
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
File: 34pOYRe8o2iUDWjphUeYuWZgndQ.mft (raw, json)
Hash identifier: jC3nrF6Q+Df/iimkS6q1rSJigFG0QpYFk92crk9HqJQ=
Subject key identifier: 83:E7:F6:3E:9F:10:22:43:86:4A:4B:E0:03:7D:8A:C5:F2:F1:C1:D7
Authority key identifier: DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4
Certificate issuer: /CN=A91C8530/serialNumber=DF8A4E6117BCA368940D68E9854798B966609DD4
Certificate serial: 09B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
Manifest number: 09AC
Signing time: Tue 28 Jul 2026 20:19:08 +0000
Manifest this update: Tue 28 Jul 2026 20:19:08 +0000
Manifest next update: Tue 04 Aug 2026 20:19:08 +0000
Files and hashes: 1: 34pOYRe8o2iUDWjphUeYuWZgndQ.crl (hash: 9QD2+KFBpAgSv7hBUyGPbrZCrDUSu9LYLGZ+y52KZyE=)
2: 9BD30C5EB1E711EA86EFFD5EC4F9AE02.roa (hash: gUZ5KM8AqgTVECxg/OBb4oxOhMvuse7V54QYYUpmz54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.crl
rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2487 (0x9b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8530, serialNumber=DF8A4E6117BCA368940D68E9854798B966609DD4
Validity
Not Before: Jul 28 20:19:08 2026 GMT
Not After : Aug 4 20:19:08 2026 GMT
Subject: CN=6a690ebc-62fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:d1:da:f9:fc:ec:e9:76:c7:ab:32:ed:86:
1c:d3:d4:21:2f:23:3c:b5:e0:a2:3f:88:ba:a8:1b:
cc:84:c8:d4:9f:42:10:08:57:b6:24:a0:21:11:94:
42:ab:a3:b9:30:82:1c:3d:6f:b4:3a:25:15:9e:1f:
43:5f:29:0c:e8:0a:b7:44:32:aa:2e:9b:43:96:71:
96:5c:cf:24:63:be:e4:6a:48:23:15:54:ca:a1:12:
37:7e:65:74:cf:03:bd:09:de:75:6e:11:cf:45:c3:
de:65:aa:1f:aa:4f:e2:54:ff:c6:aa:fe:44:9f:a3:
4e:95:51:af:72:37:dc:44:5a:04:28:a3:b0:72:72:
bf:24:26:39:ee:e1:f2:63:10:45:92:f5:7f:d3:ec:
7f:f7:f5:e2:72:20:49:99:80:3c:11:48:fa:ab:72:
53:8b:36:9c:23:09:f6:54:4b:dc:6d:9c:48:e7:03:
11:d9:1e:1c:63:53:52:81:fd:fe:3a:dc:9e:d7:7e:
33:9c:34:06:0d:47:57:e4:25:66:a9:c6:1c:04:86:
d4:d5:08:24:61:e0:50:ea:22:d3:75:12:8e:b6:f0:
d4:09:d2:62:29:ac:6d:83:23:14:f5:b0:d4:e7:57:
ad:bf:ae:56:f2:51:da:09:9a:8a:2d:86:fc:88:87:
16:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E7:F6:3E:9F:10:22:43:86:4A:4B:E0:03:7D:8A:C5:F2:F1:C1:D7
X509v3 Authority Key Identifier:
keyid:DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0d:fa:91:31:d5:3a:eb:c9:63:49:c3:31:ad:45:1f:62:5d:
89:23:c7:73:ff:90:64:f4:d0:5f:8b:be:8b:32:bf:9d:cd:ad:
f9:44:d4:20:96:65:c2:fe:bd:ce:bc:03:90:de:53:ef:5b:fb:
6f:23:d9:6a:2d:4f:b7:19:6d:3c:91:91:db:1d:bb:3f:82:65:
9e:14:11:4c:e3:79:0d:cd:af:5e:e2:9c:45:5c:3d:71:74:75:
fc:a5:a6:5e:47:24:02:33:ad:b3:ef:b1:7a:df:66:3b:c7:46:
ff:65:39:16:de:3a:39:c9:a7:75:e9:93:56:63:d4:55:40:0c:
c7:9c:55:c8:62:82:7b:6f:8b:a7:c9:d9:5d:ce:98:1a:1b:85:
4b:87:09:1b:49:eb:d0:bb:bc:c1:dd:3b:40:1b:63:fb:a0:84:
cf:00:b0:47:85:75:29:76:dd:a5:8c:a7:5e:69:f3:23:57:e6:
4d:48:c7:0b:bd:df:6d:d5:90:60:64:fa:dc:6f:11:d9:a7:2a:
24:fc:f1:ae:2c:5c:0e:66:1c:25:3f:b9:05:1a:6c:8a:ad:13:
3c:0a:1e:d3:a2:42:0a:de:5d:a8:64:f2:cd:be:ee:2d:86:be:
bf:6a:0c:bb:58:f5:38:06:8e:3f:55:fc:69:38:f6:fd:5c:d8:
fa:8f:e1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:36:05 2026 by rpki-client