
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft
File: R34i4b061SBOOtwt7NbSoZSs-lg.mft (raw, json)
Hash identifier: dGANgRgWZA+ALpQf3PSnfZRu1TdJEueY5zlDHoI9iVw=
Subject key identifier: 11:DC:A7:D3:C7:23:17:6E:E0:A5:38:D0:0B:EE:3C:4E:D6:5B:62:79
Authority key identifier: 47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58
Certificate issuer: /CN=A912B600/serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58
Certificate serial: 1256
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft
Manifest number: 1249
Signing time: Wed 22 Jul 2026 14:48:10 +0000
Manifest this update: Wed 22 Jul 2026 14:48:10 +0000
Manifest next update: Wed 29 Jul 2026 14:48:10 +0000
Files and hashes: 1: R34i4b061SBOOtwt7NbSoZSs-lg.crl (hash: X7AQHIo9bZUVFRDCUiaFM8VJLVBXw0QDXlaO8lKXbeY=)
2: 6C510F98B51C11EAA1649251C4F9AE02.roa (hash: FFjxfnMou/98tB5BNVIfzefmsUkfNyGwBbqp5Be3Rjg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl
rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4694 (0x1256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B600, serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58
Validity
Not Before: Jul 22 14:48:10 2026 GMT
Not After : Jul 29 14:48:10 2026 GMT
Subject: CN=6a60d82a-33a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c0:19:da:f8:e1:68:47:2e:22:06:57:14:84:
96:ff:47:77:ce:1c:87:9b:3a:bd:8c:95:b5:9a:ce:
87:03:e9:ca:32:2a:62:4b:d2:19:88:d8:2c:06:41:
ba:0c:79:94:aa:44:a2:de:59:17:f6:3c:db:8b:36:
04:07:78:2e:6e:ae:b3:46:fe:21:4f:a9:d1:ab:80:
02:76:59:51:52:f0:03:9a:85:1b:b8:24:e8:41:10:
f2:b4:24:db:cc:e9:0a:c9:c6:9a:f8:ea:fc:9b:eb:
51:f6:34:d2:ce:8a:a4:86:09:33:1b:dd:70:04:1b:
51:b4:c4:04:09:8a:dd:6e:8e:0e:5d:28:d9:9e:f4:
65:bf:49:d1:15:0e:6a:9f:ec:a5:b3:f0:e8:21:40:
d7:ef:fc:16:55:cc:d9:24:b8:47:5c:ce:26:bd:c2:
bc:92:e1:a2:fb:7c:b2:d6:d3:58:f7:14:04:d0:46:
6a:ca:40:af:12:41:27:50:e9:02:d2:46:ce:d6:69:
64:fa:15:1c:8e:be:9b:eb:73:20:eb:e7:8d:b9:4c:
bf:e1:d9:31:d6:49:f9:11:cb:e3:0a:92:ae:24:ce:
d6:49:cb:14:1b:5a:08:98:70:92:12:f5:6d:b8:a4:
58:65:73:a6:8e:9f:de:32:4a:30:b1:ab:bb:f7:5c:
0c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DC:A7:D3:C7:23:17:6E:E0:A5:38:D0:0B:EE:3C:4E:D6:5B:62:79
X509v3 Authority Key Identifier:
keyid:47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:40:b4:a1:f4:b7:d1:94:cd:44:4d:81:a2:44:76:09:e3:3f:
dc:ed:85:fb:99:72:ab:c3:9f:be:ba:6c:93:1a:b8:da:2d:90:
60:e7:e8:4d:3f:f4:fa:c1:0b:5b:10:a6:6c:6b:99:20:f1:ec:
a6:65:a4:a1:15:d2:53:bd:54:d7:da:70:2c:22:44:61:b4:5c:
ba:af:c3:b9:11:36:27:0f:85:79:8b:e0:cc:5f:60:ea:56:ae:
d7:46:ae:ac:3d:fe:b7:09:01:d4:cf:8c:8f:26:a4:bb:ab:23:
97:fd:86:b3:fd:f9:46:43:79:d9:fd:f7:bb:3c:dc:99:6f:59:
0c:b7:67:9e:b1:f3:22:7c:fd:fc:45:fd:8b:e6:a0:f4:6f:8b:
96:60:6a:79:b4:d5:41:d6:ac:f0:20:0b:e6:aa:4c:40:7b:d1:
43:2a:7f:a3:56:4a:79:f5:67:83:ad:ee:f6:39:ba:1a:ba:89:
df:ec:be:d5:40:96:16:e6:e3:02:9b:ef:94:64:53:f4:3a:75:
8e:56:ab:0a:a9:ae:51:c6:02:da:88:6b:b1:60:bc:6b:b3:30:
af:22:39:5e:54:8e:99:53:42:fe:92:d8:fc:2c:39:fe:15:05:
f6:54:ce:4a:be:89:87:1a:0c:25:29:63:83:4b:11:57:27:c0:
cd:4a:be:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICElYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI2MDAxMTAvBgNVBAUTKDQ3N0UyMkUxQkQzQUQ1MjA0RTNBREMyREVDRDZEMkEx
OTRBQ0ZBNTgwHhcNMjYwNzIyMTQ0ODEwWhcNMjYwNzI5MTQ0ODEwWjAYMRYwFAYD
VQQDEw02YTYwZDgyYS0zM2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6MAZ2vjhaEcuIgZXFISW/0d3zhyHmzq9jJW1ms6HA+nKMipiS9IZiNgsBkG6
DHmUqkSi3lkX9jzbizYEB3gubq6zRv4hT6nRq4ACdllRUvADmoUbuCToQRDytCTb
zOkKycaa+Or8m+tR9jTSzoqkhgkzG91wBBtRtMQECYrdbo4OXSjZnvRlv0nRFQ5q
n+yls/DoIUDX7/wWVczZJLhHXM4mvcK8kuGi+3yy1tNY9xQE0EZqykCvEkEnUOkC
0kbO1mlk+hUcjr6b63Mg6+eNuUy/4dkx1kn5EcvjCpKuJM7WScsUG1oImHCSEvVt
uKRYZXOmjp/eMkowsau791wM0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBHcp9PH
Ixdu4KU40AvuPE7WW2J5MB8GA1UdIwQYMBaAFEd+IuG9OtUgTjrcLezW0qGUrPpY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC8zQjA2RjMwNjA0
MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFTQk9PdHd0N05iU29aU3Mt
bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1IzNGk0YjA2MVNCT090d3Q3TmJTb1pTcy1sZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjYwMC8zQjA2RjMwNjA0MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFT
Qk9PdHd0N05iU29aU3MtbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP0C0ofS30ZTNRE2BokR2CeM/3O2F+5lyq8Ofvrpskxq42i2QYOfoTT/0+sEL
WxCmbGuZIPHspmWkoRXSU71U19pwLCJEYbRcuq/DuRE2Jw+FeYvgzF9g6lau10au
rD3+twkB1M+Mjyaku6sjl/2Gs/35RkN52f33uzzcmW9ZDLdnnrHzInz9/EX9i+ag
9G+LlmBqebTVQdas8CAL5qpMQHvRQyp/o1ZKefVng63u9jm6GrqJ3+y+1UCWFubj
ApvvlGRT9Dp1jlarCqmuUcYC2ohrsWC8a7MwryI5XlSOmVNC/pLY/Cw5/hUF9lTO
Sr6JhxoMJSljg0sRVyfAzUq++w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:13 2026 by rpki-client