
$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
File: b35Y0Iljiffn_k6HlapVXVxVUYg.mft (raw, json)
Hash identifier: i+X6FH574XpKG44g0ZhnmxP4x3slQRqWyXouSSS7iMo=
Subject key identifier: F2:6C:BF:9B:F3:37:A8:3E:B6:A0:B9:64:00:96:40:61:E2:A0:76:FD
Authority key identifier: 6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88
Certificate issuer: /CN=A91706E4/serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188
Certificate serial: 0127
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
Manifest number: 0123
Signing time: Mon 01 Jun 2026 06:31:38 +0000
Manifest this update: Mon 01 Jun 2026 06:31:37 +0000
Manifest next update: Mon 08 Jun 2026 06:31:37 +0000
Files and hashes: 1: b35Y0Iljiffn_k6HlapVXVxVUYg.crl (hash: Ff53dOYCP3pVcK5K05B7Xq2uC7gA9sLjYv/1OaYnPVQ=)
2: 31E9AEC6E30411EFBC0C3B2CC4F9AE02.roa (hash: uV8rFDqMxRMdCRvkDEsV2MUMii9vsIlS/hRAm+P4Yu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl
rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91706E4, serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188
Validity
Not Before: Jun 1 06:31:37 2026 GMT
Not After : Jun 8 06:31:37 2026 GMT
Subject: CN=6a1d2749-627a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:90:8b:a5:cb:5f:57:86:af:74:df:08:2b:56:
96:49:57:48:9d:69:9c:29:34:10:5f:4a:b8:f4:31:
ab:11:3a:52:11:97:8e:99:10:bd:ec:f7:b5:dd:90:
31:f7:0d:40:94:41:91:22:69:91:41:36:84:8e:88:
2a:62:a0:15:cc:04:af:b7:7c:bc:95:6d:93:4a:a7:
1f:1d:00:4c:ec:63:63:9a:d4:aa:46:28:2d:08:e5:
dd:a1:42:6c:47:f7:89:c0:13:a7:bf:1b:5a:30:c3:
ec:1e:dd:92:5d:45:55:54:aa:ad:9b:1a:0d:b8:d5:
2f:69:1b:73:76:8c:86:ff:44:65:2d:b4:28:d9:c1:
2b:bd:c7:e2:10:0c:71:b7:cd:2c:62:bd:a6:1d:f2:
2f:8c:76:a9:f7:be:7a:98:2a:72:32:eb:29:e7:1e:
45:bc:bc:3f:d3:ff:a2:ea:b4:60:bb:87:e0:47:eb:
d9:a1:f7:29:63:b8:1b:3f:99:c5:0c:78:89:ab:9b:
ba:15:e6:1a:bc:c2:62:aa:41:9d:e3:46:0e:20:bc:
bc:01:6d:5c:92:21:81:0e:c8:ef:e3:78:48:bc:8a:
e0:c5:d4:4c:5d:e1:e4:99:10:e7:47:8b:4d:b6:93:
d2:c2:03:f9:ba:7c:14:af:15:86:7e:fc:3d:aa:f3:
bd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6C:BF:9B:F3:37:A8:3E:B6:A0:B9:64:00:96:40:61:E2:A0:76:FD
X509v3 Authority Key Identifier:
keyid:6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c2:14:8c:77:58:0f:62:e5:07:ad:9c:84:a9:81:29:6f:39:
6b:2d:48:ad:b2:21:af:f8:6d:2f:90:d0:03:f5:b8:2d:06:66:
35:86:5e:db:44:67:88:43:85:71:b6:53:b9:70:eb:13:09:8b:
40:58:4b:32:c7:e2:aa:d8:45:53:36:6c:d8:12:d8:b6:e2:38:
0a:b7:91:1f:1f:11:45:cb:7d:0c:04:e4:a7:c6:1a:71:04:f8:
ba:16:8a:af:ca:e8:52:8d:15:19:df:9c:bb:a9:e5:bd:15:82:
a8:d9:62:ce:d8:f2:35:87:1b:96:17:c4:eb:81:93:bd:8c:bb:
54:74:d4:20:11:aa:ee:6b:7d:a6:09:b2:13:d1:88:6b:8d:f6:
20:8b:62:d8:0e:49:61:a3:06:1f:91:24:52:4c:71:20:fc:0c:
6d:c9:85:33:b2:dd:54:1f:4a:5e:4f:43:2b:6b:98:b9:ed:88:
40:78:18:46:76:26:3c:e6:4a:f3:3f:40:e0:9d:af:36:f9:af:
0b:2b:36:b9:88:2c:de:d2:9c:ce:64:ac:ea:1d:0d:74:59:c4:
3e:f9:03:fd:87:ab:df:1b:73:8e:b0:57:24:a1:bc:03:f1:08:
8d:cf:df:ad:b7:47:fe:42:71:9b:d6:4b:51:7d:c1:14:ed:a2:
8e:74:3b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:22 2026 by rpki-client