
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
File: JZau0MDLO8_jGASyOc9GV3EuJ2o.mft (raw, json)
Hash identifier: TQc7dtjouZOa2pNNsNquiJjHZ7nVHhkaQa5eDaqMsAU=
Subject key identifier: 26:84:3D:CE:A4:98:8F:ED:3C:BE:CD:72:75:98:2A:C6:56:7A:94:0C
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial: 0403
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
Manifest number: 03B7
Signing time: Sun 01 Mar 2026 22:37:31 +0000
Manifest this update: Sun 01 Mar 2026 22:37:30 +0000
Manifest next update: Sun 08 Mar 2026 22:37:30 +0000
Files and hashes: 1: JZau0MDLO8_jGASyOc9GV3EuJ2o.crl (hash: /i4eAOpJhSKktmPDDSYBHtZ/VUl0nLC4UpHPg5QGPLU=)
2: 2CF7FA46995011F082453F71C4F9AE02.roa (hash: GLJ+jea24FBfzaQsii1UlRgswnUlDRjX0vu/zA29ZHA=)
3: 01607012DD3711EC9EF48256C4F9AE02.roa (hash: PiF0Yq0k7c1ubFi1TWpAeTouaecHeyV9OElEe5rSja0=)
4: 095A440652B311F0B25AA911C4F9AE02.roa (hash: 3Cs5Pm8PURk2/zkpsdMlEIL10nKpWGYJxO2gBf9Ee5Y=)
5: 5725C1363AB711EDBB6FC759C4F9AE02.roa (hash: jPjdXIBf3NMgMD5UHQPW9KHHUUZ/8nHgwptXvEXQtlc=)
6: C40F74B2D5C611EEA589D110C4F9AE02.roa (hash: sH0rebKAz1i2uxLJ3lNxQCxI30HtfefcB9hmlWfdhcI=)
7: 00D63708DD3711EC9EF48256C4F9AE02.roa (hash: ZSUAE6GXvhMXOzUCFpPcL+jckqylaJU0zvQbSUoc/Ks=)
8: 01F6431CDD3711EC9EF48256C4F9AE02.roa (hash: bjuPOTMp4pbN0z4iigT4wT7hoa5AOWvrE2nP3yVsJ7g=)
9: A60805D653EB11EEA1F43363C4F9AE02.roa (hash: j28A6ymDSsnqrRaPG7HiIgQzlW1p/QQe0p1Ap5wA4ss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1027 (0x403)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Validity
Not Before: Mar 1 22:37:30 2026 GMT
Not After : Mar 8 22:37:30 2026 GMT
Subject: CN=69a4bfab-e427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:aa:90:5a:8b:30:2d:50:86:87:17:2e:7f:
8b:e2:46:63:41:96:0b:78:7b:0c:61:4c:29:8b:b2:
c8:4d:cf:c7:50:a7:2a:85:90:e2:f0:64:72:cc:b2:
34:24:11:f1:ca:f6:eb:ab:b3:e5:9b:81:77:1a:82:
69:10:1d:41:88:53:1a:d9:c7:56:c4:e4:a2:98:0c:
3a:b6:04:6e:3c:3c:aa:3b:1e:00:9f:ab:bb:35:bc:
f3:f3:9e:5e:c5:bc:9a:c0:a7:98:6e:5d:be:f1:a9:
23:43:ec:a6:7f:e2:0d:f9:8f:36:2a:7b:bd:93:34:
9b:a8:58:68:1d:04:c3:e4:88:97:d1:25:1b:9a:02:
b8:e2:0e:4d:e3:6f:fe:49:3d:39:08:86:3b:2a:4b:
53:f0:ed:ae:ce:89:11:48:52:58:33:3d:22:a2:a7:
00:42:3e:43:66:f2:e6:cb:b6:79:74:46:13:4f:e2:
00:6d:03:9d:21:5d:06:03:33:cf:1b:e7:b0:fe:14:
3f:03:d7:1f:63:ff:1b:7a:14:36:17:7e:bc:21:86:
56:d7:26:40:bc:12:9d:dd:d4:7c:5a:44:81:5e:74:
d2:f2:a9:3c:37:d2:16:9a:6c:ce:69:7c:d8:65:96:
66:d6:8a:be:5e:ec:96:83:3e:95:9c:8c:9b:35:74:
31:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:84:3D:CE:A4:98:8F:ED:3C:BE:CD:72:75:98:2A:C6:56:7A:94:0C
X509v3 Authority Key Identifier:
keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3b:aa:45:d4:25:47:c1:e4:98:c0:08:a5:c9:00:ea:0f:ca:
c1:28:ba:0e:74:29:d4:a1:28:2b:e4:7f:a4:cf:5c:81:d2:f6:
57:01:6e:05:66:2a:b8:43:81:3b:7b:68:cf:43:94:70:cf:d9:
3e:ad:33:6c:2a:2b:0d:b7:7b:80:ea:ee:dc:bc:32:18:f8:2d:
84:86:a8:f6:d3:bd:1d:39:61:5f:c7:29:00:5a:e5:ca:94:99:
a5:59:25:95:f8:51:26:39:14:4a:1e:03:f1:ad:02:4a:32:b9:
8a:50:6b:6a:cb:3f:ac:c4:46:5a:f8:37:7d:e6:35:6e:83:4c:
d5:90:21:12:fc:5b:e2:ec:0e:8d:97:52:b6:0f:22:9a:7b:8b:
3e:94:fd:43:86:f4:bb:46:52:49:63:91:e7:c2:d5:94:e0:c7:
1f:3c:4f:77:4a:50:f2:7e:6a:c0:be:d6:78:07:3e:02:66:37:
6e:b8:5b:32:d6:46:87:63:f9:71:eb:98:8e:d5:6b:e5:c9:50:
4a:1e:28:a5:07:46:59:c4:cd:65:62:bd:1f:46:c6:42:52:dd:
92:a8:72:3c:32:c8:46:b8:21:ca:f2:6d:16:8c:95:05:e1:d4:
d0:67:3c:db:ee:64:7e:ba:5d:a9:b7:15:2e:01:16:db:58:38:
fe:8c:06:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:20 2026 by rpki-client