
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
File: jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json)
Hash identifier: XQ+dzG4l+ce+mNRxErByH0pddo31Am+v3P+/VKmaMnE=
Subject key identifier: F9:F5:F9:5E:B4:4E:3C:FE:0E:A3:1E:6B:D4:9B:EF:12:67:3B:25:59
Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
Certificate issuer: /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
Certificate serial: 358A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
Manifest number: 356F
Signing time: Wed 22 Jul 2026 14:39:14 +0000
Manifest this update: Wed 22 Jul 2026 14:39:14 +0000
Manifest next update: Wed 29 Jul 2026 14:39:14 +0000
Files and hashes: 1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: z/igO6Yf0dJeSEQgRIuiOaO0u9brWR+fPbEdkWeqHTk=)
2: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: WdRTaGnFoQwXTrDKxW4rp2v7Q/g6mL76weyA7zS/lnI=)
3: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: xn1GYfH1rwc+2AIvQfDokFXkj6OoQH1mNdhrUcoaQW0=)
4: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: QvGmtT1ZWDXn7Q9qTG1+FbSqpfo986BnpmRtmxx/sP4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl
rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:39:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13706 (0x358a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
Validity
Not Before: Jul 22 14:39:14 2026 GMT
Not After : Jul 29 14:39:14 2026 GMT
Subject: CN=6a60d612-e7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:09:a3:06:3e:f3:b8:01:87:d5:0e:78:88:
e5:ad:1d:c5:99:e0:a9:b8:36:7b:60:45:02:1c:3f:
c5:c8:27:05:1b:5d:d6:7e:94:cc:51:bd:24:e4:5d:
97:9b:26:14:1c:31:a3:4d:bc:fe:2a:75:16:b5:e7:
f9:cd:23:af:2a:c9:eb:47:07:fd:2a:4a:5d:37:4d:
9a:26:55:23:da:b8:47:da:77:88:94:f5:02:67:c6:
50:60:be:05:c3:8b:3d:5b:50:3b:af:42:5d:25:78:
b6:68:8f:1a:4a:26:73:3c:6a:7f:ec:76:a3:7b:d7:
05:15:11:ec:ab:83:4b:87:5f:0f:23:d5:cf:65:96:
f9:b4:20:ec:a0:fc:51:0e:51:a0:ba:7c:be:9e:39:
ae:e7:b9:18:dd:a6:f3:46:5f:31:dc:5d:0c:4e:a5:
0f:d3:ea:be:7b:37:af:9f:14:a3:10:7c:94:bc:29:
8d:28:7b:bc:53:80:4b:2a:84:7d:45:fb:51:36:84:
36:a7:69:67:b6:91:31:d6:cd:f9:a7:79:9d:48:24:
da:80:3b:62:88:25:1a:40:34:15:6a:81:1c:25:4e:
33:ec:31:6b:5a:b7:5a:88:57:e6:4d:62:e9:ca:f1:
3e:83:d8:f0:64:0d:06:15:af:1c:9d:a5:fd:46:e8:
9c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F5:F9:5E:B4:4E:3C:FE:0E:A3:1E:6B:D4:9B:EF:12:67:3B:25:59
X509v3 Authority Key Identifier:
keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:00:f3:c4:e6:09:44:21:5e:d8:8b:eb:f8:02:77:cd:0e:85:
99:79:7a:63:26:37:ff:30:a3:dc:9e:21:00:2f:bc:86:ed:25:
79:30:1b:5e:1c:9e:dc:8a:c6:03:1c:71:7b:2e:2b:3c:e5:5b:
ba:9b:08:1d:94:b4:ab:24:cf:b8:f1:6e:96:01:87:1b:c8:77:
e4:3b:70:84:cc:2e:fd:b9:d7:3c:3b:7b:e7:8f:83:e0:c9:fb:
56:d0:5b:cd:4a:ea:49:58:16:89:de:49:5b:6a:e7:43:7c:01:
22:04:c9:68:1e:64:24:e1:c1:3c:ab:e4:00:ea:ff:29:4d:c0:
e8:eb:de:ba:58:53:2b:cd:3d:2f:73:e0:82:82:d6:2e:51:91:
32:26:cc:04:56:b6:73:4b:15:b1:5f:00:b6:bd:f2:03:24:51:
65:b9:b6:f7:e0:38:85:1a:8c:e1:de:bf:35:bd:36:9c:7c:12:
82:32:ac:df:12:7c:59:d3:85:49:3e:77:a1:ca:26:48:d0:2f:
1c:6d:c1:48:bf:96:64:25:0f:1a:5b:53:2a:1e:02:d4:e0:89:
eb:f8:ee:e0:c7:da:43:31:20:57:03:b9:a6:a8:b1:6e:07:81:
d2:f8:10:52:d2:54:4a:ea:91:94:20:4b:2e:64:48:ea:e6:c3:
c0:7d:63:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:11:02 2026 by rpki-client