
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
File: jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json)
Hash identifier: mI3FkcSIwUI6Ulr4M/58+GmBHo/6Nb8FVhqJwkBYXq4=
Subject key identifier: 96:F6:8A:C5:E8:44:80:72:73:6F:6A:CF:70:1E:37:FA:42:0C:6F:A8
Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
Certificate issuer: /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
Certificate serial: 3537
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
Manifest number: 3522
Signing time: Sat 28 Feb 2026 14:39:19 +0000
Manifest this update: Sat 28 Feb 2026 14:39:18 +0000
Manifest next update: Sat 07 Mar 2026 14:39:18 +0000
Files and hashes: 1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: vUvBgkXsmiTN5LVGQWFHakKUr9j995inUClZuwK2+io=)
2: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: /mCgDe/QXkVZ19zwT18pUH2ZsyIWQwp0AHCO+5H4d8I=)
3: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: TtYahgOBiAHkLlSezm8CxA8MdQa1tev+wopDkcGdXJg=)
4: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: w01HF0PHmMW2vTDKfsoG7zjIAasNEiHabBJ66OnCaSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl
rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:39:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13623 (0x3537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
Validity
Not Before: Feb 28 14:39:18 2026 GMT
Not After : Mar 7 14:39:18 2026 GMT
Subject: CN=69a2fe17-d6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:55:04:b3:9f:bc:fd:15:43:ac:71:a3:db:79:
e9:a5:9a:dc:86:96:af:1e:a3:17:9a:4e:eb:74:d8:
c2:54:8f:12:28:ca:1e:3b:c0:90:3e:19:3f:2c:b0:
9d:0e:35:cc:8b:cf:47:cb:ae:19:e7:e6:e7:2d:9b:
a8:bc:58:d0:40:08:f9:e0:ae:48:c3:85:13:cd:ce:
a8:81:ff:f7:11:6e:20:72:b0:11:de:6e:37:d9:a7:
08:d0:4b:b3:dc:fe:48:c7:e8:91:3c:c1:1f:3f:98:
9f:50:0c:fd:d3:ec:48:f7:e0:b2:b5:a7:66:5d:ac:
bc:95:a5:64:1a:f9:bb:ec:38:00:8c:4a:c8:85:7d:
5a:a5:5a:bc:6e:04:4d:37:13:22:a4:39:2d:e5:2a:
4d:72:5f:89:e2:aa:35:40:a7:d0:67:07:7f:7f:77:
f3:29:2f:47:1f:7f:97:0b:7d:4a:e6:6a:c8:fa:3d:
26:5d:6b:9b:02:75:c0:47:1e:0c:d0:d4:ec:4d:51:
9c:a4:70:f2:d3:7b:82:04:1c:8d:f0:44:ec:f6:9d:
00:3c:8d:c6:47:e8:0e:67:c1:69:3d:a5:5b:94:21:
5a:d1:c1:68:04:96:bd:c2:af:f5:f6:c3:ff:71:95:
82:84:df:cc:55:5b:83:c4:78:a2:9f:cd:5e:6d:76:
ee:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F6:8A:C5:E8:44:80:72:73:6F:6A:CF:70:1E:37:FA:42:0C:6F:A8
X509v3 Authority Key Identifier:
keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:fa:b2:5b:3c:1c:86:30:e1:fa:76:6b:8e:59:ba:5b:58:cb:
6c:a6:de:af:12:bb:de:d7:4e:87:f0:a1:31:6b:d0:6a:be:8d:
09:7d:e3:8f:6e:c3:e1:cd:32:c0:a6:b4:d0:0b:b9:7f:87:79:
f4:48:62:a8:e2:0e:c6:9f:46:7c:00:0b:fd:0a:c3:13:9e:23:
4f:a8:28:37:bf:1b:ff:59:29:f1:b1:35:97:97:d0:3c:37:f3:
bc:8e:ad:b3:eb:e7:7c:c6:00:91:21:f0:f4:e3:48:62:45:63:
c6:3c:91:b7:97:8c:70:ff:8b:7a:cc:6b:86:b4:61:7f:ca:70:
bb:e5:03:c1:eb:92:6d:c8:42:98:b6:0f:5f:7f:fa:15:91:84:
f1:af:9c:28:d3:bf:33:e8:77:39:b0:43:0a:6e:b1:17:65:5c:
42:14:65:86:96:c2:77:8e:29:b5:a0:1b:5a:58:bd:bc:e9:bf:
78:e3:e1:d3:86:6b:ad:8f:07:6f:96:61:b0:b6:ce:69:f5:da:
93:8b:b4:e3:87:cd:0d:a5:fa:d5:f4:7b:cd:14:26:c9:aa:b7:
6e:56:fe:61:93:b9:6f:e3:cc:d9:78:19:a9:e9:1a:1e:6f:6c:
c0:5d:7e:cc:46:41:90:d1:22:db:99:e2:a2:fa:d5:04:e2:d8:
8a:9a:27:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZFNkMxMTAvBgNVBAUTKDhGMzE2MDJGNEVCRTQ1NUUwOTlDMDA0OUJCN0IwMDY2
NTU4QjlEODkwHhcNMjYwMjI4MTQzOTE4WhcNMjYwMzA3MTQzOTE4WjAYMRYwFAYD
VQQDDA02OWEyZmUxNy1kNmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA01UEs5+8/RVDrHGj23nppZrchpavHqMXmk7rdNjCVI8SKMoeO8CQPhk/LLCd
DjXMi89Hy64Z5+bnLZuovFjQQAj54K5Iw4UTzc6ogf/3EW4gcrAR3m432acI0Euz
3P5Ix+iRPMEfP5ifUAz90+xI9+CytadmXay8laVkGvm77DgAjErIhX1apVq8bgRN
NxMipDkt5SpNcl+J4qo1QKfQZwd/f3fzKS9HH3+XC31K5mrI+j0mXWubAnXARx4M
0NTsTVGcpHDy03uCBByN8ETs9p0API3GR+gOZ8FpPaVblCFa0cFoBJa9wq/19sP/
cZWChN/MVVuDxHiin81ebXbu5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJb2isXo
RIByc29qz3AeN/pCDG+oMB8GA1UdIwQYMBaAFI8xYC9OvkVeCZwASbt7AGZVi52J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkU2Qy80MjZFM0RCQTFE
OEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJWNEpuQUJKdTNzQVpsV0xu
WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2p6RmdMMDYtUlY0Sm5BQkp1M3NBWmxXTG5Zay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NkU2Qy80MjZFM0RCQTFEOEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJW
NEpuQUJKdTNzQVpsV0xuWWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOPqyWzwchjDh+nZrjlm6W1jLbKberxK73tdOh/ChMWvQar6NCX3jj27D4c0y
wKa00Au5f4d59EhiqOIOxp9GfAAL/QrDE54jT6goN78b/1kp8bE1l5fQPDfzvI6t
s+vnfMYAkSHw9ONIYkVjxjyRt5eMcP+LesxrhrRhf8pwu+UDweuSbchCmLYPX3/6
FZGE8a+cKNO/M+h3ObBDCm6xF2VcQhRlhpbCd44ptaAbWli9vOm/eOPh04ZrrY8H
b5ZhsLbOafXak4u044fNDaX61fR7zRQmyaq3blb+YZO5b+PM2XgZqekaHm9swF1+
zEZBkNEi25niovrVBOLYiponlw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:55 2026 by rpki-client