
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
File: 34pOYRe8o2iUDWjphUeYuWZgndQ.mft (raw, json)
Hash identifier: TdBGlesswaOGqfRdPFQL0tSRNLBxzghg+6arSINqOrk=
Subject key identifier: 3B:40:67:95:CA:82:67:EC:A9:0B:8C:77:50:0E:C0:DF:7A:75:C8:D0
Authority key identifier: DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4
Certificate issuer: /CN=A91C8530/serialNumber=DF8A4E6117BCA368940D68E9854798B966609DD4
Certificate serial: 09D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
Manifest number: 09C9
Signing time: Tue 22 Sep 2026 19:43:39 +0000
Manifest this update: Tue 22 Sep 2026 19:43:39 +0000
Manifest next update: Tue 29 Sep 2026 19:43:39 +0000
Files and hashes: 1: 34pOYRe8o2iUDWjphUeYuWZgndQ.crl (hash: CJMHt+MEkgoaqyNlF8TZZyUH7ZCTIrJ6Hm6V53qilRU=)
2: 9BD30C5EB1E711EA86EFFD5EC4F9AE02.roa (hash: gUZ5KM8AqgTVECxg/OBb4oxOhMvuse7V54QYYUpmz54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.crl
rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2516 (0x9d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8530, serialNumber=DF8A4E6117BCA368940D68E9854798B966609DD4
Validity
Not Before: Sep 22 19:43:39 2026 GMT
Not After : Sep 29 19:43:39 2026 GMT
Subject: CN=6ab2da6b-6ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:37:07:37:24:78:d8:c6:93:4c:be:37:a7:38:
09:d1:28:85:04:cb:91:96:3c:2c:62:b6:88:39:bf:
27:10:c1:17:84:bb:f6:8d:29:25:66:42:6f:ae:3e:
57:26:69:d0:e9:0b:e0:61:d6:a2:7f:8d:48:bf:b5:
56:f5:4e:bf:56:6b:90:fd:60:0d:65:0e:5a:d6:ce:
dd:db:9b:45:a3:f2:07:9f:b7:49:21:5e:4a:1a:b9:
79:ce:4c:76:ee:e1:2a:6b:5b:23:c0:f3:d6:62:d0:
85:be:f4:3b:e0:31:9d:88:c6:3b:c5:5a:2d:11:16:
cc:76:1b:57:25:af:1a:73:2a:73:44:6f:91:b6:f2:
66:77:9e:31:d8:76:04:06:a1:46:59:f2:aa:e3:2a:
f0:30:b2:e9:25:75:58:01:a5:06:86:dc:81:1a:7c:
89:af:8f:a2:ec:e7:0b:34:9d:da:05:71:82:15:9e:
f7:e8:78:cf:f3:0f:c0:68:92:fa:13:c2:1c:db:dc:
4c:ca:cd:ca:3a:91:04:ed:b4:09:cc:3b:a4:1a:e9:
39:5c:d2:79:3c:94:61:81:a7:0e:f6:6b:d7:cb:b7:
d3:68:eb:98:e9:b2:36:43:81:57:6f:48:94:5c:26:
06:db:2b:24:8e:11:0d:70:da:91:7a:0e:20:c8:57:
38:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:40:67:95:CA:82:67:EC:A9:0B:8C:77:50:0E:C0:DF:7A:75:C8:D0
X509v3 Authority Key Identifier:
keyid:DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:59:ed:3e:1a:ad:e6:a0:1c:cf:95:95:04:58:14:18:8b:45:
90:88:91:d2:e5:b4:2d:ea:30:48:2f:cc:35:71:c3:76:c6:3b:
3c:4b:0e:a5:78:4f:e6:a3:fe:e9:0d:c3:46:1f:7e:ca:ca:b2:
0c:16:99:cf:44:9c:dd:8c:d4:79:57:77:ff:e1:36:7e:32:5c:
33:97:7a:bd:c2:ba:80:46:5e:14:79:0c:2a:e1:e1:7f:a3:1f:
25:e8:af:2a:19:38:05:1f:64:c0:24:cf:91:d8:c2:25:19:2d:
2c:9e:a2:0b:b9:d4:c4:4b:9a:e0:6b:ae:a1:d7:be:d5:17:16:
1e:79:5c:5e:de:30:c6:0a:80:0d:01:9f:9a:a6:9a:d2:5d:40:
89:19:1d:5d:26:e9:30:fc:af:e3:9f:06:c3:0c:f2:d6:a3:d2:
91:9b:a0:98:f8:33:f2:25:e9:81:01:ab:8f:8a:3b:41:5c:ac:
33:c2:83:2d:c5:02:87:04:3d:40:06:9b:2a:0b:9b:f5:da:22:
02:0c:77:f5:f1:cd:75:85:b2:14:b5:9f:9e:b0:12:cc:57:aa:
71:d7:e4:fe:7d:e1:04:49:d0:b7:54:3a:52:b6:b7:8d:5e:4b:
6f:0e:3f:35:a9:27:9a:c8:45:e0:2d:80:f8:a9:55:1c:89:ee:
1a:c8:f6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:18:51 2026 by rpki-client