
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft
File: N35PWGHm2AHWhx-GyUH1hwj687U.mft (raw, json)
Hash identifier: 8SIK0VmitfX9gAf3I2yPYBpEwP5uMR5Rf7FJ/rzM0YE=
Subject key identifier: 5D:9B:96:9C:C5:45:3A:D2:64:8E:44:B9:37:F0:59:91:A1:80:AF:84
Authority key identifier: 37:7E:4F:58:61:E6:D8:01:D6:87:1F:86:C9:41:F5:87:08:FA:F3:B5
Certificate issuer: /CN=A91FDC84/serialNumber=377E4F5861E6D801D6871F86C941F58708FAF3B5
Certificate serial: 44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft
Manifest number: 42
Signing time: Wed 25 Mar 2026 07:33:47 +0000
Manifest this update: Wed 25 Mar 2026 07:33:46 +0000
Manifest next update: Wed 01 Apr 2026 07:33:46 +0000
Files and hashes: 1: N35PWGHm2AHWhx-GyUH1hwj687U.crl (hash: /q22RqG/9hiPDUnMkVusjy9amK/EyWyZDfqVkN85JAQ=)
2: FFD0154CC51111F081EB9984C4F9AE02.roa (hash: s9ovKXk6i7U35KNY19JGw8V3ccjwmwtWthKx7l0Dc6c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.crl
rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDC84, serialNumber=377E4F5861E6D801D6871F86C941F58708FAF3B5
Validity
Not Before: Mar 25 07:33:46 2026 GMT
Not After : Apr 1 07:33:46 2026 GMT
Subject: CN=69c38fdb-3b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:26:b3:d5:ee:e1:33:25:3f:7f:ed:d5:85:ab:
a6:05:dc:41:18:89:21:86:03:cd:9c:6c:84:fb:4c:
89:1d:9a:d6:ae:12:47:b9:80:a2:38:f7:28:3e:8e:
6c:ab:13:23:2b:d3:f1:79:42:80:1b:21:2f:b3:a9:
c8:b2:5b:f5:a8:3f:ce:f0:e5:bf:50:4a:87:8f:40:
06:96:55:86:cb:eb:63:f4:46:87:35:77:44:86:f4:
8b:3e:08:ba:56:7d:cc:41:ac:fd:3c:a3:9f:de:da:
99:fd:64:b0:51:4f:68:73:a9:53:b3:ea:f4:2a:b6:
99:b4:b1:b0:01:3d:14:ec:17:00:4a:fe:ba:a0:e8:
2e:09:e5:64:dc:88:4c:86:3d:e3:cc:53:a0:3d:bb:
78:97:b0:07:3c:eb:26:d5:c0:bf:53:e8:7c:c7:19:
09:99:79:27:fe:c3:26:c4:28:8d:30:fc:05:8d:04:
21:e4:15:4c:a6:4c:50:21:2b:eb:71:df:aa:72:a1:
7e:c8:d0:21:4e:6a:74:1f:94:2a:ee:ff:df:40:fa:
73:ca:08:62:06:26:fe:5b:df:31:ab:9a:96:63:31:
d7:a9:82:04:c0:16:99:d1:21:10:9d:0a:48:b2:e7:
16:d1:31:11:04:ce:e5:04:e9:a7:96:35:03:10:43:
05:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9B:96:9C:C5:45:3A:D2:64:8E:44:B9:37:F0:59:91:A1:80:AF:84
X509v3 Authority Key Identifier:
keyid:37:7E:4F:58:61:E6:D8:01:D6:87:1F:86:C9:41:F5:87:08:FA:F3:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:7f:ea:ec:9f:a6:10:c2:67:44:06:53:53:ef:db:39:5a:18:
9a:8d:e6:b3:af:e5:09:23:cf:b5:66:fd:0b:e6:5f:74:6a:ff:
ff:f9:dc:30:8d:13:6e:9d:5f:97:f6:f4:b8:b4:07:69:d7:8e:
bd:b2:6a:3a:7e:eb:d3:5e:91:4a:80:fc:17:82:34:39:c0:6f:
c1:89:68:6b:b6:4c:7a:24:1e:68:04:ad:0c:fb:b7:60:9b:6b:
f2:71:5b:f3:89:66:d2:92:ff:9d:9c:cd:58:b4:65:73:49:80:
be:63:1f:d6:b5:bb:fa:c4:91:7d:84:c6:21:af:8b:5b:26:5d:
18:89:18:d8:fa:6b:44:55:7e:b1:29:b5:b6:f2:9c:6b:d5:b5:
f5:ac:19:4d:14:df:d1:76:54:65:7f:ce:b2:27:88:c9:06:0d:
e4:28:b7:f3:18:4d:07:24:0f:cd:3b:02:b3:d1:db:cd:0e:2b:
fa:7c:5f:b1:b6:b1:b4:21:1a:52:b8:a8:83:d8:12:98:e8:86:
6c:2d:d9:cf:43:ed:02:7c:15:74:fb:e7:88:6f:73:17:ef:2a:
1c:9c:a1:72:17:34:08:ff:5d:dc:1b:db:94:2e:13:78:38:e1:
b3:a7:1a:e6:e4:5c:bd:80:ea:5e:f6:13:ae:3e:cc:e0:3e:34:
6c:51:83:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:26:36 2026 by rpki-client