
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
File: b35Y0Iljiffn_k6HlapVXVxVUYg.mft (raw, json)
Hash identifier: CzkhTrTNMBYxv1SCtRMba9FCl7akB84T18znfTzx2S4=
Subject key identifier: 44:47:4E:04:8B:8C:76:58:AA:12:21:E9:77:43:F1:B9:2B:9A:CC:DB
Authority key identifier: 6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88
Certificate issuer: /CN=A91706E4/serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188
Certificate serial: 015A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
Manifest number: 0156
Signing time: Fri 11 Sep 2026 05:13:56 +0000
Manifest this update: Fri 11 Sep 2026 05:13:55 +0000
Manifest next update: Fri 18 Sep 2026 05:13:55 +0000
Files and hashes: 1: b35Y0Iljiffn_k6HlapVXVxVUYg.crl (hash: Hed57AEfIf9gEI7AvYETMDrro/cXJbLpkaMdMZ2+Gtc=)
2: 31E9AEC6E30411EFBC0C3B2CC4F9AE02.roa (hash: uV8rFDqMxRMdCRvkDEsV2MUMii9vsIlS/hRAm+P4Yu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl
rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 05:13:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91706E4, serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188
Validity
Not Before: Sep 11 05:13:55 2026 GMT
Not After : Sep 18 05:13:55 2026 GMT
Subject: CN=6aa38e14-2e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:af:0f:32:26:e8:11:35:53:b0:4d:21:a8:39:
39:72:6b:ee:3b:d0:54:8f:d0:55:17:16:de:f2:9a:
b2:35:90:47:23:96:ac:59:46:ad:cf:cc:3b:a6:17:
1e:84:90:82:7f:5e:4c:70:2f:8d:c5:ee:7d:f9:08:
d7:fb:ab:73:0e:ce:c4:4e:3e:0c:63:43:1f:71:35:
1d:ae:be:d7:e3:a3:a7:66:13:8a:fe:bf:6f:fc:13:
b8:c2:0a:27:b9:fc:af:1a:23:1e:4c:1b:43:55:ba:
10:a4:4a:ad:6a:19:f3:d6:9b:6f:6b:70:03:02:26:
74:4b:09:3f:5e:7b:b8:7e:e9:26:d3:ce:f7:cf:1d:
49:05:b8:2f:9e:f4:5a:24:be:bf:23:f0:69:6f:43:
ff:05:fe:ad:b2:c4:4a:13:31:04:09:10:07:25:5c:
6e:57:5c:0f:63:b8:dc:08:44:39:38:53:b1:61:fa:
ca:a4:d4:f3:a3:54:4d:96:d9:6b:b1:fb:6e:86:4d:
33:6b:06:8d:af:c7:81:c4:0d:d6:b2:5f:3b:7f:cc:
18:4a:76:49:7e:f8:b0:61:9d:01:67:5c:09:3c:5c:
d2:bc:87:c4:38:21:8e:e7:e6:0a:fa:8b:71:45:2c:
f8:e4:7c:c2:bc:ab:99:56:ea:52:87:58:a0:0b:2e:
ad:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:47:4E:04:8B:8C:76:58:AA:12:21:E9:77:43:F1:B9:2B:9A:CC:DB
X509v3 Authority Key Identifier:
keyid:6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8f:7a:56:48:6f:84:a6:b6:f4:43:bd:ca:fc:9f:15:2e:b3:
10:a6:49:a6:3c:11:36:48:16:97:11:e6:2b:e1:ef:32:8e:e6:
c8:94:d5:87:88:a9:69:73:ba:d7:1e:08:dd:42:f0:a9:6c:95:
75:3b:f8:d1:90:c4:57:9a:3e:17:7d:ce:ff:8d:99:88:6a:76:
a5:ce:7a:4a:e9:a4:56:41:93:5b:04:1e:73:8a:a6:5a:3b:6e:
77:08:2f:37:0e:7b:54:3a:06:57:42:13:12:37:b8:3c:42:e2:
9c:c7:3e:94:fd:42:93:51:d3:af:46:7a:0d:69:d0:66:90:97:
2f:33:47:15:8c:72:27:ea:01:34:ee:d4:8f:63:0f:18:76:f3:
34:f7:e8:04:55:0c:e5:a4:72:d4:cb:39:95:f8:ed:1c:bd:39:
b2:cf:47:26:bd:79:e2:3b:3d:8c:03:37:85:53:23:38:9c:94:
87:d2:aa:01:1c:13:b8:d9:22:6a:9e:f3:0c:90:93:2f:c5:e4:
cc:85:a8:aa:50:ed:60:ac:42:15:45:ba:5d:e1:99:4b:56:96:
18:2f:66:c9:33:39:02:d4:5f:b5:6c:f3:38:42:5f:d0:4f:cb:
c4:f4:c4:ab:23:fe:fe:9b:53:bb:9e:ab:17:5e:4c:10:03:24:
8f:48:a6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:27:07 2026 by rpki-client