
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
File: Jr1ToxmUC9VoemNFu1_hmIc453g.mft (raw, json)
Hash identifier: /MdQwVIoDiciRw+lS8hNSFWv1mEKKN9e5y+elLBYkPo=
Subject key identifier: 84:C2:2C:01:49:E0:8B:3A:39:B0:DB:1C:CF:54:A4:85:5B:F4:30:FE
Authority key identifier: 26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78
Certificate issuer: /CN=A91584B7/serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778
Certificate serial: 022F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
Manifest number: 0222
Signing time: Sat 19 Sep 2026 02:56:20 +0000
Manifest this update: Sat 19 Sep 2026 02:56:19 +0000
Manifest next update: Sat 26 Sep 2026 02:56:19 +0000
Files and hashes: 1: Jr1ToxmUC9VoemNFu1_hmIc453g.crl (hash: pclSu7LFk1FHnElGJdE9HGRR2DZJDlia/bqVOr75OIM=)
2: 8CF33914747D11EE96578C20C4F9AE02.roa (hash: SQxCrGWWtQq4Y/ugjy46axnPV7VogCh6RCI0n95bpok=)
3: 8D6378A0747D11EE96578C20C4F9AE02.roa (hash: tTPYJ7UmlTbeA9eTrVxBAVCWIXLwlZ0eN7UtAFsY5kQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl
rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91584B7, serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778
Validity
Not Before: Sep 19 02:56:19 2026 GMT
Not After : Sep 26 02:56:19 2026 GMT
Subject: CN=6aadf9d3-0c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:46:68:85:af:fc:a6:3e:6d:af:0e:4d:ab:
c1:67:1e:8e:74:56:db:6f:81:0e:0a:85:0b:10:d6:
9a:4d:1c:9c:b4:50:73:9c:9c:1a:23:0d:0a:43:29:
4d:66:50:0c:63:16:b4:1d:13:aa:1a:1e:e9:50:8a:
48:67:9e:3b:bd:27:d4:1c:cd:c0:b3:a6:1a:f4:b3:
9f:70:1d:8d:a1:1f:a8:e2:cb:6c:47:58:44:b5:44:
1d:49:18:b0:84:dc:53:ab:aa:96:49:19:61:3b:81:
2f:57:46:c7:3d:f4:86:6d:7f:c2:42:87:e9:f2:a6:
2d:4a:2b:b6:af:a2:1a:63:19:dd:a0:ef:ec:50:6e:
45:6b:a7:57:de:73:4d:a6:08:46:8d:2d:a4:ba:a0:
37:d4:e5:eb:28:ba:ea:c4:3c:2a:60:7c:f3:7d:49:
56:76:90:07:1d:3e:6d:c0:18:91:4c:ff:1a:03:09:
b3:2c:dc:7a:65:87:ed:d0:84:99:95:f5:5d:ff:4f:
95:b2:05:30:7f:c4:5e:0c:12:b5:41:77:bd:88:35:
ad:eb:d4:39:e8:33:41:c1:48:52:85:bb:41:f7:d8:
7f:02:71:54:3a:bf:b0:8e:e3:e7:27:11:90:40:6e:
bc:56:6b:80:cb:55:66:b6:3b:52:a1:35:84:64:1f:
54:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C2:2C:01:49:E0:8B:3A:39:B0:DB:1C:CF:54:A4:85:5B:F4:30:FE
X509v3 Authority Key Identifier:
keyid:26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:9d:5a:31:96:9a:03:e2:b0:74:ae:4c:23:4c:df:74:e8:47:
fc:26:2f:c3:49:63:54:f3:71:75:67:e5:a9:6e:a8:a9:0a:c6:
cb:77:39:e5:72:1f:c5:de:74:cc:67:1f:7a:a1:10:4e:e3:9f:
fd:15:d9:1b:ef:d9:a6:5b:13:15:80:52:66:59:6d:11:78:32:
63:e6:9f:cb:ad:9e:0c:5a:54:13:e7:1a:96:17:d6:14:c7:4c:
d6:22:f9:7b:08:75:92:2e:a4:cd:a5:48:24:0c:af:da:12:2e:
52:8c:18:07:f5:b5:72:20:d0:8f:f2:a0:3b:35:9d:22:5b:58:
2f:49:12:da:8d:4e:ce:ec:e3:8d:33:f2:1c:eb:b0:45:69:fd:
6a:27:77:32:7b:71:d9:7e:28:1a:bf:83:2d:ff:6a:1f:91:4b:
21:f6:32:da:c8:f8:ee:ac:bc:80:7c:05:0f:2b:33:39:84:2d:
55:a4:20:f3:62:88:13:14:c1:20:31:e3:1c:eb:ef:a9:bd:54:
91:e3:1e:16:84:69:0c:9d:c3:a0:9b:58:64:e7:f1:fd:29:6c:
f7:ad:f9:d7:a6:67:e0:05:b4:a8:ed:fd:f2:66:61:ec:a4:0b:
73:21:69:5b:27:e0:c4:c1:7e:3c:df:ee:13:f7:d0:ac:fc:85:
25:17:39:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 10:03:48 2026 by rpki-client