
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
File: JZau0MDLO8_jGASyOc9GV3EuJ2o.mft (raw, json)
Hash identifier: 1oF84mFchj6gJ3sCZb3YdZcODxjtGfmNXSmU91eJwGQ=
Subject key identifier: 81:F1:DF:6F:16:84:7C:DA:BC:81:7D:56:5F:61:85:38:1A:EC:B9:7C
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial: 0495
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
Manifest number: 043F
Signing time: Sun 15 Nov 2026 00:08:10 +0000
Manifest this update: Sun 15 Nov 2026 00:08:10 +0000
Manifest next update: Sun 22 Nov 2026 00:08:10 +0000
Files and hashes: 1: JZau0MDLO8_jGASyOc9GV3EuJ2o.crl (hash: 6s2eAEEYXMVH1i1TkjW4TAplTgcukDsWw76avDtw3zY=)
2: 095A440652B311F0B25AA911C4F9AE02.roa (hash: mGZzsisLf+s/yTQGVxWB9KQjagfwckfG72mjXpZQix0=)
3: 01607012DD3711EC9EF48256C4F9AE02.roa (hash: GACvDp++E0De7ni1GpURUHF3RpOe5rQxioJSjVY8+gI=)
4: 00D63708DD3711EC9EF48256C4F9AE02.roa (hash: iN5/m8feIuXKDI2CqVCZSslGSyDa2AyofUuNmkaUSs0=)
5: 5725C1363AB711EDBB6FC759C4F9AE02.roa (hash: tEF4NaWdW5JXRyeMvYjXhRbSnvUxr+NCgJvNMizzAfg=)
6: 01F6431CDD3711EC9EF48256C4F9AE02.roa (hash: Q8YEZ4KtslWK1RINPhjhGZfD2DgI4afoJ+x9aB2Aj0w=)
7: C40F74B2D5C611EEA589D110C4F9AE02.roa (hash: q7kdusJWrvg79ZdgztDH04zh3nuFq9uDgOMoMJ7Oaow=)
8: 2CF7FA46995011F082453F71C4F9AE02.roa (hash: uCWoz5MN4i/uDeabRzalWNTkQrm9ixJyiwwaFnYQB5E=)
9: A60805D653EB11EEA1F43363C4F9AE02.roa (hash: 5ZRS2WqteeJS9FFcF21rPy4BfzSI0DJ57M9yBQlH7tk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1173 (0x495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Validity
Not Before: Nov 15 00:08:10 2026 GMT
Not After : Nov 22 00:08:10 2026 GMT
Subject: CN=6af8f7ea-cc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:3b:34:97:58:dd:c4:6a:e2:c5:13:39:81:
45:7c:e4:da:71:98:9b:b8:78:8d:7d:1a:ea:e8:ca:
76:82:53:ca:23:79:92:bf:be:58:42:31:e8:45:ce:
5f:f3:af:7e:8c:7f:6c:a5:1f:52:91:37:d6:97:48:
45:3d:8c:21:62:06:9c:87:87:89:6e:94:46:e6:25:
40:cd:32:19:6f:e0:1f:e0:e7:0b:4e:d6:e0:13:da:
15:eb:8e:c9:e6:6e:14:11:42:5f:06:6a:4a:2d:1b:
4f:9c:dc:98:7c:9e:d8:6a:a5:af:f4:85:b6:20:a1:
cc:ec:5b:90:d1:93:2c:4d:5d:2c:8b:de:d0:e8:a2:
6b:9e:6a:0f:49:11:df:4f:4e:17:9c:de:45:0f:77:
0e:08:05:19:96:f6:cf:a1:6a:bb:d8:fb:32:92:f4:
29:cf:b6:9c:bf:18:ed:55:3a:35:b0:17:eb:70:2a:
60:3a:f7:71:1d:c2:18:3a:b4:29:65:60:c3:47:21:
a8:8b:c5:9a:90:aa:a8:0e:2b:92:4d:72:d7:da:55:
c8:ae:01:d6:7f:eb:17:bd:71:6c:ac:cb:42:2a:f6:
ee:81:e9:c7:f8:5c:27:48:ef:91:44:e4:b2:1b:2f:
f3:43:1d:f9:44:e4:4e:9e:d9:d3:8d:b6:64:75:c6:
11:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F1:DF:6F:16:84:7C:DA:BC:81:7D:56:5F:61:85:38:1A:EC:B9:7C
X509v3 Authority Key Identifier:
keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4b:fd:56:cf:a7:2f:32:d9:6e:55:bb:de:51:a5:74:45:ed:
2a:aa:6a:d2:ad:66:b8:e1:28:8f:a4:57:f5:78:11:18:b1:ad:
49:74:0a:fa:51:02:da:3e:2a:dc:7e:b9:4d:06:34:72:f6:a4:
d0:46:48:54:b1:59:83:01:d9:12:78:ec:a9:a0:df:14:04:69:
60:fa:49:e8:46:13:a7:9c:6d:40:f1:ad:67:12:fa:02:01:cd:
de:f6:37:9b:e9:04:d1:94:65:43:83:be:40:a4:c2:ac:55:9c:
73:cf:eb:34:0a:69:9e:a5:a3:f5:1a:92:02:4d:1c:ba:fc:fa:
31:c3:73:ea:da:f7:b0:5e:72:c5:71:11:dd:4a:ac:cc:e0:08:
7d:37:1f:61:d9:0c:1d:7b:ab:27:d3:e1:96:d6:ef:f0:cd:24:
70:f1:90:a7:f3:58:ce:7c:20:fc:43:d8:01:46:15:41:7d:20:
92:ff:1c:2c:9c:49:6a:0c:09:de:d3:19:52:35:df:78:57:5b:
45:aa:41:ea:84:b5:be:89:ac:f5:56:12:4e:b5:3f:5e:d7:a6:
eb:af:d5:c9:4c:bc:fc:9e:44:ca:9e:00:9c:14:7f:d1:84:52:
02:ee:9e:cd:e5:90:08:24:81:4e:3a:de:b6:8d:a1:b4:e7:cb:
54:f5:53:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYzMDQxMTAvBgNVBAUTKDI1OTZBRUQwQzBDQjNCQ0ZFMzE4MDRCMjM5Q0Y0NjU3
NzEyRTI3NkEwHhcNMjYxMTE1MDAwODEwWhcNMjYxMTIyMDAwODEwWjAYMRYwFAYD
VQQDEw02YWY4ZjdlYS1jYzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAog07NJdY3cRq4sUTOYFFfOTacZibuHiNfRrq6Mp2glPKI3mSv75YQjHoRc5f
869+jH9spR9SkTfWl0hFPYwhYgach4eJbpRG5iVAzTIZb+Af4OcLTtbgE9oV647J
5m4UEUJfBmpKLRtPnNyYfJ7YaqWv9IW2IKHM7FuQ0ZMsTV0si97Q6KJrnmoPSRHf
T04XnN5FD3cOCAUZlvbPoWq72PsykvQpz7acvxjtVTo1sBfrcCpgOvdxHcIYOrQp
ZWDDRyGoi8WakKqoDiuSTXLX2lXIrgHWf+sXvXFsrMtCKvbugenH+FwnSO+RROSy
Gy/zQx35ROROntnTjbZkdcYRnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIHx328W
hHzavIF9Vl9hhTga7Ll8MB8GA1UdIwQYMBaAFCWWrtDAyzvP4xgEsjnPRldxLidq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMwNC8xOUU0REYwNkRC
MDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84X2pHQVN5T2M5R1YzRXVK
Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0paYXUwTURMTzhfakdBU3lPYzlHVjNFdUoyby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NjMwNC8xOUU0REYwNkRCMDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84
X2pHQVN5T2M5R1YzRXVKMm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK0v9Vs+nLzLZblW73lGldEXtKqpq0q1muOEoj6RX9XgRGLGtSXQK+lEC2j4q
3H65TQY0cvak0EZIVLFZgwHZEnjsqaDfFARpYPpJ6EYTp5xtQPGtZxL6AgHN3vY3
m+kE0ZRlQ4O+QKTCrFWcc8/rNAppnqWj9RqSAk0cuvz6McNz6tr3sF5yxXER3Uqs
zOAIfTcfYdkMHXurJ9Phltbv8M0kcPGQp/NYznwg/EPYAUYVQX0gkv8cLJxJagwJ
3tMZUjXfeFdbRapB6oS1voms9VYSTrU/Xtem66/VyUy8/J5Eyp4AnBR/0YRSAu6e
zeWQCCSBTjreto2htOfLVPVTvQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 06:29:26 2026 by rpki-client