
$ rpki-client -vvf rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
File: fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft (raw, json)
Hash identifier: /3t/hFwOyWC3sGiTjg73doy+IXkWyxw0gYoBza6BOvM=
Subject key identifier: 67:35:4D:3B:F9:24:08:98:F0:7F:F6:46:D1:81:49:5E:87:F4:1A:36
Authority key identifier: 7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08
Certificate issuer: /CN=A913ED35/serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608
Certificate serial: 35A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
Manifest number: 3559
Signing time: Sat 04 Apr 2026 14:47:09 +0000
Manifest this update: Sat 04 Apr 2026 14:47:09 +0000
Manifest next update: Sat 11 Apr 2026 14:47:09 +0000
Files and hashes: 1: fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl (hash: 6gYyXsLJMZqMnx7jLjmxxbBDCS7+wsZOBP+EmFjoI30=)
2: B34FF580C40C11EB9C21CF7BC4F9AE02.roa (hash: sMVM7zjChouZ/zKMndyZ4mwotxlwIoXBJqwxs0PySGc=)
3: 0D47881A9EB311EC90138473C4F9AE02.roa (hash: UcLtnXSONRE5QZnvIErqGBFx65gWWioUulACNYJ23YE=)
4: C5859C724D7611EFBA188667C4F9AE02.roa (hash: /Wjn8/7TqXyccH0pwR3Hv+PIkhD00tL7mCG65vUT4Ns=)
5: E652AA52C40911EBA930053BC4F9AE02.roa (hash: sEb1EJmWVcSgKGVkUz52jLxfQvAvzd6VdzWj6R//XeM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl
rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13734 (0x35a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913ED35, serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608
Validity
Not Before: Apr 4 14:47:09 2026 GMT
Not After : Apr 11 14:47:09 2026 GMT
Subject: CN=69d1246d-2650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:4f:bb:52:8f:8b:2b:84:dd:8e:c0:ab:59:3a:
8d:82:17:02:f1:ad:bd:42:ce:62:c4:03:ed:0c:96:
9e:21:8b:c0:72:45:69:cb:75:d2:ce:c7:cd:1f:91:
c3:87:71:02:02:f3:4f:5b:a8:f7:e8:fc:a4:e9:1b:
47:26:74:9d:48:cc:68:ca:40:8c:a8:e8:09:10:0e:
b1:75:fa:2c:6e:a6:c2:0e:03:68:94:ff:2a:ff:5f:
64:f3:18:c5:c5:fc:3c:28:1b:c6:a1:ec:82:b6:2d:
52:cb:e3:65:f7:95:69:5e:cf:ea:3a:f6:9c:06:f4:
c4:c4:96:6a:b6:f2:ad:15:6a:5d:ba:75:bf:ab:4b:
13:20:34:53:d9:aa:e1:bc:08:42:36:b9:8a:9d:81:
d2:77:22:7b:6a:a6:b3:b4:a4:e5:9b:81:1e:9b:cd:
15:4e:2b:6f:ba:ed:45:ac:d3:48:56:00:f5:12:4c:
23:14:a6:9b:59:21:ec:c4:7a:e7:a7:07:93:b8:bc:
4d:92:a4:97:e6:c2:9c:56:a1:e3:b7:d7:da:86:0c:
b1:4d:b6:29:50:48:a4:ab:5c:20:08:4b:45:bb:21:
a1:93:6c:a3:83:d2:4e:46:48:07:ab:f0:a9:ea:5f:
51:1a:e4:6f:2b:96:36:0c:7b:7e:dc:5b:d6:ef:ce:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:35:4D:3B:F9:24:08:98:F0:7F:F6:46:D1:81:49:5E:87:F4:1A:36
X509v3 Authority Key Identifier:
keyid:7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:14:d9:95:e3:e7:53:ab:fb:85:b2:b1:fa:d9:43:2f:f5:93:
06:54:88:88:eb:92:2d:f8:c3:51:35:44:64:0b:fa:e6:3a:61:
16:9c:1e:e4:2d:34:0b:09:c8:79:90:97:5a:31:84:18:fc:1c:
db:82:22:bc:44:e6:02:ed:bb:4d:23:dd:d3:f7:cb:c7:f2:8f:
da:28:1d:1e:8b:e6:71:7d:0b:56:f2:e0:cc:d5:d5:6f:e3:2b:
91:82:55:53:e4:5d:2b:05:a1:c3:06:46:d8:90:35:1c:5a:cf:
d4:68:55:87:26:34:a1:55:27:d7:f8:8a:31:80:0b:36:91:8e:
02:28:ca:cd:5a:6b:79:c5:14:0c:6d:95:f6:08:97:e4:b5:c3:
42:3b:79:65:df:ae:7e:3f:8c:87:4a:92:f9:0b:4e:e2:4e:c1:
47:67:f6:e0:ec:50:6a:35:00:66:1d:60:71:93:dc:25:54:89:
c3:85:d0:03:e0:0b:46:94:26:f2:39:c2:25:56:92:2b:31:a7:
a2:b1:8a:a0:c5:91:8a:7b:7e:a3:3f:e4:ea:d5:1c:85:53:c0:
a0:0b:df:92:b3:42:7b:bf:2d:3c:03:15:04:f4:c5:a9:ea:7e:
74:3e:31:a7:86:bb:77:58:07:dd:66:29:92:21:fb:ba:f7:e8:
84:b0:f3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 01:31:42 2026 by rpki-client