
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
File: JZau0MDLO8_jGASyOc9GV3EuJ2o.mft (raw, json)
Hash identifier: NhYCUarCLE39gh8qPrbTNX84i9Uc8PL+cdrclEHaxTU=
Subject key identifier: 78:9F:64:E4:0C:71:78:E1:2E:8E:65:17:D0:1A:0C:2E:11:81:51:EB
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial: 0450
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
Manifest number: 0402
Signing time: Thu 23 Jul 2026 01:28:26 +0000
Manifest this update: Thu 23 Jul 2026 01:28:26 +0000
Manifest next update: Thu 30 Jul 2026 01:28:26 +0000
Files and hashes: 1: JZau0MDLO8_jGASyOc9GV3EuJ2o.crl (hash: nI6TKcaz+WwBNF+nhsqlTA2oMOvZcarpIRX20vJjPwQ=)
2: 01607012DD3711EC9EF48256C4F9AE02.roa (hash: JLuibLFe2igwYYBnUOCMg1rvtCWv2EtsXGaKbROLXRs=)
3: 2CF7FA46995011F082453F71C4F9AE02.roa (hash: GLJ+jea24FBfzaQsii1UlRgswnUlDRjX0vu/zA29ZHA=)
4: 00D63708DD3711EC9EF48256C4F9AE02.roa (hash: RaegGb5YOyVPDChDVKTuKEGfZR2i3keFj8m+p9xUFVo=)
5: A60805D653EB11EEA1F43363C4F9AE02.roa (hash: j28A6ymDSsnqrRaPG7HiIgQzlW1p/QQe0p1Ap5wA4ss=)
6: C40F74B2D5C611EEA589D110C4F9AE02.roa (hash: sH0rebKAz1i2uxLJ3lNxQCxI30HtfefcB9hmlWfdhcI=)
7: 01F6431CDD3711EC9EF48256C4F9AE02.roa (hash: bjuPOTMp4pbN0z4iigT4wT7hoa5AOWvrE2nP3yVsJ7g=)
8: 095A440652B311F0B25AA911C4F9AE02.roa (hash: 3Cs5Pm8PURk2/zkpsdMlEIL10nKpWGYJxO2gBf9Ee5Y=)
9: 5725C1363AB711EDBB6FC759C4F9AE02.roa (hash: jPjdXIBf3NMgMD5UHQPW9KHHUUZ/8nHgwptXvEXQtlc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:28:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1104 (0x450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Validity
Not Before: Jul 23 01:28:26 2026 GMT
Not After : Jul 30 01:28:26 2026 GMT
Subject: CN=6a616e3a-14ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b4:aa:9d:e4:c7:a2:ef:d3:8a:b6:31:08:e5:
b9:97:26:39:ee:b2:cc:0b:8e:e6:86:0e:31:35:01:
28:f5:84:7e:87:12:69:35:6e:a2:fa:0c:85:b4:c0:
00:4c:b0:14:e0:70:4c:e2:0e:df:d0:95:02:a2:45:
00:1c:ed:75:b5:2c:ec:92:14:53:cc:90:4e:dc:f9:
bf:8d:a2:b3:9f:f7:b8:c0:48:77:2e:d5:24:48:36:
66:02:a0:1c:ed:d3:fc:fa:dc:a4:c2:84:1e:e6:66:
65:4b:63:45:f6:3e:60:61:98:bf:96:97:a6:44:e2:
2e:4e:c4:7b:47:bb:fc:ec:a2:7a:13:b1:c9:9d:7c:
cf:8f:49:82:2c:f4:01:9e:e1:3e:44:01:c5:8e:27:
32:51:80:74:dc:1e:01:9e:94:ae:bf:f6:43:da:24:
08:33:0c:47:99:0b:59:6b:1d:01:29:39:db:3a:81:
ac:08:a8:00:02:91:45:f4:e5:41:d5:a6:07:a4:92:
fb:af:e6:01:0a:ec:eb:8e:e1:51:60:14:33:6f:88:
ed:f2:6d:6a:d0:b2:6c:36:80:02:a6:de:7c:52:51:
8e:62:d9:b0:5e:9a:b1:09:7e:a4:f1:44:f2:c1:cc:
3a:2d:7b:c8:92:7d:b1:2e:6b:01:d6:73:d4:92:d3:
8d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9F:64:E4:0C:71:78:E1:2E:8E:65:17:D0:1A:0C:2E:11:81:51:EB
X509v3 Authority Key Identifier:
keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:ea:85:c4:35:b1:57:27:e0:29:27:63:89:c9:b5:8c:ad:67:
85:27:2b:0a:97:b1:07:5b:53:dc:28:7c:6b:18:2f:5c:9f:3e:
fd:51:c8:6a:9d:9b:db:7a:59:76:62:86:d1:9b:2d:31:67:0e:
e8:ff:7a:cb:d8:fd:67:da:5d:d3:23:28:66:75:03:c0:8f:ca:
06:c2:9c:07:e8:3f:ce:d7:46:40:5b:48:ac:65:5d:6d:8e:b5:
95:ac:91:6e:d9:ab:98:9c:1b:04:40:91:a6:8b:06:44:0d:b6:
1b:e5:4f:03:d1:40:2b:57:cf:b0:46:4d:e3:0f:4f:a8:28:91:
71:a7:f0:99:00:76:69:7b:9f:0a:a6:6a:63:2d:bd:48:9e:83:
b2:d6:9f:2d:11:77:57:89:97:79:d4:89:d5:8c:94:b5:9b:20:
2c:4f:07:f1:da:ae:7e:0f:f7:33:4c:71:d7:6c:ba:7c:aa:56:
f0:7f:67:4d:be:e9:fc:a9:d0:5f:cb:aa:38:75:d8:b9:91:0c:
5b:bc:17:df:af:cb:05:2a:b2:a5:76:d1:05:5b:3b:38:f8:0e:
7a:a8:65:8b:d1:c0:81:93:5a:6e:24:7c:20:e7:c1:f4:1e:60:
ca:d6:f5:19:89:81:ee:ce:49:b0:ba:62:63:1c:48:fc:dd:92:
50:6a:28:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:13 2026 by rpki-client