
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
File: 34Jss7t6i7KhHuS64uCH6sOnIdI.mft (raw, json)
Hash identifier: tqbW94Pp6P3gahnTu7W+y67GlKDjoQMz4himNipT/RI=
Subject key identifier: 21:88:4C:DB:FE:14:E0:CE:34:97:95:48:08:33:D1:CE:40:1C:3F:5E
Authority key identifier: DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2
Certificate issuer: /CN=A91162DE/serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
Certificate serial: 0380
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
Manifest number: 036F
Signing time: Sun 11 Oct 2026 00:57:38 +0000
Manifest this update: Sun 11 Oct 2026 00:57:37 +0000
Manifest next update: Sun 18 Oct 2026 00:57:37 +0000
Files and hashes: 1: 34Jss7t6i7KhHuS64uCH6sOnIdI.crl (hash: 5aGxfV8y05Us0KqO/y/K9g5ZGW8Ko42sfPVxsVw7nIg=)
2: C303879E415111EDBC3A1D19C4F9AE02.roa (hash: 58vbGjKlm1aS70N+ZzmopHs0h7/AfWGUiy5pRV43b5Y=)
3: 7C754058415411ED8133414DC4F9AE02.roa (hash: 3NZIaXm/Fuu5xqcOIyakB97VoyqSD45XgTx1AB8MEJ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl
rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 00:57:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896 (0x380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91162DE, serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
Validity
Not Before: Oct 11 00:57:37 2026 GMT
Not After : Oct 18 00:57:37 2026 GMT
Subject: CN=6acadf01-f8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b6:18:68:98:92:03:a4:62:e5:57:94:46:20:
b1:88:fc:9c:02:85:90:44:3e:8a:1b:4b:d9:fe:aa:
2e:f1:71:27:27:99:4a:65:c4:0b:85:17:21:ba:21:
08:ac:58:9b:7b:38:a4:27:94:b6:17:27:ed:22:f3:
6e:c6:d9:df:1b:a8:58:13:a1:62:ab:da:67:d1:0b:
40:c9:dc:09:db:ac:67:dd:d3:49:0c:7c:de:e0:f1:
10:17:06:ea:ae:d8:99:aa:98:65:11:52:f6:92:53:
a6:dd:56:23:eb:ee:7f:60:86:23:1c:06:1b:b7:de:
e8:09:5f:7d:d8:98:b8:08:da:05:46:9a:0e:5e:88:
52:e5:7d:9e:74:d7:2a:a7:0d:81:02:f9:45:84:60:
63:86:49:9e:a2:78:45:5b:d4:a9:c7:0c:b2:16:8c:
9a:28:b5:fd:c4:54:f1:7d:13:95:99:d8:76:65:09:
0e:8e:e8:a7:15:11:98:5f:b8:d6:b3:08:d0:a7:9a:
05:15:61:a0:05:83:33:20:09:42:08:c4:49:53:fa:
7f:29:33:14:94:dc:dd:1e:9b:ba:c6:ac:c0:e8:b3:
0f:d3:a6:a3:53:49:0b:22:a7:b8:a1:9f:f5:76:90:
3b:2f:6a:78:c2:f5:cb:9d:1d:5b:17:4c:24:a8:4d:
07:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:88:4C:DB:FE:14:E0:CE:34:97:95:48:08:33:D1:CE:40:1C:3F:5E
X509v3 Authority Key Identifier:
keyid:DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4d:ea:1d:d7:89:1a:3e:cf:8b:7c:8b:66:f2:14:6e:09:f2:
e9:d5:a2:ba:fc:8a:e9:4a:8b:9f:bb:ad:27:c7:6c:04:40:56:
49:a9:b7:1e:89:0a:d0:2d:f5:62:4a:25:75:5a:dc:44:bd:e7:
c0:a7:95:7c:73:9c:9a:1a:1d:f5:a0:d8:79:01:ef:bf:a9:2b:
44:96:ad:18:04:8c:9b:1e:82:89:4b:55:bf:ce:6f:fc:d4:bb:
61:8f:ce:1c:d8:02:12:41:d6:78:ef:26:e6:e8:1f:a5:76:03:
ea:c9:c5:5a:15:66:3b:99:c7:62:15:52:05:68:ab:35:cd:fc:
65:73:7e:03:1e:13:07:44:37:00:59:4a:16:b3:69:a1:3f:93:
1c:af:fa:90:fd:7b:71:f5:2d:81:0e:e1:1a:02:d8:d4:d8:f0:
4a:26:62:d9:32:c6:74:ec:4b:fa:67:ea:f5:ee:2d:08:de:eb:
2d:2a:0e:ea:58:6a:ca:9c:7e:b6:55:f7:07:0b:93:88:90:11:
18:ea:07:59:2e:bc:c7:5c:ec:f7:d9:81:db:52:17:ca:6b:6d:
a1:f9:19:cf:da:bf:75:f6:2e:d3:15:ba:c3:e1:79:5a:64:e7:
23:56:06:f6:5f:0a:42:ca:a6:d5:b9:37:0a:5b:ab:38:1c:fc:
38:7c:0a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:52:54 2026 by rpki-client