
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
File: 35G3cLwxtS_IlL3YSmdYJ1quUx0.mft (raw, json)
Hash identifier: Fi3dwdOnDWXoUp+Efgzd5iCLLbPTvPT1aP4fueEz9Eg=
Subject key identifier: B5:79:03:36:44:19:20:A4:DA:CD:15:99:4E:B6:65:BE:16:FE:5A:FF
Authority key identifier: DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D
Certificate issuer: /CN=A91E1D51/serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
Manifest number: 7C
Signing time: Mon 11 May 2026 07:50:28 +0000
Manifest this update: Mon 11 May 2026 07:50:27 +0000
Manifest next update: Mon 18 May 2026 07:50:27 +0000
Files and hashes: 1: 35G3cLwxtS_IlL3YSmdYJ1quUx0.crl (hash: ADRXkksBW9fAStnWQQvrN6kF83tEnG15l/mO+ZyP3Sk=)
2: 6645DC148FC811F08B8AA75FC4F9AE02.roa (hash: EjqSo3SW+tOTV2FfgYGjfnvYu8XgeXYJLsSNDtZjQcU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl
rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1D51, serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D
Validity
Not Before: May 11 07:50:27 2026 GMT
Not After : May 18 07:50:27 2026 GMT
Subject: CN=6a018a44-3216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:61:8f:9e:d0:ef:75:4d:7e:d0:b8:9c:7b:
77:69:06:ac:65:62:48:8c:1d:75:bc:83:c4:e9:65:
c4:71:45:9d:d6:54:61:51:ab:88:ab:c5:a8:47:bf:
63:3c:1b:46:2d:3b:9d:7a:64:59:c0:74:87:2d:be:
ff:24:47:42:85:86:5e:8d:da:45:dc:9c:82:09:6c:
b2:eb:14:bc:40:04:7b:ec:0f:6c:69:ca:d6:5d:f9:
f4:31:05:e9:25:7f:f5:b6:67:7f:2b:14:f3:18:59:
4b:9d:66:1f:3a:f6:92:c4:1c:9c:68:c1:e1:1b:50:
74:f8:08:52:76:67:69:76:03:22:80:70:2c:19:e6:
db:11:f6:ff:3d:54:2e:cb:78:9d:61:75:fd:d4:15:
17:15:22:39:16:5f:62:ab:b0:4b:a5:15:6a:aa:3b:
e2:9e:0e:27:d2:81:22:75:5b:86:15:2f:30:43:26:
2c:5e:45:7e:dc:26:25:00:0a:25:5d:7b:70:93:c3:
af:a6:b2:3d:fb:31:9c:ac:19:29:9e:1f:ac:dd:2b:
69:89:ed:06:63:db:a6:40:d5:b2:cf:15:37:89:9f:
13:93:fa:f5:5f:a4:77:ab:47:8a:98:0f:d9:d0:7c:
df:74:c4:6b:9c:f9:fa:4b:84:98:0d:73:4a:74:b3:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:79:03:36:44:19:20:A4:DA:CD:15:99:4E:B6:65:BE:16:FE:5A:FF
X509v3 Authority Key Identifier:
keyid:DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e5:fa:e5:f2:d6:2b:84:af:30:8d:32:39:48:33:17:24:5f:
4b:b1:15:2c:04:f5:86:b3:f2:d0:48:80:62:5b:9c:8f:e4:c7:
74:a7:b5:90:07:13:ed:4e:0a:8a:22:33:a4:c4:f6:3b:1b:e2:
e6:c9:a2:53:da:d5:23:f0:c3:66:cc:77:c8:fb:ee:15:e2:a1:
c9:72:ea:0f:10:aa:f3:5a:8e:87:8e:27:62:b1:49:fc:80:18:
a6:2a:c6:d7:a3:4b:50:ed:55:7e:fd:04:6a:da:a9:49:e4:dd:
9d:5a:22:6b:1a:a6:e3:42:53:3f:ef:30:20:62:6f:1e:aa:5b:
d8:8c:e3:2b:b5:84:0f:24:51:72:33:ae:28:b1:77:bd:01:35:
c7:d5:8f:13:e6:f1:08:af:0f:df:e1:25:ff:13:00:46:e6:ee:
a7:f5:ff:fd:58:f6:6a:fb:70:b5:53:59:24:db:ea:10:cc:68:
ca:e9:89:01:e7:de:76:95:5f:4c:73:f4:f8:29:7f:fa:52:ba:
03:da:a3:e0:c9:e6:b5:5f:79:f8:45:0f:1a:1a:18:a7:f6:f3:
d7:2f:db:33:4a:b2:ee:da:ce:10:93:7b:47:c5:d7:2a:cb:7d:
05:ee:14:4c:d2:bb:49:b1:96:7b:22:45:ed:76:ea:bd:9c:37:
98:f6:f4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:13:25 2026 by rpki-client