
$ rpki-client -vvf rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
File: 34Jss7t6i7KhHuS64uCH6sOnIdI.mft (raw, json)
Hash identifier: DvQUL2F6W2TcWNt9btIowX8Tqp7cxqNz+5KIOv5w/gQ=
Subject key identifier: 38:68:41:CA:02:16:5F:5A:E4:F7:AE:58:16:22:DF:BF:C6:1C:E4:ED
Authority key identifier: DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2
Certificate issuer: /CN=A91162DE/serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
Certificate serial: 031C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
Manifest number: 030D
Signing time: Sun 05 Apr 2026 00:59:30 +0000
Manifest this update: Sun 05 Apr 2026 00:59:30 +0000
Manifest next update: Sun 12 Apr 2026 00:59:30 +0000
Files and hashes: 1: 34Jss7t6i7KhHuS64uCH6sOnIdI.crl (hash: dyRPlrcM05NfWQeH1A4dJLxT2lcNHLy1fEmEO2h5ej8=)
2: 7C754058415411ED8133414DC4F9AE02.roa (hash: yWFxqgc57Lpty88+MtSZirY1smEBvRoN1cv9SnBzAuw=)
3: C303879E415111EDBC3A1D19C4F9AE02.roa (hash: KnGlEyG5to94pHkynoYZJXGNW9EYXTwet6VMEUfkCuY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl
rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:59:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 796 (0x31c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91162DE, serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
Validity
Not Before: Apr 5 00:59:30 2026 GMT
Not After : Apr 12 00:59:30 2026 GMT
Subject: CN=69d1b3f2-aa19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:3f:24:bf:20:91:62:83:de:59:0a:aa:8c:
f5:19:09:2a:00:6e:2e:b3:98:df:f8:7c:b8:79:97:
d1:0c:48:85:9a:5c:92:8e:c9:cd:28:5b:be:e1:b1:
89:49:bd:eb:f0:25:9a:34:fc:06:d4:4c:dd:f6:30:
2c:a1:c5:85:b4:08:74:af:c6:d6:4d:11:96:9e:85:
49:a1:d1:b4:9d:45:74:23:24:56:df:0d:34:c6:73:
03:28:ae:56:23:c9:38:17:b7:29:de:a4:4e:f5:ba:
45:b8:37:58:48:0a:d0:12:88:ef:7d:80:63:dd:e4:
ae:8c:e3:ec:0a:0a:bd:3e:df:6c:0b:1c:ac:3b:6d:
88:31:b9:a1:9c:6f:37:81:3e:43:e9:fb:ae:83:37:
d4:85:84:44:ad:73:9a:a2:dd:01:e6:9f:26:1a:f9:
e1:39:b4:be:5d:b6:13:4c:2d:33:a8:14:f0:ac:87:
57:f3:fa:5b:87:2d:ba:5d:47:1c:f4:bf:77:db:7e:
81:be:fb:15:a0:94:6d:b8:f2:7e:1d:6d:59:04:17:
e9:1b:c0:de:39:94:16:e5:59:31:15:bc:61:20:4f:
92:2c:c1:bf:98:10:39:83:2d:82:fe:9e:5c:57:9a:
92:a7:45:5f:fd:d9:f3:22:70:1f:ee:c5:4d:3c:1e:
b8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:68:41:CA:02:16:5F:5A:E4:F7:AE:58:16:22:DF:BF:C6:1C:E4:ED
X509v3 Authority Key Identifier:
keyid:DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:d3:b6:7f:73:8b:b7:22:27:4c:1d:48:5b:c2:7a:05:4f:c3:
76:72:d6:8b:76:4d:a6:e1:58:f2:99:c8:e1:ba:c9:87:dc:db:
5a:7b:03:46:3d:d5:27:f7:28:b5:68:a6:ad:d9:7e:7c:3b:31:
44:a2:dd:b6:0c:7b:6d:3c:3c:ef:cd:50:2f:3d:e9:4f:7e:24:
fa:80:78:70:c7:be:77:be:3b:63:78:a0:96:3b:9c:cf:d9:c4:
f9:c5:11:07:2f:82:f2:db:7c:ba:e6:1b:fc:f2:3d:f4:32:28:
ef:86:16:5d:a8:42:e3:0f:d7:69:13:4a:21:c9:97:a5:98:21:
61:7b:a6:a0:b9:b2:f3:e5:c4:c9:c5:18:a0:c3:c3:4f:89:91:
b5:69:89:75:89:b1:14:22:7f:79:f8:7f:1a:0b:06:78:7c:d1:
96:e7:98:10:a6:9c:ee:2c:39:58:8a:d2:f3:cc:55:65:ed:24:
3a:5f:83:67:ae:ed:24:a5:38:30:79:82:4e:3d:75:8e:80:84:
1d:b1:ae:b4:5f:bc:f3:5b:6d:f8:59:e4:cf:78:a1:52:53:18:
bd:fc:b0:98:4b:85:f7:9f:0e:49:12:a3:e5:c6:e8:92:0d:36:
57:6d:26:bf:df:dd:70:75:d8:4e:55:2e:57:ed:b2:85:1e:78:
c4:75:0e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:19 2026 by rpki-client