
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
File: 35G3cLwxtS_IlL3YSmdYJ1quUx0.mft (raw, json)
Hash identifier: dYrMn1+qe+a4VWcN5vbUvI8oRUkhsrUJVxY0r3jA/7s=
Subject key identifier: EC:0C:C7:56:20:34:FF:62:F6:29:8C:6A:BA:C2:E4:30:05:87:F5:B6
Authority key identifier: DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D
Certificate issuer: /CN=A91E1D51/serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
Manifest number: 81
Signing time: Thu 21 May 2026 07:43:55 +0000
Manifest this update: Thu 21 May 2026 07:43:54 +0000
Manifest next update: Thu 28 May 2026 07:43:54 +0000
Files and hashes: 1: 35G3cLwxtS_IlL3YSmdYJ1quUx0.crl (hash: B8075vJIOYM2cCkhGEAo7zAniaBWiHIlervWdXVXltM=)
2: 6645DC148FC811F08B8AA75FC4F9AE02.roa (hash: EjqSo3SW+tOTV2FfgYGjfnvYu8XgeXYJLsSNDtZjQcU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl
rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1D51, serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D
Validity
Not Before: May 21 07:43:54 2026 GMT
Not After : May 28 07:43:54 2026 GMT
Subject: CN=6a0eb7bb-f95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:5c:c8:60:14:94:46:56:d5:f8:71:08:2b:
e8:48:0e:06:9e:e4:75:44:f4:7c:3a:4b:a2:e8:a8:
7e:47:13:73:23:8b:b5:7e:e4:b6:ef:58:7b:34:e8:
8b:b4:5f:10:60:37:7f:bd:a2:f0:af:a9:07:74:54:
cc:54:2a:29:0f:f5:d1:a4:1f:d2:2e:a2:56:34:2d:
a4:61:ca:43:d4:cf:b1:1a:ef:ba:de:09:cd:0e:72:
70:94:6e:58:fc:58:dd:8b:df:58:1d:a0:0e:b9:27:
2b:4d:a7:9e:1a:18:80:23:f8:31:1b:38:c1:29:c7:
ac:5c:2f:bf:b0:4a:4f:cc:39:e8:47:d6:4c:bf:cc:
78:95:46:bd:e7:2b:a4:ca:c6:85:69:01:be:0b:51:
74:79:5c:3a:9b:54:aa:5b:c6:ef:93:3e:6e:d2:ed:
db:b5:bc:29:f0:04:af:2b:a6:5f:db:75:b8:5b:16:
72:83:81:3c:b3:ed:e9:b1:bc:a7:eb:fc:61:6e:90:
65:c9:58:50:65:dc:41:1b:c2:bf:31:b3:80:cd:39:
6c:22:9e:4f:a4:c9:42:ff:eb:f9:9c:66:3d:0e:74:
ec:58:3e:09:4a:52:d2:5a:f6:f5:19:d0:23:79:6d:
79:01:14:18:35:db:6e:98:1c:b4:17:9b:35:a1:5f:
1d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0C:C7:56:20:34:FF:62:F6:29:8C:6A:BA:C2:E4:30:05:87:F5:B6
X509v3 Authority Key Identifier:
keyid:DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a1:6b:03:1a:95:d8:ad:8a:de:11:72:53:9f:a5:be:21:0d:
80:95:a3:f5:a9:5f:6c:0e:ff:7a:4b:55:cc:2b:82:ee:cf:fb:
e1:51:a9:22:c7:13:97:d3:1f:b3:04:d2:c9:ce:9b:7e:89:da:
6f:7b:58:4e:57:0c:8b:12:f1:98:de:64:66:59:21:67:69:cd:
2a:73:bf:54:52:44:d2:e9:99:7d:17:5a:5d:62:84:50:b2:8f:
4d:65:a9:74:0d:59:d5:cf:8f:81:14:f3:6c:0b:7e:91:c9:51:
8d:ee:38:c0:4f:06:c8:97:00:91:26:8e:76:b7:c1:5e:6c:39:
3c:5b:59:b3:f0:d7:fc:55:b9:02:e0:b9:56:c8:8c:27:f1:2f:
47:75:17:43:c3:d9:86:07:bb:41:90:e1:98:16:84:6a:39:1d:
71:1e:40:1b:2f:f1:e2:5e:87:3d:96:56:be:13:5e:a8:e7:f1:
ff:b3:20:d3:40:28:7c:35:a3:2d:c2:18:92:ae:9f:b3:24:14:
d1:9b:2d:d8:49:55:0e:8c:3f:03:29:dd:d8:ca:94:17:b5:9d:
fb:c4:f8:1f:d6:c3:3c:35:c8:db:b8:f9:2b:3b:ef:73:e9:26:
32:be:3e:f5:5c:b7:dc:28:90:0a:e9:2b:22:71:b6:9d:2c:6c:
b6:c1:86:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:09 2026 by rpki-client