
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
File: jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json)
Hash identifier: C/s9T7dfkdtYEgwZiNgpLUryXym8erbRG3br9BOOHlo=
Subject key identifier: 8E:A6:BD:0F:53:6E:D5:F3:95:FD:79:7F:DD:46:8A:95:0A:05:17:9A
Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
Certificate issuer: /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
Certificate serial: 354E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
Manifest number: 3536
Signing time: Sat 04 Apr 2026 14:37:34 +0000
Manifest this update: Sat 04 Apr 2026 14:37:33 +0000
Manifest next update: Sat 11 Apr 2026 14:37:33 +0000
Files and hashes: 1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: HQpnXnp+GBACWx2OocUTc5tS0I9V/LwydlLuX9d8pBE=)
2: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: qclWXVlBnstyYKCXuampSC0Gl802Drh3emJ7c8YgQUQ=)
3: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: iEFgU1Qm/Iuc4U4Fc9T/1IELrhOtOZtYVcokYZc+zT8=)
4: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: A1JJHlqgLeycmUKsITWH6CZ+L2789FVfnYoijesk8IU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl
rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:37:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13646 (0x354e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
Validity
Not Before: Apr 4 14:37:33 2026 GMT
Not After : Apr 11 14:37:33 2026 GMT
Subject: CN=69d1222e-2390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:ea:de:33:36:7d:89:4d:83:c2:d3:ae:a1:
62:40:17:1d:fc:65:32:f5:64:1a:9c:19:5d:86:7a:
25:70:f9:b3:b6:27:2e:09:85:05:7d:09:c4:ed:45:
62:c0:61:70:65:db:5f:d0:1c:5e:df:b3:a2:9b:89:
78:71:8e:a2:a6:31:4f:70:c4:83:0a:9e:ad:fe:4d:
8e:49:5a:6e:53:86:5b:1f:d9:e7:e3:5d:12:51:96:
95:0e:e8:68:01:47:e1:fb:1c:ad:3f:a4:f9:4e:b6:
f7:cc:e1:a3:96:55:74:40:a5:26:62:fe:db:26:28:
33:03:b0:4f:0b:9d:d7:7e:3f:70:ec:7d:11:65:ce:
e3:16:a3:51:99:94:30:d1:86:5f:27:3c:d5:7e:1b:
0b:0a:fa:75:e7:a8:33:d7:ca:23:59:22:eb:91:12:
45:9d:af:55:da:c2:42:cc:48:30:d7:9c:14:fa:3d:
cb:49:8b:ac:41:09:5f:b4:a0:a4:36:2c:c6:9a:fe:
3a:37:a7:40:fc:c9:63:9f:ff:f9:ff:68:37:df:64:
53:9c:db:b3:98:99:52:e7:f2:9e:41:88:c9:15:e3:
b0:7c:08:96:8a:ea:1d:d8:16:0e:f9:92:31:44:b2:
7f:9f:c7:64:18:14:a7:40:49:2e:1e:3a:1f:c2:dc:
60:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A6:BD:0F:53:6E:D5:F3:95:FD:79:7F:DD:46:8A:95:0A:05:17:9A
X509v3 Authority Key Identifier:
keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e0:98:33:a0:b2:53:70:84:44:94:68:6b:bd:2c:27:a0:40:
29:bb:0f:ec:5c:0b:73:31:0e:3a:7f:6b:e3:44:8a:1b:7d:24:
78:49:a0:01:a3:c4:11:ee:c7:30:c2:7b:ac:5f:64:c6:80:95:
9e:aa:37:69:a0:a2:46:73:56:d4:17:47:0b:bf:da:04:0c:87:
e8:a9:18:64:90:39:99:31:f7:3b:1e:5b:72:35:ae:4b:e9:7f:
4b:c2:ec:3e:1f:e7:39:fe:51:4a:8b:66:40:4d:48:6b:59:7e:
01:9e:2f:41:05:19:7c:ee:de:dd:53:09:48:22:74:79:ec:34:
1c:b2:80:52:c4:33:53:3a:8f:b0:b7:5f:de:4e:33:72:b3:88:
f2:2e:e0:a8:2e:9c:20:a5:22:b5:90:22:a6:13:a4:72:d5:d2:
7c:83:f9:f2:51:46:4e:20:62:02:13:62:0d:c0:0f:ea:0c:04:
cd:29:45:f2:a5:39:5c:8a:b0:6b:d4:e8:54:4e:e1:07:b6:7f:
9c:c3:f0:dd:d5:66:44:0e:43:15:7f:54:f3:88:6d:bf:0b:1b:
fc:98:5e:3f:1f:76:44:8f:3b:aa:e2:5a:c2:4c:84:2d:ef:5a:
6b:ad:a7:e8:15:4a:3d:50:05:cf:5d:95:10:b9:87:16:aa:9a:
e7:02:7d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:35:13 2026 by rpki-client