
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
File: JZau0MDLO8_jGASyOc9GV3EuJ2o.mft (raw, json)
Hash identifier: GrppwHbBiOheHHghNRKwA72dnmh9vSoBJeC+pr/d98o=
Subject key identifier: 24:CF:CE:12:B1:86:F5:AD:97:40:1B:5F:37:C2:2C:1F:96:DD:44:94
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial: 0438
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
Manifest number: 03EA
Signing time: Fri 05 Jun 2026 00:46:15 +0000
Manifest this update: Fri 05 Jun 2026 00:46:14 +0000
Manifest next update: Fri 12 Jun 2026 00:46:14 +0000
Files and hashes: 1: JZau0MDLO8_jGASyOc9GV3EuJ2o.crl (hash: Ksuz/zUSBVMWLDwsig3Xutg5qAnsjYNYexi77LTalZc=)
2: C40F74B2D5C611EEA589D110C4F9AE02.roa (hash: sH0rebKAz1i2uxLJ3lNxQCxI30HtfefcB9hmlWfdhcI=)
3: 095A440652B311F0B25AA911C4F9AE02.roa (hash: 3Cs5Pm8PURk2/zkpsdMlEIL10nKpWGYJxO2gBf9Ee5Y=)
4: 01607012DD3711EC9EF48256C4F9AE02.roa (hash: JLuibLFe2igwYYBnUOCMg1rvtCWv2EtsXGaKbROLXRs=)
5: 00D63708DD3711EC9EF48256C4F9AE02.roa (hash: RaegGb5YOyVPDChDVKTuKEGfZR2i3keFj8m+p9xUFVo=)
6: 5725C1363AB711EDBB6FC759C4F9AE02.roa (hash: jPjdXIBf3NMgMD5UHQPW9KHHUUZ/8nHgwptXvEXQtlc=)
7: A60805D653EB11EEA1F43363C4F9AE02.roa (hash: j28A6ymDSsnqrRaPG7HiIgQzlW1p/QQe0p1Ap5wA4ss=)
8: 01F6431CDD3711EC9EF48256C4F9AE02.roa (hash: bjuPOTMp4pbN0z4iigT4wT7hoa5AOWvrE2nP3yVsJ7g=)
9: 2CF7FA46995011F082453F71C4F9AE02.roa (hash: GLJ+jea24FBfzaQsii1UlRgswnUlDRjX0vu/zA29ZHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 00:46:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1080 (0x438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Validity
Not Before: Jun 5 00:46:14 2026 GMT
Not After : Jun 12 00:46:14 2026 GMT
Subject: CN=6a221c57-8809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:d6:e2:6a:6d:48:a4:0c:79:16:20:d0:a6:
b1:49:e6:9c:6a:2c:9e:44:09:49:60:5c:b3:ba:ac:
3e:d5:55:be:be:e1:99:24:a4:2f:4a:d0:78:a1:71:
9c:ef:99:46:fe:5f:17:58:bd:2c:a4:e8:73:c8:3f:
24:d3:6e:a8:d5:48:e7:a7:c6:eb:e8:bd:14:5c:8c:
81:01:74:8b:47:6c:37:7a:d1:99:f5:bb:d9:18:ce:
54:22:bb:b3:1e:43:7b:cd:b5:7f:16:55:12:2c:53:
71:4b:2f:f8:78:c6:95:c7:79:6b:30:19:1d:f5:69:
c3:a0:8c:4e:f4:16:6d:17:e0:30:58:4e:96:82:05:
f8:ad:8e:3a:6c:f4:e0:74:ee:69:04:ba:84:11:b7:
f0:30:6f:40:54:80:5b:f1:a2:55:f4:cf:0b:47:5e:
da:06:9d:b0:35:30:3a:3d:4a:73:64:2f:d6:94:87:
22:46:b6:93:dd:66:68:26:19:36:a6:aa:f0:df:f8:
b1:b7:02:48:e1:0c:98:94:cd:c6:be:71:03:8e:a7:
26:06:9c:60:22:32:24:99:62:dd:82:82:c1:3a:b2:
c5:af:99:20:76:cd:85:21:11:ac:6f:37:a2:2f:c4:
a9:77:34:58:4a:d5:78:f8:7a:a2:97:92:0a:ca:c3:
bc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CF:CE:12:B1:86:F5:AD:97:40:1B:5F:37:C2:2C:1F:96:DD:44:94
X509v3 Authority Key Identifier:
keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:f9:72:99:24:e9:65:f5:21:be:b3:81:a0:53:50:10:44:d7:
20:bd:54:c2:91:f1:23:2e:ed:4f:42:9a:13:cd:e8:0c:13:b9:
84:e4:c5:3e:f7:35:84:7c:b7:2f:10:bc:6b:f8:57:11:74:bd:
80:d9:c5:74:21:86:79:e0:d8:a5:a5:c6:f2:ec:3e:8a:fb:1e:
78:86:2b:9d:22:04:83:69:61:84:a3:0b:f1:42:d4:fc:ef:a6:
37:e1:73:32:48:c0:0e:ca:62:f0:a1:08:34:14:f6:37:b3:0f:
91:0e:bf:bf:d4:4b:24:e4:e9:0e:05:4f:78:ff:bb:6c:b0:45:
20:f7:56:a2:06:2a:d9:88:6e:ef:ab:54:80:49:22:d5:08:a8:
59:05:ae:30:35:64:95:3b:b3:26:16:12:45:66:27:f9:60:c7:
36:94:81:93:13:ca:62:d8:e7:61:e2:6b:60:18:2d:29:7d:fe:
e1:00:8e:9e:da:8a:99:df:70:84:2c:7b:88:56:02:5b:87:c7:
05:c7:96:25:a3:53:67:4b:79:a2:0a:19:87:60:b6:80:df:3f:
23:49:63:54:33:71:77:4a:7a:71:4f:8d:fc:2e:93:d1:00:01:
72:6f:1d:10:26:f9:07:d1:bf:31:97:d5:63:9d:8d:da:5a:4b:
b4:d5:7f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:05:07 2026 by rpki-client