
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
File: 35G3cLwxtS_IlL3YSmdYJ1quUx0.mft (raw, json)
Hash identifier: Yt3avDDCEBG0YiALRYhD9LwCyt5lwKpJyCuE5XSVpQE=
Subject key identifier: 3A:C5:FA:77:14:E1:83:18:13:A9:20:93:F9:44:DB:E4:45:42:70:C0
Authority key identifier: DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D
Certificate issuer: /CN=A91E1D51/serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
Manifest number: 52
Signing time: Thu 19 Feb 2026 06:29:04 +0000
Manifest this update: Thu 19 Feb 2026 06:29:04 +0000
Manifest next update: Thu 26 Feb 2026 06:29:04 +0000
Files and hashes: 1: 35G3cLwxtS_IlL3YSmdYJ1quUx0.crl (hash: HjJTE6osmC30vcpFA0aVyThvILjwAE2j5FkiB1bZeww=)
2: 6645DC148FC811F08B8AA75FC4F9AE02.roa (hash: o8m432Z1DaEAELBYfiFTDCeo+0yznHgf97uZzcWpBFc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl
rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1D51, serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D
Validity
Not Before: Feb 19 06:29:04 2026 GMT
Not After : Feb 26 06:29:04 2026 GMT
Subject: CN=6996adb0-7598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:34:ad:f9:5c:f2:34:61:e7:91:65:f6:98:dd:
59:ed:66:4b:b9:06:ba:b4:3b:a6:b3:2a:88:09:f2:
9b:3c:58:3d:e9:f9:49:9d:ea:11:f7:b7:04:4a:7f:
cd:89:f7:d6:80:e3:4e:a1:1f:b7:5c:1f:3a:98:77:
16:99:5f:6a:f0:f6:80:e0:7a:a9:98:a7:cb:aa:50:
0a:f2:61:98:89:de:a3:ad:c6:14:16:df:c0:31:15:
a6:6d:2e:5f:0e:95:e3:7e:27:43:c5:5d:cd:90:e1:
00:cb:68:45:df:27:50:00:09:30:b4:a9:71:71:6e:
61:a4:7f:e5:b7:6f:10:d1:25:b0:98:64:e4:8c:9b:
dc:62:fc:73:50:1e:19:30:98:4c:35:3f:cf:2d:ac:
f6:a9:e7:79:65:5b:f8:5b:ae:f6:e8:8a:7a:e7:99:
35:dd:54:54:da:38:b4:79:ab:44:a4:0a:f0:d2:2b:
2a:71:4d:61:a4:61:4b:71:c6:8e:9b:1e:fb:12:65:
ed:b9:f1:29:28:c4:9c:3d:7d:f4:63:59:38:83:00:
79:55:12:bc:d9:7b:5b:f2:c4:5f:7c:ed:e0:86:ba:
50:69:35:7e:f9:b6:77:87:dd:4d:45:83:4e:83:19:
81:96:6b:37:16:86:13:5f:b8:82:a5:95:08:bf:ea:
b8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C5:FA:77:14:E1:83:18:13:A9:20:93:F9:44:DB:E4:45:42:70:C0
X509v3 Authority Key Identifier:
keyid:DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0c:cd:96:36:a3:ae:fd:48:2a:b1:1f:35:53:8c:03:a1:b8:
9d:cf:82:1d:91:9d:e4:5f:fc:71:c1:07:a6:75:82:bc:b9:f1:
74:3a:e4:eb:3a:cd:d2:d0:7b:42:75:10:1d:c2:5e:76:69:df:
d0:31:25:0e:53:48:8a:ea:f4:00:22:92:a9:64:9c:96:50:08:
42:a4:2b:4b:13:bb:14:6e:37:37:f5:43:49:84:9c:c6:2d:c2:
17:16:71:b7:1a:0a:b5:a7:6b:10:f1:71:b6:5e:76:ef:17:d7:
23:d1:c3:54:60:00:8d:74:fd:0c:06:2e:f5:b7:b4:d4:6f:a9:
47:53:a5:09:4c:4c:f9:b2:09:ad:f1:bc:f6:0e:24:fa:91:0f:
ff:ff:64:d2:30:1a:13:76:c4:82:9d:c4:2b:a2:f0:64:ee:07:
74:fb:38:8c:f0:4c:69:38:07:23:73:ae:06:42:38:7b:98:18:
52:15:c6:14:18:42:51:be:13:a0:c5:a7:cf:fa:2e:2e:54:de:
06:77:42:89:e6:ad:dc:80:da:88:7b:9f:62:95:2a:43:ae:7c:
a3:5a:73:fe:90:eb:fa:45:bc:fc:bc:af:28:4c:7e:64:8e:8f:
e2:4d:22:62:53:17:77:a7:81:4b:d2:f5:63:fb:51:62:fb:d2:
24:36:6b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:18:05 2026 by rpki-client