
$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
File: b35Y0Iljiffn_k6HlapVXVxVUYg.mft (raw, json)
Hash identifier: XZTPAZ3hcVfHlJUwA9hiVnoNrutjTenr1dbd+44UNE4=
Subject key identifier: 50:2B:DC:7E:39:82:CC:34:F4:23:42:07:07:BB:7E:33:59:FE:C3:7C
Authority key identifier: 6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88
Certificate issuer: /CN=A91706E4/serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188
Certificate serial: F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
Manifest number: F4
Signing time: Mon 02 Mar 2026 02:49:11 +0000
Manifest this update: Mon 02 Mar 2026 02:49:09 +0000
Manifest next update: Mon 09 Mar 2026 02:49:09 +0000
Files and hashes: 1: b35Y0Iljiffn_k6HlapVXVxVUYg.crl (hash: BqdheqZQFLg7a/NwCDzN/rLgqQWx+okdGPRqQcZUY8s=)
2: 31E9AEC6E30411EFBC0C3B2CC4F9AE02.roa (hash: uV8rFDqMxRMdCRvkDEsV2MUMii9vsIlS/hRAm+P4Yu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl
rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91706E4, serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188
Validity
Not Before: Mar 2 02:49:09 2026 GMT
Not After : Mar 9 02:49:09 2026 GMT
Subject: CN=69a4faa7-98f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:b0:ac:8b:75:87:23:e6:04:73:f4:8b:52:
3e:3c:18:54:9f:74:4d:7d:cd:b3:dc:5b:3b:a9:18:
d2:da:4b:3f:b4:ea:13:58:0d:82:00:ec:35:f5:10:
03:80:2f:b7:7d:f0:6d:8f:94:79:f6:23:63:89:0e:
65:0e:2d:48:f5:e9:e2:be:80:7f:ac:d0:c3:60:4b:
1c:a3:06:59:57:02:b3:81:d1:a0:44:f7:c6:8e:c7:
5b:ae:f5:4e:58:f3:52:71:ce:66:55:a5:bb:d6:9c:
32:7a:30:e4:29:a3:34:a1:e1:5b:7c:92:1b:68:f4:
3d:62:7f:d0:eb:59:55:7b:a9:7d:0d:d0:4d:ad:b4:
70:cd:fd:52:fb:32:05:9f:49:d6:e2:9f:8e:b3:99:
5a:55:5c:bc:7a:3a:2a:82:77:6a:46:8e:5c:9f:e9:
a0:e1:df:f9:ee:e6:f0:4a:e4:80:e0:74:33:6e:f9:
a4:3a:08:3d:f1:05:2e:b0:fb:bc:c2:a8:83:0a:fd:
99:ad:fd:20:14:1c:25:33:36:46:44:51:3d:51:fd:
d6:af:2a:04:09:e1:67:d7:04:99:5e:fd:c8:23:3f:
a6:16:bc:d2:74:72:24:bb:aa:a7:da:2d:54:f2:b0:
9b:54:f8:cf:17:43:ea:72:3d:0d:64:20:f0:71:ff:
55:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2B:DC:7E:39:82:CC:34:F4:23:42:07:07:BB:7E:33:59:FE:C3:7C
X509v3 Authority Key Identifier:
keyid:6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:00:c9:00:b8:9a:2d:8d:10:46:a3:0b:29:5c:bc:10:dd:ff:
4a:21:da:fc:73:1a:08:1c:aa:9c:90:d1:4d:bb:48:07:da:4c:
4f:eb:d5:e6:4c:f5:04:56:c7:6a:1c:6f:79:d4:f6:0d:68:53:
7b:8b:f7:14:90:a0:14:a5:09:8d:c8:d9:32:cc:b7:20:dd:5f:
c6:d3:4d:f4:de:18:b2:c1:cb:48:83:66:46:7f:e7:bb:71:6f:
ab:b8:e4:82:81:b2:55:21:30:ba:71:c8:f1:7b:4a:22:77:01:
6a:30:be:6f:8e:1a:eb:11:8e:32:39:fa:a4:d4:c2:c0:35:2b:
55:52:dc:7e:c4:09:b4:2c:19:4e:81:9b:55:74:92:40:a7:7c:
4a:19:d4:ea:d8:5e:5f:9a:7a:63:6b:c0:b5:f0:6d:48:82:8e:
8c:86:8d:84:67:2c:6a:8a:fc:cb:ad:65:e5:d4:62:71:b4:d2:
25:25:ba:04:07:4f:99:1d:21:59:1b:51:2e:8d:12:3a:5d:bf:
c7:6a:e9:9a:54:c7:c8:6d:8e:30:bb:ad:5a:fc:76:e5:20:14:
b8:83:01:2a:51:b9:25:8f:21:e3:83:8f:2e:e2:0f:67:3b:44:
da:1f:be:53:3b:1a:bf:c4:1e:29:3f:cb:b8:90:03:4b:16:90:
ee:aa:f3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:01:13 2026 by rpki-client