
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
File: b35Y0Iljiffn_k6HlapVXVxVUYg.mft (raw, json)
Hash identifier: VZPXeu8EKCHrctOPtnw0m0sRVpnyCjhUgSmctPpanHA=
Subject key identifier: 34:53:1A:4E:DA:26:5C:B7:59:D6:B6:87:3C:7B:85:30:68:9A:31:08
Authority key identifier: 6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88
Certificate issuer: /CN=A91706E4/serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
Manifest number: 015E
Signing time: Sun 27 Sep 2026 05:33:10 +0000
Manifest this update: Sun 27 Sep 2026 05:33:09 +0000
Manifest next update: Sun 04 Oct 2026 05:33:09 +0000
Files and hashes: 1: b35Y0Iljiffn_k6HlapVXVxVUYg.crl (hash: xxfylQpCSz49Ho52omA8n03gjBObZAzS8KiaNj3CI+k=)
2: 31E9AEC6E30411EFBC0C3B2CC4F9AE02.roa (hash: uV8rFDqMxRMdCRvkDEsV2MUMii9vsIlS/hRAm+P4Yu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl
rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 05:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91706E4, serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188
Validity
Not Before: Sep 27 05:33:09 2026 GMT
Not After : Oct 4 05:33:09 2026 GMT
Subject: CN=6ab8aa96-6563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:11:d3:50:08:88:7f:d9:a4:bb:50:de:f5:
7e:87:93:73:00:0b:41:4e:2b:61:e8:0f:34:1b:b4:
41:11:22:6d:c4:42:17:7e:09:9f:b4:ed:40:52:59:
1f:db:9f:ba:85:f5:b0:33:6a:72:7f:9b:5a:a4:9a:
fa:35:17:0c:ff:77:a3:9c:5b:57:02:8d:c2:1a:56:
20:c6:e5:48:5e:3b:a5:15:a3:1b:d8:3a:90:48:53:
c6:50:3c:b2:73:19:ae:44:0c:b8:97:1b:b9:24:bb:
df:e4:42:e9:cd:27:dd:ba:b0:52:4e:a0:37:85:6d:
93:04:b7:a1:78:e0:12:9e:63:1b:4a:68:8b:2c:31:
22:3c:2a:07:1e:5c:9e:dc:d1:44:87:4f:6a:38:c5:
42:eb:50:15:a8:02:50:b9:d0:9a:5c:0a:3d:e6:24:
15:75:dc:18:af:a8:97:e9:3b:11:2c:71:e2:58:73:
2a:bb:4d:7f:6d:a9:37:2c:c3:aa:85:70:05:6b:b2:
0a:45:13:3b:1f:f2:ba:9b:a7:43:18:d5:44:89:ad:
d0:f3:55:7c:a7:da:36:bb:d8:5a:17:4c:1c:75:54:
fb:cf:75:bc:aa:eb:b7:ed:9a:7c:b9:41:d0:7b:cd:
3c:ff:80:8b:0c:bf:c6:12:0b:83:55:ec:74:d5:0e:
ac:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:53:1A:4E:DA:26:5C:B7:59:D6:B6:87:3C:7B:85:30:68:9A:31:08
X509v3 Authority Key Identifier:
keyid:6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:67:2f:e5:30:a4:d0:75:a8:22:90:5c:f5:f9:29:b8:67:11:
c3:fb:76:c9:b5:cc:fc:d2:fb:ab:e1:57:8d:a5:e0:83:7f:c2:
13:54:38:7f:ce:ca:1f:9f:33:1f:24:c1:e0:51:ba:58:70:22:
5c:b3:65:7f:4c:83:b0:4b:83:09:a2:57:6f:45:8a:df:27:61:
35:fb:30:5b:3f:8d:6b:9a:12:fe:04:85:2d:bd:3e:29:d7:42:
13:cb:2e:26:05:61:38:8b:09:9d:0d:c2:0e:f4:a9:f0:48:12:
09:87:32:b9:c0:01:70:18:54:a7:81:c7:d6:72:9d:d9:32:db:
53:b2:ca:c7:49:ce:e7:0c:b8:c9:5c:a1:2b:9c:0e:53:fd:54:
4f:97:d5:4d:55:ae:69:01:01:9f:0a:7c:18:66:90:86:d6:06:
fc:2d:a9:b5:16:85:69:f5:e5:56:95:8a:a6:44:5f:c5:25:f6:
18:dd:bb:95:5f:24:aa:ad:9c:b6:81:96:b9:9d:38:d2:0a:a4:
83:80:43:55:bf:b6:08:f0:f7:b6:85:b4:4a:58:9b:b2:9f:20:
1b:7f:7c:c8:6d:0e:37:74:fb:ab:fd:45:3c:ef:9a:2e:6c:16:
34:a2:3a:43:99:a2:7d:2c:78:07:08:37:41:f2:18:99:8b:28:
a1:0d:40:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:25:57 2026 by rpki-client