
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
File: Jr1ToxmUC9VoemNFu1_hmIc453g.mft (raw, json)
Hash identifier: zZsDaeJC+XnFLIq1QR8HOa0VPW2fAlUWE5wqaJApUSw=
Subject key identifier: 7E:03:56:76:74:F4:C8:2D:96:44:C1:EE:80:4B:5F:F2:72:BC:1E:22
Authority key identifier: 26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78
Certificate issuer: /CN=A91584B7/serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778
Certificate serial: 024E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
Manifest number: 0240
Signing time: Sun 15 Nov 2026 02:44:42 +0000
Manifest this update: Sun 15 Nov 2026 02:44:41 +0000
Manifest next update: Sun 22 Nov 2026 02:44:41 +0000
Files and hashes: 1: Jr1ToxmUC9VoemNFu1_hmIc453g.crl (hash: 20vNX9IzlNAm3K9erYJNaCfn+uyKTOE6PDRAplnYSLk=)
2: 8CF33914747D11EE96578C20C4F9AE02.roa (hash: SQxCrGWWtQq4Y/ugjy46axnPV7VogCh6RCI0n95bpok=)
3: 8D6378A0747D11EE96578C20C4F9AE02.roa (hash: tTPYJ7UmlTbeA9eTrVxBAVCWIXLwlZ0eN7UtAFsY5kQ=)
4: GmaCteOVVP04Yr2VqdW4AG7kTe8.asa (hash: BbB1gCPEN3D1BFyWw/ELGhidIc3L9VzwZL6Nwtir8HA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl
rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 02:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590 (0x24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91584B7, serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778
Validity
Not Before: Nov 15 02:44:41 2026 GMT
Not After : Nov 22 02:44:41 2026 GMT
Subject: CN=6af91c99-fbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:4c:af:8d:d9:cf:50:ea:48:b3:fb:c8:30:
ed:2c:d8:53:cc:ec:89:5c:79:00:73:89:af:aa:45:
21:d1:75:38:2d:00:7a:28:94:2b:77:98:8a:ad:ae:
54:39:f9:23:47:bd:eb:f8:2e:f0:ec:bb:33:12:e7:
e4:01:c8:67:ea:c7:a6:bc:6f:82:b4:a8:ed:d7:dd:
55:fa:a4:76:e1:7b:99:12:75:3a:1c:96:9f:60:ac:
ec:c8:ac:c7:ce:0a:b1:9a:12:0f:90:a7:eb:b6:1b:
cf:ed:93:f1:0f:68:a1:83:02:8c:4e:c0:29:be:c0:
17:26:f6:ac:94:6a:a6:98:8c:34:9d:60:79:df:17:
21:ae:b2:08:fc:7e:09:a0:21:8c:e8:db:59:8a:3e:
73:08:7e:ed:b6:cb:9d:2c:b6:9a:47:03:53:a1:25:
37:02:03:bd:c4:22:49:eb:52:48:f8:bd:db:b5:44:
7a:b6:ea:55:dd:de:3d:f4:42:37:de:0e:68:81:82:
a0:75:61:ca:03:cd:55:3e:10:76:42:ad:fb:11:84:
32:f4:9c:b6:7d:f2:b6:21:43:d1:f8:4f:10:c4:ee:
b9:d7:1a:ee:25:10:09:d0:99:a1:4d:5d:9f:39:83:
86:c7:18:ad:1a:46:dd:8b:e8:3d:ee:c8:08:63:07:
26:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:03:56:76:74:F4:C8:2D:96:44:C1:EE:80:4B:5F:F2:72:BC:1E:22
X509v3 Authority Key Identifier:
keyid:26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:b4:49:e6:67:f5:23:b6:44:f9:82:9c:fe:23:2d:9c:7b:da:
4a:15:5a:26:dd:ac:34:64:5e:90:b4:69:85:2c:b6:83:d4:a4:
11:0c:e4:20:5f:62:05:45:95:a1:bb:1b:66:f1:81:58:cf:50:
46:7f:c8:12:ef:26:24:ff:85:f6:91:7f:d4:b3:4e:a6:fc:57:
ad:24:0e:7e:d5:4e:52:f2:71:01:f3:4e:7f:b4:ff:9a:b5:3f:
ba:9b:95:14:7e:a9:09:8a:de:34:7e:67:1f:df:40:46:b0:51:
f0:3a:dc:4e:4a:61:e4:47:18:02:37:9a:d8:8d:25:b5:97:f4:
c3:ca:f8:18:48:5a:bc:cc:5f:75:ed:18:52:ae:09:3e:4e:9b:
92:64:e3:af:58:9b:c4:c7:97:f8:47:da:b1:88:ac:e9:f2:21:
e4:9c:b6:3e:b6:48:10:6e:64:79:36:40:be:cc:05:dd:64:94:
b0:fa:57:29:6b:50:29:5b:91:51:0f:2d:6b:01:03:36:b6:5f:
9d:78:71:07:dd:7b:8a:92:30:76:95:f9:4c:77:c1:d9:15:3d:
fc:9f:89:40:26:fc:e1:00:60:96:b0:52:48:9c:17:7d:f9:ca:
ea:5f:7c:3f:74:cd:18:5a:bf:a3:c3:36:82:4f:e7:1e:c0:bb:
b6:92:0f:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTg0QjcxMTAvBgNVBAUTKDI2QkQ1M0EzMTk5NDBCRDU2ODdBNjM0NUJCNUZFMTk4
ODczOEU3NzgwHhcNMjYxMTE1MDI0NDQxWhcNMjYxMTIyMDI0NDQxWjAYMRYwFAYD
VQQDEw02YWY5MWM5OS1mYmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAulBMr43Zz1DqSLP7yDDtLNhTzOyJXHkAc4mvqkUh0XU4LQB6KJQrd5iKra5U
OfkjR73r+C7w7LszEufkAchn6semvG+CtKjt191V+qR24XuZEnU6HJafYKzsyKzH
zgqxmhIPkKfrthvP7ZPxD2ihgwKMTsApvsAXJvaslGqmmIw0nWB53xchrrII/H4J
oCGM6NtZij5zCH7ttsudLLaaRwNToSU3AgO9xCJJ61JI+L3btUR6tupV3d499EI3
3g5ogYKgdWHKA81VPhB2Qq37EYQy9Jy2ffK2IUPR+E8QxO651xruJRAJ0JmhTV2f
OYOGxxitGkbdi+g97sgIYwcmnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH4DVnZ0
9MgtlkTB7oBLX/JyvB4iMB8GA1UdIwQYMBaAFCa9U6MZlAvVaHpjRbtf4ZiHOOd4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODRCNy9FQ0JBRUJBMDc0
N0IxMUVFOUE5MDA5NTNDNEY5QUUwMi9KcjFUb3htVUM5Vm9lbU5GdTFfaG1JYzQ1
M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pyMVRveG1VQzlWb2VtTkZ1MV9obUljNDUzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODRCNy9FQ0JBRUJBMDc0N0IxMUVFOUE5MDA5NTNDNEY5QUUwMi9KcjFUb3htVUM5
Vm9lbU5GdTFfaG1JYzQ1M2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhbRJ5mf1I7ZE+YKc/iMtnHvaShVaJt2sNGRekLRphSy2g9SkEQzkIF9iBUWV
obsbZvGBWM9QRn/IEu8mJP+F9pF/1LNOpvxXrSQOftVOUvJxAfNOf7T/mrU/upuV
FH6pCYreNH5nH99ARrBR8DrcTkph5EcYAjea2I0ltZf0w8r4GEhavMxfde0YUq4J
Pk6bkmTjr1ibxMeX+EfasYis6fIh5Jy2PrZIEG5keTZAvswF3WSUsPpXKWtQKVuR
UQ8tawEDNrZfnXhxB917ipIwdpX5THfB2RU9/J+JQCb84QBglrBSSJwXffnK6l98
P3TNGFq/o8M2gk/nHsC7tpIPEw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:42:00 2026 by rpki-client