
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
File: 34pOYRe8o2iUDWjphUeYuWZgndQ.mft (raw, json)
Hash identifier: cXUZuHogE6IGx0xvn3HuUATAEx/GlBNJ1ouPqM8cCgI=
Subject key identifier: 2F:E7:CC:30:00:C7:E7:C8:FD:B8:75:28:55:69:55:13:5A:3C:FE:14
Authority key identifier: DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4
Certificate issuer: /CN=A91C8530/serialNumber=DF8A4E6117BCA368940D68E9854798B966609DD4
Certificate serial: 09D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
Manifest number: 09C8
Signing time: Sun 20 Sep 2026 19:50:28 +0000
Manifest this update: Sun 20 Sep 2026 19:50:28 +0000
Manifest next update: Sun 27 Sep 2026 19:50:28 +0000
Files and hashes: 1: 34pOYRe8o2iUDWjphUeYuWZgndQ.crl (hash: QkEw8IIdCD2APsRH9z5CaKL2FFzCuWMvOUHmKhQoH20=)
2: 9BD30C5EB1E711EA86EFFD5EC4F9AE02.roa (hash: gUZ5KM8AqgTVECxg/OBb4oxOhMvuse7V54QYYUpmz54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.crl
rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2515 (0x9d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8530, serialNumber=DF8A4E6117BCA368940D68E9854798B966609DD4
Validity
Not Before: Sep 20 19:50:28 2026 GMT
Not After : Sep 27 19:50:28 2026 GMT
Subject: CN=6ab03904-ce78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1b:21:56:f7:4c:05:a3:ef:57:04:d5:e9:c8:
62:7a:60:14:e0:9a:52:3a:b8:7b:21:bd:c0:09:11:
5f:24:67:ca:70:d5:cd:ff:db:ad:a5:75:80:e5:da:
02:5d:cf:51:5e:d1:0d:f2:bc:da:f8:3f:fd:6c:75:
dd:34:72:cd:70:b9:60:62:df:04:ae:80:66:ce:b0:
6f:98:75:1f:56:a3:09:f3:5a:dc:82:eb:59:dc:03:
66:8c:8a:40:82:23:02:97:a0:73:e0:1c:29:4d:aa:
cc:a6:f8:c6:91:d6:bd:cb:2e:36:de:ad:ea:03:27:
75:32:c2:44:88:b6:5f:9f:fc:13:5c:7d:c9:b6:d4:
02:97:5f:aa:ab:3e:b0:b2:29:15:c4:2f:b2:fe:7d:
fd:f0:c9:7c:16:98:c7:61:56:3d:ca:97:b0:4d:e7:
a7:f2:16:52:61:f6:ab:ba:bc:dc:32:24:ed:db:76:
a5:9d:c9:7b:67:28:73:0c:e6:4e:12:58:fb:f7:df:
aa:50:25:e9:93:28:b9:84:2c:0f:a2:88:33:70:db:
12:ed:ae:b1:3c:39:94:fc:05:6e:11:74:87:48:8c:
4f:16:43:1f:a7:31:0a:4d:ea:c3:4f:91:fa:ff:d8:
be:d6:43:1e:a0:7e:0d:8f:2a:55:7b:f1:9d:eb:d2:
0e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E7:CC:30:00:C7:E7:C8:FD:B8:75:28:55:69:55:13:5A:3C:FE:14
X509v3 Authority Key Identifier:
keyid:DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:94:ef:9b:3d:68:87:a1:21:c9:f6:c7:c0:f6:78:bb:d2:8c:
3f:9b:89:05:cc:d2:ba:72:0f:0b:3f:aa:05:81:19:ca:ef:a8:
5f:92:eb:df:6e:92:82:2d:27:0d:c8:ff:16:e3:b7:93:2d:89:
91:22:d9:a2:92:e5:09:60:3c:aa:40:50:b7:be:cd:de:7c:4f:
88:5c:97:c3:19:a8:16:36:18:fc:7a:2e:53:f4:e1:1b:c7:ce:
e3:ed:48:c3:44:22:a8:48:21:f0:dd:47:28:d8:e7:d7:a9:1b:
1a:3a:21:d9:d4:f0:90:69:33:84:a4:76:46:fd:cb:ec:9b:aa:
e3:6c:06:ea:8e:3b:1e:00:83:5b:67:cd:7d:0f:83:0a:63:e1:
93:e8:50:cd:9a:d9:d6:2c:98:9b:a0:8e:94:34:17:7b:66:27:
06:09:ad:7b:68:f8:80:8c:e5:5b:87:a7:4f:9d:6d:c6:73:61:
d5:ea:4e:02:83:6b:ba:b9:d1:e8:93:89:86:3d:de:4c:58:cb:
35:42:f3:26:df:37:4a:d3:a5:09:b2:17:da:d2:06:52:94:b9:
16:b2:aa:b7:35:e6:fd:b2:58:51:28:8b:8b:99:b5:a3:14:1c:
bf:17:2d:bc:80:bc:3f:ad:d7:96:3f:6f:45:4d:e9:43:68:fe:
76:33:cb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:28:18 2026 by rpki-client