
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
File: JZau0MDLO8_jGASyOc9GV3EuJ2o.mft (raw, json)
Hash identifier: g56RFls2GOGyJTxTtsXrn970cUM1S3Snre9F5wBTfS4=
Subject key identifier: 35:01:39:E3:C0:6F:B1:92:1C:B4:DF:7C:20:B4:CE:C0:CF:05:51:61
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial: 0471
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
Manifest number: 0423
Signing time: Fri 25 Sep 2026 00:16:45 +0000
Manifest this update: Fri 25 Sep 2026 00:16:44 +0000
Manifest next update: Fri 02 Oct 2026 00:16:44 +0000
Files and hashes: 1: JZau0MDLO8_jGASyOc9GV3EuJ2o.crl (hash: 4RBnrWfcNNvoFZfLDo2523q5T89gz86EpZK//QnZxC4=)
2: A60805D653EB11EEA1F43363C4F9AE02.roa (hash: j28A6ymDSsnqrRaPG7HiIgQzlW1p/QQe0p1Ap5wA4ss=)
3: 2CF7FA46995011F082453F71C4F9AE02.roa (hash: GLJ+jea24FBfzaQsii1UlRgswnUlDRjX0vu/zA29ZHA=)
4: C40F74B2D5C611EEA589D110C4F9AE02.roa (hash: sH0rebKAz1i2uxLJ3lNxQCxI30HtfefcB9hmlWfdhcI=)
5: 095A440652B311F0B25AA911C4F9AE02.roa (hash: 3Cs5Pm8PURk2/zkpsdMlEIL10nKpWGYJxO2gBf9Ee5Y=)
6: 00D63708DD3711EC9EF48256C4F9AE02.roa (hash: RaegGb5YOyVPDChDVKTuKEGfZR2i3keFj8m+p9xUFVo=)
7: 01F6431CDD3711EC9EF48256C4F9AE02.roa (hash: bjuPOTMp4pbN0z4iigT4wT7hoa5AOWvrE2nP3yVsJ7g=)
8: 5725C1363AB711EDBB6FC759C4F9AE02.roa (hash: jPjdXIBf3NMgMD5UHQPW9KHHUUZ/8nHgwptXvEXQtlc=)
9: 01607012DD3711EC9EF48256C4F9AE02.roa (hash: JLuibLFe2igwYYBnUOCMg1rvtCWv2EtsXGaKbROLXRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:16:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1137 (0x471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Validity
Not Before: Sep 25 00:16:44 2026 GMT
Not After : Oct 2 00:16:44 2026 GMT
Subject: CN=6ab5bd6c-9c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f7:82:e7:fb:0b:89:72:7d:6e:be:a8:68:59:
21:96:52:c3:a4:67:46:03:fd:5f:b0:6c:d6:a9:3e:
0b:26:21:6c:e1:67:fd:1e:29:f2:5b:9f:f3:b6:42:
ae:b5:42:0f:cd:12:cb:e2:88:12:79:c3:34:25:eb:
cd:94:95:60:21:c4:37:fb:81:09:5f:79:6a:3c:95:
0e:0f:4b:29:82:e1:eb:85:cc:b2:a1:03:63:b4:f1:
b8:a5:7f:e2:2d:e3:53:22:44:22:96:7b:9b:34:ab:
9e:99:18:f1:ee:7f:48:08:9a:f9:b4:ee:ce:4a:1c:
f3:6c:0c:00:e6:50:87:7e:5e:49:11:97:eb:e6:c1:
71:aa:3a:be:20:f1:28:60:14:b7:a4:5a:74:30:06:
d0:90:50:a6:b1:99:04:1d:e5:05:74:35:e6:93:a6:
66:8e:67:40:44:62:83:7f:85:c9:6f:c1:5d:54:6d:
4c:61:f0:31:da:ba:10:25:9f:b0:54:7f:2b:f0:d5:
f7:0a:f7:8f:1e:66:94:27:9e:dc:0d:8a:c9:5d:86:
18:6a:82:9f:9f:4e:96:ec:5c:95:9f:03:ea:04:24:
07:ca:e2:6e:e6:61:d6:44:ee:e2:5b:13:0d:74:6c:
14:f6:c3:3b:3b:c8:99:a6:83:c4:5d:9d:1d:91:ec:
d1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:01:39:E3:C0:6F:B1:92:1C:B4:DF:7C:20:B4:CE:C0:CF:05:51:61
X509v3 Authority Key Identifier:
keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:e1:43:c6:27:8b:1d:00:d0:2b:62:b1:23:a8:4b:06:97:b0:
e2:c2:9b:be:30:19:71:b6:eb:fe:4f:d1:2e:9d:c9:54:02:ce:
63:d6:cc:62:a4:de:c1:9d:49:61:66:c5:66:fc:b5:ff:1d:f0:
98:4c:f0:88:19:8d:7b:90:78:63:06:45:13:f3:15:53:e9:f4:
fd:63:75:27:8f:62:20:5e:fd:c4:c8:1d:d8:d9:38:20:2c:17:
92:c7:ec:ab:a5:60:4d:c8:cf:be:50:d1:d8:56:2a:d7:c5:db:
d2:85:f0:ac:a2:04:1b:e6:d9:8d:b2:83:35:e7:1f:e4:31:0e:
25:ba:dd:cf:8b:a5:ca:6a:ab:c5:ce:1e:ef:39:c8:2e:d5:f6:
c8:ce:25:ae:69:42:64:c3:1d:83:4f:15:84:3c:47:81:d2:49:
90:5f:25:48:43:af:c9:17:1b:6a:14:bb:35:77:1b:52:2c:29:
09:78:64:c1:19:e5:27:de:ef:6f:b3:9c:5d:ac:ae:78:94:f8:
8a:42:1d:60:74:dc:d9:04:f7:f5:e4:4b:60:4d:3d:5b:36:19:
ce:a3:3e:7f:62:65:85:10:70:d0:6e:ef:dd:64:3c:83:71:cd:
4a:75:ea:e5:8a:0f:41:e2:72:49:7c:ca:ff:9d:9a:12:dd:25:
21:11:8c:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYzMDQxMTAvBgNVBAUTKDI1OTZBRUQwQzBDQjNCQ0ZFMzE4MDRCMjM5Q0Y0NjU3
NzEyRTI3NkEwHhcNMjYwOTI1MDAxNjQ0WhcNMjYxMDAyMDAxNjQ0WjAYMRYwFAYD
VQQDEw02YWI1YmQ2Yy05YzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkfeC5/sLiXJ9br6oaFkhllLDpGdGA/1fsGzWqT4LJiFs4Wf9HinyW5/ztkKu
tUIPzRLL4ogSecM0JevNlJVgIcQ3+4EJX3lqPJUOD0spguHrhcyyoQNjtPG4pX/i
LeNTIkQilnubNKuemRjx7n9ICJr5tO7OShzzbAwA5lCHfl5JEZfr5sFxqjq+IPEo
YBS3pFp0MAbQkFCmsZkEHeUFdDXmk6ZmjmdARGKDf4XJb8FdVG1MYfAx2roQJZ+w
VH8r8NX3CvePHmaUJ57cDYrJXYYYaoKfn06W7FyVnwPqBCQHyuJu5mHWRO7iWxMN
dGwU9sM7O8iZpoPEXZ0dkezRMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDUBOePA
b7GSHLTffCC0zsDPBVFhMB8GA1UdIwQYMBaAFCWWrtDAyzvP4xgEsjnPRldxLidq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMwNC8xOUU0REYwNkRC
MDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84X2pHQVN5T2M5R1YzRXVK
Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0paYXUwTURMTzhfakdBU3lPYzlHVjNFdUoyby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NjMwNC8xOUU0REYwNkRCMDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84
X2pHQVN5T2M5R1YzRXVKMm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAheFDxieLHQDQK2KxI6hLBpew4sKbvjAZcbbr/k/RLp3JVALOY9bMYqTewZ1J
YWbFZvy1/x3wmEzwiBmNe5B4YwZFE/MVU+n0/WN1J49iIF79xMgd2Nk4ICwXksfs
q6VgTcjPvlDR2FYq18Xb0oXwrKIEG+bZjbKDNecf5DEOJbrdz4ulymqrxc4e7znI
LtX2yM4lrmlCZMMdg08VhDxHgdJJkF8lSEOvyRcbahS7NXcbUiwpCXhkwRnlJ97v
b7OcXayueJT4ikIdYHTc2QT39eRLYE09WzYZzqM+f2JlhRBw0G7v3WQ8g3HNSnXq
5YoPQeJySXzK/52aEt0lIRGMTA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:51:24 2026 by rpki-client