
$ rpki-client -vvf rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
File: Jr1ToxmUC9VoemNFu1_hmIc453g.mft (raw, json)
Hash identifier: GylVRk43Bth2IPG1YOaZB52qOovq/tn+6i1qaIoaEOY=
Subject key identifier: FB:B1:D0:CE:2A:53:88:13:D3:CF:6A:F5:B3:1D:46:27:4F:94:4B:9A
Authority key identifier: 26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78
Certificate issuer: /CN=A91584B7/serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778
Certificate serial: 01CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
Manifest number: 01C0
Signing time: Fri 13 Mar 2026 02:56:52 +0000
Manifest this update: Fri 13 Mar 2026 02:56:52 +0000
Manifest next update: Fri 20 Mar 2026 02:56:52 +0000
Files and hashes: 1: Jr1ToxmUC9VoemNFu1_hmIc453g.crl (hash: KAofln9jwYMMMHT1enCbJ3k6sj462t8WuWZBD23HtwY=)
2: 8D6378A0747D11EE96578C20C4F9AE02.roa (hash: 94bY4dqJ+hKXNY5wzgPDkEiWpyyIl5u/grdGvd98z+Y=)
3: 8CF33914747D11EE96578C20C4F9AE02.roa (hash: ZqHcBcHbL9aMrX73GKd2/onOvCWVli3zOX/+W2Uy6f8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl
rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 02:56:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459 (0x1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91584B7, serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778
Validity
Not Before: Mar 13 02:56:52 2026 GMT
Not After : Mar 20 02:56:52 2026 GMT
Subject: CN=69b37cf4-d7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e8:ac:55:6b:3b:5e:bc:68:71:0d:c1:bb:7f:
9b:f3:9a:23:2b:d1:07:03:f2:43:92:2d:6c:f2:a3:
97:18:8f:ef:c5:82:5e:e0:96:a7:5a:2b:4c:bf:3d:
70:37:39:56:42:3b:27:d5:6f:c9:66:9f:f1:89:40:
a0:59:7e:8d:d0:ad:7b:4c:54:4f:4b:27:33:33:02:
73:bb:aa:dd:fb:6d:4f:bd:3e:45:10:ab:5e:e8:3e:
e5:7f:80:14:43:bc:c3:05:1c:57:32:f7:2e:0e:e8:
14:e5:c5:bc:39:96:80:f2:e5:8d:ef:b1:20:ff:75:
a0:25:6f:9a:00:bd:82:fd:e1:e1:74:f1:32:37:15:
93:23:9a:ea:dc:55:91:8e:e0:6d:b0:de:52:b3:78:
39:14:2b:b1:06:d9:cc:b1:f0:49:e2:56:fb:e4:bc:
98:7c:7a:d9:e2:0c:b9:7d:6c:ed:e5:32:8c:03:e2:
d8:cd:b9:c0:ca:87:55:82:1f:7f:70:fa:d8:e3:1d:
5d:3f:86:71:80:49:7c:2d:a3:e5:ce:20:7f:90:a6:
7b:98:7f:15:e3:b9:5a:34:a4:95:cc:c8:bc:0b:ee:
8d:a1:b6:46:a3:6e:15:e4:aa:88:dd:75:69:87:bc:
04:08:37:b6:3e:07:17:be:a0:7b:10:d1:3d:bc:64:
dd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B1:D0:CE:2A:53:88:13:D3:CF:6A:F5:B3:1D:46:27:4F:94:4B:9A
X509v3 Authority Key Identifier:
keyid:26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:76:21:cb:9b:a5:00:8b:73:bd:cd:57:3e:66:1d:a1:8d:74:
ac:d5:46:8d:8f:8a:05:2d:f1:e9:71:e8:d2:18:ae:10:47:bb:
14:d5:00:15:d7:34:15:e2:b0:6b:1f:df:50:4b:bd:33:27:ad:
56:5d:61:3d:8a:e5:10:7d:3a:53:69:b0:12:bc:67:73:e2:62:
7b:69:84:ff:1d:4e:b2:74:21:98:09:2a:45:16:21:a8:d5:e0:
f8:7c:ed:d7:46:8a:86:2d:d4:99:90:08:4d:a9:18:18:89:85:
1b:ac:a1:b1:98:49:0e:2b:a2:6d:9f:88:36:d0:68:43:49:0c:
3f:2a:8b:fb:bf:b9:e8:ff:4e:d8:2d:dc:2a:d7:9e:c6:55:db:
fe:e1:7d:57:0e:4d:71:1a:00:aa:cc:25:68:2a:5f:3f:72:9d:
f3:76:9b:d0:49:89:5d:0f:89:f8:ac:ef:33:0e:4c:a4:fa:77:
da:2c:6a:cf:f9:93:7a:be:57:c1:b5:3a:83:32:de:e8:f2:73:
46:b7:c3:f4:87:47:c7:d0:6b:28:1b:0c:4b:f5:d2:74:a7:e0:
53:d9:df:53:b1:62:f0:4c:7e:09:86:d6:c4:99:a9:4c:e6:aa:
97:a4:c5:2e:b6:4d:f7:37:2a:1c:6c:0f:78:4d:ff:cd:21:08:
3f:6f:81:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTg0QjcxMTAvBgNVBAUTKDI2QkQ1M0EzMTk5NDBCRDU2ODdBNjM0NUJCNUZFMTk4
ODczOEU3NzgwHhcNMjYwMzEzMDI1NjUyWhcNMjYwMzIwMDI1NjUyWjAYMRYwFAYD
VQQDEw02OWIzN2NmNC1kN2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3OisVWs7XrxocQ3Bu3+b85ojK9EHA/JDki1s8qOXGI/vxYJe4JanWitMvz1w
NzlWQjsn1W/JZp/xiUCgWX6N0K17TFRPSyczMwJzu6rd+21PvT5FEKte6D7lf4AU
Q7zDBRxXMvcuDugU5cW8OZaA8uWN77Eg/3WgJW+aAL2C/eHhdPEyNxWTI5rq3FWR
juBtsN5Ss3g5FCuxBtnMsfBJ4lb75LyYfHrZ4gy5fWzt5TKMA+LYzbnAyodVgh9/
cPrY4x1dP4ZxgEl8LaPlziB/kKZ7mH8V47laNKSVzMi8C+6NobZGo24V5KqI3XVp
h7wECDe2PgcXvqB7ENE9vGTdYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPux0M4q
U4gT089q9bMdRidPlEuaMB8GA1UdIwQYMBaAFCa9U6MZlAvVaHpjRbtf4ZiHOOd4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODRCNy9FQ0JBRUJBMDc0
N0IxMUVFOUE5MDA5NTNDNEY5QUUwMi9KcjFUb3htVUM5Vm9lbU5GdTFfaG1JYzQ1
M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pyMVRveG1VQzlWb2VtTkZ1MV9obUljNDUzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODRCNy9FQ0JBRUJBMDc0N0IxMUVFOUE5MDA5NTNDNEY5QUUwMi9KcjFUb3htVUM5
Vm9lbU5GdTFfaG1JYzQ1M2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp3Yhy5ulAItzvc1XPmYdoY10rNVGjY+KBS3x6XHo0hiuEEe7FNUAFdc0FeKw
ax/fUEu9MyetVl1hPYrlEH06U2mwErxnc+Jie2mE/x1OsnQhmAkqRRYhqNXg+Hzt
10aKhi3UmZAITakYGImFG6yhsZhJDiuibZ+INtBoQ0kMPyqL+7+56P9O2C3cKtee
xlXb/uF9Vw5NcRoAqswlaCpfP3Kd83ab0EmJXQ+J+KzvMw5MpPp32ixqz/mTer5X
wbU6gzLe6PJzRrfD9IdHx9BrKBsMS/XSdKfgU9nfU7Fi8Ex+CYbWxJmpTOaql6TF
LrZN9zcqHGwPeE3/zSEIP2+BCA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 12:12:42 2026 by rpki-client