
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft
File: N35PWGHm2AHWhx-GyUH1hwj687U.mft (raw, json)
Hash identifier: xjp8xrCcFc7jTsxGDYMZqP8i+O2K9EhFvl4uoQrVgpU=
Subject key identifier: B5:BA:71:7E:4A:74:9C:10:E1:49:33:BE:60:BE:1F:1C:36:01:F0:C9
Authority key identifier: 37:7E:4F:58:61:E6:D8:01:D6:87:1F:86:C9:41:F5:87:08:FA:F3:B5
Certificate issuer: /CN=A91FDC84/serialNumber=377E4F5861E6D801D6871F86C941F58708FAF3B5
Certificate serial: 71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft
Manifest number: 6F
Signing time: Tue 23 Jun 2026 08:03:48 +0000
Manifest this update: Tue 23 Jun 2026 08:03:47 +0000
Manifest next update: Tue 30 Jun 2026 08:03:47 +0000
Files and hashes: 1: N35PWGHm2AHWhx-GyUH1hwj687U.crl (hash: goicXaSe5FQGVHRBxTX/CU8EIpCMZrZPCrHWzwoNeow=)
2: FFD0154CC51111F081EB9984C4F9AE02.roa (hash: s9ovKXk6i7U35KNY19JGw8V3ccjwmwtWthKx7l0Dc6c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.crl
rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 08:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDC84, serialNumber=377E4F5861E6D801D6871F86C941F58708FAF3B5
Validity
Not Before: Jun 23 08:03:47 2026 GMT
Not After : Jun 30 08:03:47 2026 GMT
Subject: CN=6a3a3de4-88c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:27:5d:de:0a:c3:50:1a:6c:a5:fb:33:7a:bf:
8b:55:4d:ef:45:60:bb:95:26:23:72:fb:81:dc:b2:
d0:5a:b4:35:d8:2d:5e:9c:30:4f:e9:df:6e:84:51:
94:6d:60:27:d6:d1:2e:b5:24:c9:b7:ba:9d:f3:16:
e3:63:72:e2:18:12:e3:e0:31:a3:f4:dd:99:1f:33:
56:f1:68:6f:64:dc:ff:84:cc:98:00:11:d9:b2:1a:
59:8d:e5:bc:68:39:48:3d:25:bd:91:60:e7:db:e7:
52:5c:c8:f7:08:39:13:f8:b5:8d:f1:43:f5:2a:a2:
bc:b4:be:c4:2e:0d:ac:62:10:3d:e7:65:cc:47:3d:
48:60:92:f0:60:bf:6e:01:5c:a8:61:41:b8:71:01:
67:24:81:54:08:ab:84:cf:6e:35:ad:7b:f7:0e:53:
db:65:90:58:03:bb:95:86:c9:cd:55:85:65:1d:df:
85:9f:52:61:ba:ca:9e:29:40:fe:61:82:48:24:cb:
0c:f3:5d:de:0c:28:97:5e:f3:e7:30:da:4d:96:28:
5f:0e:14:48:b6:18:5c:e4:0e:06:9b:08:f9:93:6b:
81:b3:2e:ec:46:b4:06:2f:47:09:1c:a8:fc:1f:ae:
36:3e:65:3e:a1:34:a9:c9:75:c7:d0:40:9a:e6:47:
28:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BA:71:7E:4A:74:9C:10:E1:49:33:BE:60:BE:1F:1C:36:01:F0:C9
X509v3 Authority Key Identifier:
keyid:37:7E:4F:58:61:E6:D8:01:D6:87:1F:86:C9:41:F5:87:08:FA:F3:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:10:43:47:93:4b:ca:01:f7:07:f1:cf:8b:66:c7:55:ca:11:
45:51:08:f5:4f:7a:b1:ae:50:93:8d:a4:6d:69:17:15:9d:5f:
aa:38:0d:e1:82:00:a9:fc:bc:47:b2:9f:4b:ed:29:53:30:14:
4e:f1:33:14:c9:ee:ef:af:6a:84:7b:76:c7:c9:01:00:ab:68:
72:05:6a:51:02:b0:2d:da:35:16:71:f9:40:24:c1:60:91:f3:
12:5d:0c:e5:27:bb:cd:0a:cf:bc:45:59:04:72:c6:4d:be:85:
58:85:05:e5:ec:9c:63:78:61:35:3b:0c:12:b7:e5:49:d2:85:
b4:a9:0b:60:66:47:97:c5:79:38:5f:a0:56:b0:ec:61:db:d0:
c8:d9:45:5a:96:f0:99:f7:3e:f1:5c:fc:a7:33:03:e5:e6:6a:
fa:dc:1a:2a:0e:1d:11:89:76:03:c8:d3:bb:fb:46:63:ae:3a:
ed:55:7a:be:84:2c:60:37:3f:41:63:2f:52:7f:b4:0a:43:e9:
1b:b1:46:81:b8:34:3f:81:6f:8c:23:75:c3:55:d9:14:e7:2b:
08:1d:23:54:3f:a0:1b:49:6a:bc:79:17:54:5a:82:c5:35:af:
bf:8c:03:29:82:80:36:c2:a4:49:f5:ce:a5:49:09:a1:33:73:
27:d7:5d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:45 2026 by rpki-client