
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft
File: R34i4b061SBOOtwt7NbSoZSs-lg.mft (raw, json)
Hash identifier: gMQPRKRiF/V/AyBycBYdu6SI2O2LyEwW1Kx9Mt5IfCg=
Subject key identifier: 91:02:CF:AD:1E:F2:C6:B1:9B:DE:C9:B6:30:F7:C7:0F:D2:AB:AE:6B
Authority key identifier: 47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58
Certificate issuer: /CN=A912B600/serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58
Certificate serial: 1255
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft
Manifest number: 1248
Signing time: Mon 20 Jul 2026 14:48:01 +0000
Manifest this update: Mon 20 Jul 2026 14:48:00 +0000
Manifest next update: Mon 27 Jul 2026 14:48:00 +0000
Files and hashes: 1: R34i4b061SBOOtwt7NbSoZSs-lg.crl (hash: v9huj6F8ULjGODiJ0K4ebQYV6mO6GWmCYKJH0+eSYlo=)
2: 6C510F98B51C11EAA1649251C4F9AE02.roa (hash: FFjxfnMou/98tB5BNVIfzefmsUkfNyGwBbqp5Be3Rjg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl
rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4693 (0x1255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B600, serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58
Validity
Not Before: Jul 20 14:48:00 2026 GMT
Not After : Jul 27 14:48:00 2026 GMT
Subject: CN=6a5e3520-6cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:12:6b:be:bc:68:c0:de:76:06:71:25:48:
ae:8d:f2:9b:f3:bf:a5:d6:8c:cf:f2:cf:fe:1b:59:
00:15:53:d3:81:22:52:d0:4d:38:56:56:96:5e:ea:
6d:0b:c2:1b:eb:2a:18:11:5d:52:41:10:b2:4f:0a:
d6:2b:9c:f5:a6:94:6f:a3:16:4b:f9:a8:c9:74:5c:
0c:6a:40:c8:bf:a7:8d:24:3a:88:af:5e:c3:90:49:
4a:cd:eb:58:07:b6:b4:d7:53:0e:09:6e:f6:95:90:
49:54:87:0e:29:bb:7c:4c:5e:4a:f3:b1:67:51:6a:
bf:8e:f9:5e:36:a4:ee:f5:05:64:e4:93:71:20:82:
ec:b0:36:47:7c:c2:8c:45:c4:fb:e0:8a:60:45:83:
4f:d6:77:f9:f2:23:97:ad:a4:54:d0:00:5d:c8:3d:
11:cc:57:77:d0:0a:c9:5d:4b:cc:a4:8c:d9:6c:99:
8e:5f:d9:2a:f8:4c:9f:ad:42:94:44:5a:c5:11:e5:
3e:1a:ac:b7:12:13:73:0b:62:25:fb:8f:a6:a5:a9:
62:1f:e2:b9:13:b4:de:b4:18:02:39:0a:69:78:5d:
21:02:2d:cc:bf:b5:9d:a8:84:cf:dc:42:78:68:c4:
7e:8e:d3:f2:de:f1:a0:12:0b:57:0c:91:82:0d:96:
61:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:02:CF:AD:1E:F2:C6:B1:9B:DE:C9:B6:30:F7:C7:0F:D2:AB:AE:6B
X509v3 Authority Key Identifier:
keyid:47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:08:48:e5:52:c9:4f:5d:56:75:b5:29:df:39:b9:17:10:8b:
2b:de:8a:7a:58:80:c0:fd:71:4d:d5:36:b0:93:dd:52:be:ef:
3d:1c:49:37:51:66:73:67:9e:8d:b5:3d:89:e0:ec:28:1b:77:
e0:2f:e6:8a:c8:19:8c:bf:ec:e9:7c:7c:97:a6:96:52:65:75:
ea:07:c7:fd:78:24:75:f1:64:a2:1f:c0:7d:c6:e6:19:23:fd:
00:4e:e3:15:a9:7b:1c:4a:1e:cc:3d:19:de:a2:cd:64:f1:ff:
f6:17:94:82:be:d7:a0:aa:f6:88:78:99:a0:27:23:c8:21:1b:
20:63:cb:ac:49:ef:fe:97:42:97:ca:f9:b1:c1:24:3e:28:62:
2b:ae:cf:5e:eb:61:e9:98:65:fb:ec:99:05:1c:18:96:4b:9d:
4c:60:d8:53:51:b9:9f:62:80:ec:3b:54:a4:e7:68:8f:74:3d:
92:87:e1:47:8e:e6:6f:2d:c5:f5:c8:16:fa:a1:c7:a4:8d:cd:
76:14:cf:85:a9:b3:6f:16:95:11:92:ba:c1:13:84:15:54:99:
f5:2e:2a:6f:ff:42:ac:d0:2c:e2:a0:c1:bf:b9:a6:96:2a:d2:
dd:2f:53:f9:07:05:ef:0f:a4:ff:ee:43:cc:a4:06:aa:6e:1d:
34:6c:24:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:50:34 2026 by rpki-client