
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
File: JZau0MDLO8_jGASyOc9GV3EuJ2o.mft (raw, json)
Hash identifier: on5q5ilKhFLD1ySYbkk2iLNiBr+ev3LfKnybvHq5Mlc=
Subject key identifier: 61:85:35:23:58:C6:35:FE:0A:CC:6A:41:9B:A4:5B:F1:AC:48:ED:C5
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial: 0470
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
Manifest number: 0422
Signing time: Wed 23 Sep 2026 00:04:17 +0000
Manifest this update: Wed 23 Sep 2026 00:04:16 +0000
Manifest next update: Wed 30 Sep 2026 00:04:16 +0000
Files and hashes: 1: JZau0MDLO8_jGASyOc9GV3EuJ2o.crl (hash: Zho0NyX8u79m/5a2Oywp6WfncAXQSHA9Hgc9R29ySdc=)
2: C40F74B2D5C611EEA589D110C4F9AE02.roa (hash: sH0rebKAz1i2uxLJ3lNxQCxI30HtfefcB9hmlWfdhcI=)
3: 01607012DD3711EC9EF48256C4F9AE02.roa (hash: JLuibLFe2igwYYBnUOCMg1rvtCWv2EtsXGaKbROLXRs=)
4: 2CF7FA46995011F082453F71C4F9AE02.roa (hash: GLJ+jea24FBfzaQsii1UlRgswnUlDRjX0vu/zA29ZHA=)
5: 5725C1363AB711EDBB6FC759C4F9AE02.roa (hash: jPjdXIBf3NMgMD5UHQPW9KHHUUZ/8nHgwptXvEXQtlc=)
6: 095A440652B311F0B25AA911C4F9AE02.roa (hash: 3Cs5Pm8PURk2/zkpsdMlEIL10nKpWGYJxO2gBf9Ee5Y=)
7: 01F6431CDD3711EC9EF48256C4F9AE02.roa (hash: bjuPOTMp4pbN0z4iigT4wT7hoa5AOWvrE2nP3yVsJ7g=)
8: 00D63708DD3711EC9EF48256C4F9AE02.roa (hash: RaegGb5YOyVPDChDVKTuKEGfZR2i3keFj8m+p9xUFVo=)
9: A60805D653EB11EEA1F43363C4F9AE02.roa (hash: j28A6ymDSsnqrRaPG7HiIgQzlW1p/QQe0p1Ap5wA4ss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1136 (0x470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Validity
Not Before: Sep 23 00:04:16 2026 GMT
Not After : Sep 30 00:04:16 2026 GMT
Subject: CN=6ab31781-6395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8d:28:7c:8f:08:10:d9:8d:d6:70:5b:d3:45:
68:b3:3e:56:9f:73:6a:23:c1:d3:53:2a:34:24:3c:
da:8d:c1:60:50:c3:5a:5b:6b:ed:6f:02:e1:56:0b:
c9:16:78:8e:99:c4:fc:6b:22:77:6a:04:20:c8:ca:
cb:55:60:14:54:6d:70:be:a7:9a:46:86:a8:a7:ee:
5c:75:8d:49:32:d9:e8:b8:e9:12:cf:3f:91:38:68:
69:82:06:1a:ec:71:42:99:d9:5a:ff:be:2c:62:dd:
f6:f4:21:3a:10:f2:86:55:e5:98:87:f1:ac:c7:94:
1b:ce:30:2b:7c:d9:17:11:c0:c4:72:5d:45:b3:d7:
f3:f3:07:8e:82:91:fc:4b:4f:95:ee:3e:6a:82:df:
7b:c6:74:d5:9d:b5:e6:71:53:6b:cd:46:e0:49:86:
2d:8d:fe:b1:d4:95:8c:8d:af:67:b6:c7:0f:c4:27:
06:f6:e4:e2:7a:70:91:55:ae:4f:a2:4d:14:e2:66:
0e:f4:fe:2b:0f:0e:c6:14:e5:c3:68:bc:a7:c4:5f:
9c:6b:2c:2d:f5:c1:b7:2e:c4:b3:5c:54:5b:32:23:
3e:fc:17:d9:2f:a8:8b:76:6e:6c:ad:8a:51:e5:e0:
8f:85:ca:21:13:e3:70:be:21:74:cb:c5:8b:a1:48:
e6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:85:35:23:58:C6:35:FE:0A:CC:6A:41:9B:A4:5B:F1:AC:48:ED:C5
X509v3 Authority Key Identifier:
keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:36:89:02:ec:87:67:01:f9:f5:51:41:91:86:0a:21:dc:5f:
b6:e2:c5:4e:47:9a:15:67:93:7f:17:c2:74:54:40:ed:87:82:
02:3b:59:6d:af:df:62:95:f8:17:bc:29:c5:90:aa:a5:f3:9f:
75:43:64:30:57:ec:83:c0:92:a1:13:ec:12:30:e0:69:8e:56:
b2:f6:13:76:65:bf:c4:48:87:8d:80:19:09:7b:d6:33:00:e7:
61:4a:15:b4:16:9b:25:4d:e8:d7:45:26:4e:0e:2d:8a:f3:14:
a1:45:4c:9c:a9:73:ca:d0:2c:14:20:4d:b7:36:37:fa:fa:f9:
d5:e5:d0:b0:3d:6d:28:23:83:a4:5c:b7:10:0d:62:1a:51:72:
b1:8e:2d:a7:a4:fb:6d:ab:09:ee:4f:9e:67:4a:ef:90:36:59:
dd:44:cf:a3:d0:22:ba:6c:8a:50:8e:05:d4:be:8c:31:5c:0d:
40:69:9f:32:9e:22:de:f7:ea:35:85:d8:97:6f:3a:49:f6:34:
a8:be:82:a0:06:14:b0:75:18:d3:54:78:8a:f4:1c:f7:93:2e:
0c:2a:9d:5f:bb:c7:4e:38:eb:b2:28:25:d1:10:08:a6:62:f3:
4a:b7:54:da:7f:b6:b6:bb:47:3a:61:76:f3:60:a6:16:3e:2e:
75:ab:0d:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYzMDQxMTAvBgNVBAUTKDI1OTZBRUQwQzBDQjNCQ0ZFMzE4MDRCMjM5Q0Y0NjU3
NzEyRTI3NkEwHhcNMjYwOTIzMDAwNDE2WhcNMjYwOTMwMDAwNDE2WjAYMRYwFAYD
VQQDEw02YWIzMTc4MS02Mzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsY0ofI8IENmN1nBb00Vosz5Wn3NqI8HTUyo0JDzajcFgUMNaW2vtbwLhVgvJ
FniOmcT8ayJ3agQgyMrLVWAUVG1wvqeaRoaop+5cdY1JMtnouOkSzz+ROGhpggYa
7HFCmdla/74sYt329CE6EPKGVeWYh/Gsx5QbzjArfNkXEcDEcl1Fs9fz8weOgpH8
S0+V7j5qgt97xnTVnbXmcVNrzUbgSYYtjf6x1JWMja9ntscPxCcG9uTienCRVa5P
ok0U4mYO9P4rDw7GFOXDaLynxF+caywt9cG3LsSzXFRbMiM+/BfZL6iLdm5srYpR
5eCPhcohE+NwviF0y8WLoUjmzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGGFNSNY
xjX+CsxqQZukW/GsSO3FMB8GA1UdIwQYMBaAFCWWrtDAyzvP4xgEsjnPRldxLidq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMwNC8xOUU0REYwNkRC
MDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84X2pHQVN5T2M5R1YzRXVK
Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0paYXUwTURMTzhfakdBU3lPYzlHVjNFdUoyby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NjMwNC8xOUU0REYwNkRCMDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84
X2pHQVN5T2M5R1YzRXVKMm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAATaJAuyHZwH59VFBkYYKIdxftuLFTkeaFWeTfxfCdFRA7YeCAjtZba/fYpX4
F7wpxZCqpfOfdUNkMFfsg8CSoRPsEjDgaY5WsvYTdmW/xEiHjYAZCXvWMwDnYUoV
tBabJU3o10UmTg4tivMUoUVMnKlzytAsFCBNtzY3+vr51eXQsD1tKCODpFy3EA1i
GlFysY4tp6T7basJ7k+eZ0rvkDZZ3UTPo9AiumyKUI4F1L6MMVwNQGmfMp4i3vfq
NYXYl286SfY0qL6CoAYUsHUY01R4ivQc95MuDCqdX7vHTjjrsigl0RAIpmLzSrdU
2n+2trtHOmF282CmFj4udasNTw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:24:37 2026 by rpki-client