
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
File: 34pOYRe8o2iUDWjphUeYuWZgndQ.mft (raw, json)
Hash identifier: PxUSuVrvjWMPg5zm6kyWZaz8TyMufkuJdoytrOHuDrY=
Subject key identifier: CE:83:D5:E9:74:FD:EF:12:B0:34:1A:53:79:1F:92:43:D6:A8:DD:FE
Authority key identifier: DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4
Certificate issuer: /CN=A91C8530/serialNumber=DF8A4E6117BCA368940D68E9854798B966609DD4
Certificate serial: 0974
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
Manifest number: 096A
Signing time: Tue 24 Mar 2026 19:52:39 +0000
Manifest this update: Tue 24 Mar 2026 19:52:39 +0000
Manifest next update: Tue 31 Mar 2026 19:52:39 +0000
Files and hashes: 1: 34pOYRe8o2iUDWjphUeYuWZgndQ.crl (hash: BVXZXjwHzRuPyF/2Eyt1zmLT/T9TG+84gRvEMwdIkzo=)
2: 9BD30C5EB1E711EA86EFFD5EC4F9AE02.roa (hash: ISRaG9a9Sa5mePLF4QeZyjlrv6bwojaMAIwz4H3ynxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.crl
rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:52:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2420 (0x974)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8530, serialNumber=DF8A4E6117BCA368940D68E9854798B966609DD4
Validity
Not Before: Mar 24 19:52:39 2026 GMT
Not After : Mar 31 19:52:39 2026 GMT
Subject: CN=69c2eb87-148d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:41:20:92:26:cf:f6:db:6b:ca:cd:17:be:25:
7e:0a:02:1a:18:1c:6d:c3:93:75:2b:88:77:16:51:
97:31:29:0d:af:4b:07:b6:7f:bb:91:22:83:95:fe:
c3:58:e4:5f:53:28:a6:31:f4:b1:d6:90:08:ff:8c:
f2:59:45:30:20:80:ac:10:44:38:57:f9:c3:07:69:
b7:7c:4f:47:b4:39:b2:41:56:d3:6a:7c:44:85:c9:
c7:e2:63:e0:30:07:21:9b:3a:78:68:5c:9b:e9:ea:
77:4a:70:97:1a:c3:d8:d5:5d:5c:7a:7c:1a:13:3c:
7d:ea:42:e4:10:fd:6a:46:36:7d:f4:90:ee:d7:da:
de:c3:4e:73:3f:d7:9b:00:4d:53:f5:9d:05:c2:1a:
a0:bc:7d:43:b6:c6:6b:40:57:bf:25:61:e2:fc:26:
a8:70:f7:0c:f7:5d:54:27:7c:95:bb:3f:48:82:a0:
8c:f2:34:24:37:ce:6e:1c:41:88:51:14:35:02:2b:
0c:70:aa:21:55:7a:17:1b:4a:df:dd:c7:e2:e6:d0:
71:f9:d0:83:c2:ac:d9:4e:e2:90:0a:08:61:d6:2c:
4c:0b:5b:81:0e:ab:25:20:4b:3d:bd:26:c5:3c:46:
85:8b:9b:ef:ce:5e:de:1e:37:90:23:c2:07:01:3b:
03:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:83:D5:E9:74:FD:EF:12:B0:34:1A:53:79:1F:92:43:D6:A8:DD:FE
X509v3 Authority Key Identifier:
keyid:DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:92:90:ff:54:d6:b9:16:29:34:44:8d:25:9f:c4:0c:e8:5c:
39:03:88:49:69:5e:48:dc:21:1d:15:6f:8f:ce:e5:84:27:f7:
d6:be:3a:0e:28:0e:b0:dd:d0:66:c3:5d:ed:0a:85:e9:69:be:
68:45:76:46:e2:c4:bc:fc:69:ca:de:5f:58:e3:8d:2d:4e:3a:
22:11:2e:86:04:17:cf:55:8e:82:23:78:59:5a:99:d2:1a:cb:
95:3e:55:a1:d0:5c:8c:57:2a:cd:f4:da:a8:46:8a:8d:16:49:
00:e9:10:76:95:49:e3:e0:57:12:dc:53:a4:0f:97:00:e5:05:
54:06:ec:f1:cc:51:12:f9:0a:4b:b1:84:5c:38:04:13:5f:b5:
69:d1:5c:63:3e:a4:27:05:68:e6:67:b8:da:e8:49:ae:d6:81:
e6:44:6c:c2:ba:f4:2e:fb:09:98:24:02:31:30:2d:bd:6c:55:
cd:7d:6f:3c:ee:42:dd:18:89:35:e2:76:29:9b:b1:11:8b:c5:
f2:b1:7d:5b:f4:04:cc:f2:42:4e:37:7e:d0:a4:ed:98:56:b8:
5a:c5:6c:ab:66:e4:85:d2:f4:da:50:c4:46:ae:f1:6a:21:15:
0b:ec:31:c0:22:19:30:45:26:13:5f:91:da:e7:a5:04:6e:ba:
07:0e:40:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzg1MzAxMTAvBgNVBAUTKERGOEE0RTYxMTdCQ0EzNjg5NDBENjhFOTg1NDc5OEI5
NjY2MDlERDQwHhcNMjYwMzI0MTk1MjM5WhcNMjYwMzMxMTk1MjM5WjAYMRYwFAYD
VQQDEw02OWMyZWI4Ny0xNDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnUEgkibP9ttrys0XviV+CgIaGBxtw5N1K4h3FlGXMSkNr0sHtn+7kSKDlf7D
WORfUyimMfSx1pAI/4zyWUUwIICsEEQ4V/nDB2m3fE9HtDmyQVbTanxEhcnH4mPg
MAchmzp4aFyb6ep3SnCXGsPY1V1cenwaEzx96kLkEP1qRjZ99JDu19rew05zP9eb
AE1T9Z0FwhqgvH1DtsZrQFe/JWHi/CaocPcM911UJ3yVuz9IgqCM8jQkN85uHEGI
URQ1AisMcKohVXoXG0rf3cfi5tBx+dCDwqzZTuKQCghh1ixMC1uBDqslIEs9vSbF
PEaFi5vvzl7eHjeQI8IHATsDTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM6D1el0
/e8SsDQaU3kfkkPWqN3+MB8GA1UdIwQYMBaAFN+KTmEXvKNolA1o6YVHmLlmYJ3U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODUzMC8xOEY2NkQ4NkIx
RTYxMUVBQUE5MTMzNUFDNEY5QUUwMi8zNHBPWVJlOG8yaVVEV2pwaFVlWXVXWmdu
ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzM0cE9ZUmU4bzJpVURXanBoVWVZdVdaZ25kUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
ODUzMC8xOEY2NkQ4NkIxRTYxMUVBQUE5MTMzNUFDNEY5QUUwMi8zNHBPWVJlOG8y
aVVEV2pwaFVlWXVXWmduZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFpKQ/1TWuRYpNESNJZ/EDOhcOQOISWleSNwhHRVvj87lhCf31r46DigOsN3Q
ZsNd7QqF6Wm+aEV2RuLEvPxpyt5fWOONLU46IhEuhgQXz1WOgiN4WVqZ0hrLlT5V
odBcjFcqzfTaqEaKjRZJAOkQdpVJ4+BXEtxTpA+XAOUFVAbs8cxREvkKS7GEXDgE
E1+1adFcYz6kJwVo5me42uhJrtaB5kRswrr0LvsJmCQCMTAtvWxVzX1vPO5C3RiJ
NeJ2KZuxEYvF8rF9W/QEzPJCTjd+0KTtmFa4WsVsq2bkhdL02lDERq7xaiEVC+wx
wCIZMEUmE1+R2uelBG66Bw5AdA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:32 2026 by rpki-client