
$ rpki-client -vvf rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
File: 34Jss7t6i7KhHuS64uCH6sOnIdI.mft (raw, json)
Hash identifier: OdnoC95KlMwAgYmWqQEjTp4M4oSEVtdGlGHbOs4BUAo=
Subject key identifier: F0:7C:41:48:00:E4:1D:33:C3:79:7D:80:F0:9D:9F:38:6E:9B:FA:F6
Authority key identifier: DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2
Certificate issuer: /CN=A91162DE/serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
Certificate serial: 034B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
Manifest number: 033C
Signing time: Tue 07 Jul 2026 01:48:20 +0000
Manifest this update: Tue 07 Jul 2026 01:48:19 +0000
Manifest next update: Tue 14 Jul 2026 01:48:19 +0000
Files and hashes: 1: 34Jss7t6i7KhHuS64uCH6sOnIdI.crl (hash: DIIK1q5RcHn2DU0fpFxLxWZWbQLgy2bzm36KlwdMmo8=)
2: C303879E415111EDBC3A1D19C4F9AE02.roa (hash: KnGlEyG5to94pHkynoYZJXGNW9EYXTwet6VMEUfkCuY=)
3: 7C754058415411ED8133414DC4F9AE02.roa (hash: yWFxqgc57Lpty88+MtSZirY1smEBvRoN1cv9SnBzAuw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl
rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 01:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 843 (0x34b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91162DE, serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
Validity
Not Before: Jul 7 01:48:19 2026 GMT
Not After : Jul 14 01:48:19 2026 GMT
Subject: CN=6a4c5ae4-29ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:c4:f2:56:0f:ba:5f:d4:3b:86:51:01:7a:
9b:e2:21:56:d6:3a:05:3b:eb:a3:f7:00:bc:9b:a4:
0c:06:dc:c8:4b:a5:58:8e:51:c6:47:9a:26:0f:d6:
11:8e:1a:62:67:8f:7e:59:71:3e:18:23:02:9c:ed:
a4:ac:f2:0a:84:ee:23:53:94:c8:18:33:3f:79:ce:
f4:45:17:d0:8b:fc:4b:dc:7f:37:6f:6a:92:3a:62:
2b:22:e0:92:1b:f6:f0:34:1a:15:b4:49:cd:79:63:
5f:ae:65:4e:5c:81:71:14:5b:5e:2a:8c:da:b3:9c:
21:e2:e7:a6:04:44:8c:59:80:30:32:73:87:69:57:
78:26:9e:d8:f4:0f:43:a5:2a:98:b6:4b:98:58:7d:
8f:5f:ad:b8:8a:a8:3f:9f:b4:2e:5a:30:95:8a:4b:
03:c3:5c:ba:37:91:4a:6e:36:48:46:fe:da:a1:a9:
9c:1b:55:15:c9:1e:da:3b:df:24:bf:be:3d:b2:cd:
e7:e5:f8:b5:ed:2d:0c:ec:d7:38:dd:2c:5d:e6:88:
43:73:bd:9c:28:98:e5:06:62:aa:68:3d:3a:72:bd:
79:ff:4f:12:6c:15:8b:2c:fb:96:7f:e0:d2:ce:3b:
3a:d7:53:e4:d9:06:87:fe:69:87:cc:bf:ec:1e:71:
ad:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7C:41:48:00:E4:1D:33:C3:79:7D:80:F0:9D:9F:38:6E:9B:FA:F6
X509v3 Authority Key Identifier:
keyid:DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:f3:df:f5:dc:41:1b:50:1c:81:42:1e:fc:3e:d7:c5:65:9a:
e9:ac:4e:e2:c3:5c:69:6d:e7:59:c2:73:ba:40:e4:01:2c:f8:
31:a3:bd:b7:0a:40:b8:87:8e:25:f2:11:eb:97:56:ad:ab:7e:
49:3f:b5:fd:6f:b7:bc:a9:97:3a:7b:92:2e:66:9c:e3:66:d5:
0a:c7:de:cd:fe:85:33:6a:56:de:b1:83:c5:ef:26:8d:ca:66:
3c:4b:3e:38:56:b4:69:4f:6d:65:2d:9c:28:71:1f:21:c4:e2:
ca:44:cb:b5:76:d8:90:45:4a:1c:38:42:39:bd:59:d5:11:ee:
8f:12:c4:29:da:89:47:d8:a7:9e:99:3f:69:39:c3:2e:7e:a0:
b2:e0:53:f4:46:ec:ce:10:8a:ac:78:dd:8c:64:ec:15:66:93:
92:21:85:4a:d4:15:ca:96:5d:07:96:cc:dd:f3:42:2e:e2:91:
a3:2a:61:72:a1:2e:bb:93:96:b3:82:3b:fe:02:42:2c:85:44:
23:14:9a:16:c8:ff:b6:6c:6a:97:c3:72:78:40:c4:e6:ce:13:
d1:39:ed:af:6e:1c:76:90:8b:c5:24:e2:35:63:ae:6d:fa:5d:
b3:82:48:6e:11:8a:db:84:c4:60:b5:2b:43:75:3f:88:07:ee:
81:35:d7:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTYyREUxMTAvBgNVBAUTKERGODI2Q0IzQkI3QThCQjJBMTFFRTRCQUUyRTA4N0VB
QzNBNzIxRDIwHhcNMjYwNzA3MDE0ODE5WhcNMjYwNzE0MDE0ODE5WjAYMRYwFAYD
VQQDEw02YTRjNWFlNC0yOWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsXbE8lYPul/UO4ZRAXqb4iFW1joFO+uj9wC8m6QMBtzIS6VYjlHGR5omD9YR
jhpiZ49+WXE+GCMCnO2krPIKhO4jU5TIGDM/ec70RRfQi/xL3H83b2qSOmIrIuCS
G/bwNBoVtEnNeWNfrmVOXIFxFFteKozas5wh4uemBESMWYAwMnOHaVd4Jp7Y9A9D
pSqYtkuYWH2PX624iqg/n7QuWjCViksDw1y6N5FKbjZIRv7aoamcG1UVyR7aO98k
v749ss3n5fi17S0M7Nc43Sxd5ohDc72cKJjlBmKqaD06cr15/08SbBWLLPuWf+DS
zjs611Pk2QaH/mmHzL/sHnGtswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPB8QUgA
5B0zw3l9gPCdnzhum/r2MB8GA1UdIwQYMBaAFN+CbLO7eouyoR7kuuLgh+rDpyHS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjJERS8xNzY3OTRENDE1
NUExMUVEQjBBMTI3MjBDNEY5QUUwMi8zNEpzczd0Nmk3S2hIdVM2NHVDSDZzT25J
ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzM0SnNzN3Q2aTdLaEh1UzY0dUNINnNPbklkSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjJERS8xNzY3OTRENDE1NUExMUVEQjBBMTI3MjBDNEY5QUUwMi8zNEpzczd0Nmk3
S2hIdVM2NHVDSDZzT25JZEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB/Pf9dxBG1AcgUIe/D7XxWWa6axO4sNcaW3nWcJzukDkASz4MaO9twpAuIeO
JfIR65dWrat+ST+1/W+3vKmXOnuSLmac42bVCsfezf6FM2pW3rGDxe8mjcpmPEs+
OFa0aU9tZS2cKHEfIcTiykTLtXbYkEVKHDhCOb1Z1RHujxLEKdqJR9innpk/aTnD
Ln6gsuBT9EbszhCKrHjdjGTsFWaTkiGFStQVypZdB5bM3fNCLuKRoyphcqEuu5OW
s4I7/gJCLIVEIxSaFsj/tmxql8NyeEDE5s4T0Tntr24cdpCLxSTiNWOubfpds4JI
bhGK24TEYLUrQ3U/iAfugTXXaA==
-----END CERTIFICATE-----
Generated at Tue Jul 7 11:54:50 2026 by rpki-client