:15:32:0a:4a:6d:f7:48:58:42:7b:73:76:27:e0:4d:
c3:a9:e9:fe:e1:30:03:15:53:75:f0:e3:27:75:65:4b:9e:a8:
5d:a6:a6:e5:d1:b7:8d:f4:38:a8:d5:b5:dc:97:a7:23:e6:62:
62:c1:cc:66:82:e0:1b:92:ea:83:23:40:65:cd:9b:9f:1a:2f:
54:2c:4d:8d:be:09:5a:1c:b4:23:7f:39:91:02:19:11:f7:fc:
6a:a7:5f:11:8e:ce:89:df:3e:f6:37:fb:24:07:37:a5:70:2c:
9d:a8:24:5e:63:a9:da:8d:dd:4d:58:21:74:dc:96:99:a2:e2:
d4:03:a4:24:5f:c4:3c:e9:83:d6:b7:f3:8a:bf:2a:66:57:60:
b2:89:32:e6:6c:e3:68:e6:97:85:bf:bd:44:66:aa:21:2f:f8:
0d:93:bd:a5:76:bb:68:6d:3f:c2:c3:1a:c1:46:a4:18:48:22:
f0:ad:66:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 03:09:31 2026 by rpki-client