
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
File: JZau0MDLO8_jGASyOc9GV3EuJ2o.mft (raw, json)
Hash identifier: TrvT4pBU3h/op+Xx99yiO+6uI7SEpg+A9a6tyTqz5Tg=
Subject key identifier: 38:77:19:5F:E9:07:AD:BA:1B:56:BF:20:D8:13:11:F1:DF:11:F5:76
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial: 0420
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
Manifest number: 03D2
Signing time: Sun 19 Apr 2026 00:39:11 +0000
Manifest this update: Sun 19 Apr 2026 00:39:10 +0000
Manifest next update: Sun 26 Apr 2026 00:39:10 +0000
Files and hashes: 1: JZau0MDLO8_jGASyOc9GV3EuJ2o.crl (hash: eddmNQEMDOZDlAFdZ4AJzSMzItV47EV/6l2vf8bf94M=)
2: C40F74B2D5C611EEA589D110C4F9AE02.roa (hash: sH0rebKAz1i2uxLJ3lNxQCxI30HtfefcB9hmlWfdhcI=)
3: 01F6431CDD3711EC9EF48256C4F9AE02.roa (hash: bjuPOTMp4pbN0z4iigT4wT7hoa5AOWvrE2nP3yVsJ7g=)
4: 5725C1363AB711EDBB6FC759C4F9AE02.roa (hash: jPjdXIBf3NMgMD5UHQPW9KHHUUZ/8nHgwptXvEXQtlc=)
5: 095A440652B311F0B25AA911C4F9AE02.roa (hash: 3Cs5Pm8PURk2/zkpsdMlEIL10nKpWGYJxO2gBf9Ee5Y=)
6: 01607012DD3711EC9EF48256C4F9AE02.roa (hash: JLuibLFe2igwYYBnUOCMg1rvtCWv2EtsXGaKbROLXRs=)
7: A60805D653EB11EEA1F43363C4F9AE02.roa (hash: j28A6ymDSsnqrRaPG7HiIgQzlW1p/QQe0p1Ap5wA4ss=)
8: 2CF7FA46995011F082453F71C4F9AE02.roa (hash: GLJ+jea24FBfzaQsii1UlRgswnUlDRjX0vu/zA29ZHA=)
9: 00D63708DD3711EC9EF48256C4F9AE02.roa (hash: RaegGb5YOyVPDChDVKTuKEGfZR2i3keFj8m+p9xUFVo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 00:39:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1056 (0x420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Validity
Not Before: Apr 19 00:39:10 2026 GMT
Not After : Apr 26 00:39:10 2026 GMT
Subject: CN=69e4242e-0e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:d1:f9:3e:9c:92:bc:37:9a:e9:3d:cd:e2:
6b:01:1e:23:27:29:f0:08:40:79:e9:b5:12:2e:ab:
a4:db:d5:0c:db:a0:b9:75:32:13:cf:9c:68:e5:2b:
bb:ba:e3:e9:b7:6e:1f:28:0c:15:56:e9:25:25:0c:
8b:2e:77:a7:bf:d5:fa:38:89:6e:f7:1b:0e:7f:1d:
7c:9d:e1:57:8d:eb:ee:e6:e3:5f:42:98:a1:20:d5:
0a:b1:4c:d1:5b:3f:cd:dd:c9:2c:7e:30:4f:91:68:
aa:03:e5:26:94:e6:a4:96:8d:d6:1b:7b:1e:86:8e:
79:f0:36:98:72:46:94:29:92:bb:d1:3a:ac:3f:36:
fc:a2:72:30:f2:32:0f:8d:fd:d3:be:e4:e8:33:58:
a0:12:c9:e8:c2:79:61:1a:9b:ac:e1:cb:f6:2c:91:
00:f7:b6:1a:9e:1b:e0:34:b7:f2:20:5c:d1:75:97:
bc:99:99:41:0f:2f:7f:ff:52:41:90:b5:a7:6b:53:
6b:ad:1c:ec:7b:80:81:a5:ff:42:bc:ac:73:5c:cc:
d2:e7:65:70:a1:3a:08:3e:43:98:98:90:af:be:e5:
23:ac:10:a2:6a:66:8f:8f:83:3e:3d:cd:b1:0b:0b:
45:36:ac:1f:74:7f:55:90:92:e5:24:3a:57:f6:e0:
ae:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:77:19:5F:E9:07:AD:BA:1B:56:BF:20:D8:13:11:F1:DF:11:F5:76
X509v3 Authority Key Identifier:
keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:e1:d0:f0:6f:85:f2:0f:0a:69:99:54:2c:65:ac:56:fd:bc:
aa:68:ad:43:07:66:06:52:d0:85:22:d1:7d:e9:93:6e:be:e4:
37:4e:d7:80:eb:e0:2f:ea:43:74:a4:ab:8c:15:9b:d9:c4:e4:
83:1d:6e:79:ac:cd:22:22:2c:f7:93:86:91:e4:aa:70:3f:15:
4a:31:d8:d0:72:19:e9:7f:02:a3:f0:12:a4:1f:2d:38:52:68:
73:85:0e:89:97:36:76:19:c5:28:2e:29:a5:ff:01:fa:81:bb:
30:ca:eb:eb:55:94:fb:f0:bd:b1:35:57:39:c3:2a:03:18:61:
e9:65:49:b3:d2:13:99:fd:06:df:f3:67:98:11:88:ec:9c:d9:
6a:c0:bf:18:8b:0f:51:5a:01:65:1a:2d:4d:c8:bc:ee:61:82:
eb:81:f3:44:1e:f2:bc:1d:49:aa:ee:ce:d1:f5:e9:eb:11:c4:
67:7c:4f:f1:d3:00:0f:e7:e9:d0:e8:5f:eb:83:67:b0:69:1c:
98:7c:0b:d5:8b:67:e6:13:7d:26:f5:96:75:fe:61:76:68:6d:
58:1a:50:91:0c:ff:4f:8a:57:79:06:f6:ff:99:33:83:aa:d0:
56:b9:06:28:6a:25:44:ca:c7:1e:0e:aa:21:f4:6f:1d:79:cc:
63:e7:c9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 22:36:18 2026 by rpki-client