
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
File: 35G3cLwxtS_IlL3YSmdYJ1quUx0.mft (raw, json)
Hash identifier: wuhRgg23GFppZJ1XHWtA8iIUBW96sTn70v56ioa7bWQ=
Subject key identifier: 11:0A:9B:FA:21:04:88:96:6E:11:64:54:4A:EE:22:F8:1F:F9:8B:2F
Authority key identifier: DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D
Certificate issuer: /CN=A91E1D51/serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
Manifest number: A2
Signing time: Mon 27 Jul 2026 09:23:49 +0000
Manifest this update: Mon 27 Jul 2026 09:23:49 +0000
Manifest next update: Mon 03 Aug 2026 09:23:49 +0000
Files and hashes: 1: 35G3cLwxtS_IlL3YSmdYJ1quUx0.crl (hash: h4w5i5n6MDqBOPEVgSXTsKNJ6qRIY8Zr6QTqwpFxpLQ=)
2: 6645DC148FC811F08B8AA75FC4F9AE02.roa (hash: EjqSo3SW+tOTV2FfgYGjfnvYu8XgeXYJLsSNDtZjQcU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl
rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1D51, serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D
Validity
Not Before: Jul 27 09:23:49 2026 GMT
Not After : Aug 3 09:23:49 2026 GMT
Subject: CN=6a6723a5-42cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:22:93:9b:ce:cb:66:6b:85:50:0a:17:61:14:
7e:0f:78:e1:18:77:91:db:14:45:ec:af:aa:8a:09:
09:ff:47:ac:d3:ad:dc:be:d9:6d:8a:54:4d:df:99:
93:3f:58:e6:69:3a:e0:95:9f:c0:d1:a7:0f:06:4b:
ca:56:90:f1:fd:8c:99:61:d4:7d:13:ed:1e:7e:89:
83:86:ea:5e:8b:71:99:ae:7a:dc:40:52:32:04:84:
d0:d6:a7:c8:c6:75:e0:c5:fa:51:37:12:5d:25:2a:
cf:6c:d1:d9:f7:74:ac:38:1f:a1:a2:fa:94:d0:75:
a3:ec:b5:37:e9:95:20:fa:70:49:fb:22:0c:10:03:
d9:03:6d:54:2e:bf:a1:1e:2c:b2:f1:9c:e3:59:4f:
51:02:f2:bd:05:8c:0c:1d:34:b4:7d:74:58:57:67:
68:f8:0d:a2:04:b3:e9:10:69:b5:14:68:28:e9:1c:
d5:a4:7f:1f:73:59:18:a6:61:b4:42:8b:28:9f:90:
c1:ef:1e:e7:67:7c:91:ae:80:0c:c7:84:26:e5:c3:
6a:7f:66:e8:ac:87:57:2b:da:99:5f:e0:3b:af:9b:
06:29:d8:a7:4e:68:3e:94:7f:52:56:4a:33:e9:29:
a9:f8:78:6e:b2:a0:d7:18:86:38:66:4c:24:12:d8:
95:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0A:9B:FA:21:04:88:96:6E:11:64:54:4A:EE:22:F8:1F:F9:8B:2F
X509v3 Authority Key Identifier:
keyid:DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e4:58:37:8d:90:bb:2a:67:27:e9:44:cd:0a:f3:da:c2:23:
c1:d7:e2:55:ad:67:4d:9a:84:f0:d5:2e:43:d4:5b:2a:db:ec:
4d:bf:f5:fe:8f:1f:59:13:57:3e:34:82:1d:74:75:dd:19:59:
5e:f3:a0:9d:34:8a:da:f1:81:05:fe:2c:54:d5:5f:83:dd:f1:
54:aa:cb:8c:86:1a:6f:1b:66:2e:8c:c3:df:ea:61:e2:bb:72:
01:63:6f:ee:c2:6c:30:7b:78:64:ab:b0:3e:73:a7:ff:60:80:
b1:41:3f:e0:9d:f6:27:ed:a2:96:4a:db:09:6d:40:9c:6d:0f:
90:9b:e8:40:c7:66:26:fa:bc:53:d9:6c:54:b7:fa:e4:b8:fe:
70:df:d7:d8:74:82:0a:ae:b4:e2:5b:29:b7:7b:67:48:be:e2:
eb:99:42:f6:ad:18:ec:d0:3b:a0:b0:25:94:66:ca:e2:88:b6:
b8:02:c7:44:27:1c:8d:a2:ad:6e:68:5c:ef:6c:59:21:b2:55:
77:46:de:92:1e:36:d1:2d:97:8f:19:bf:2d:23:93:03:23:d3:
a1:d7:6c:e6:09:94:68:6f:df:c9:db:a1:38:76:2a:99:dc:0d:
ea:b2:9f:30:0b:fb:5a:02:32:c3:cc:12:af:a2:8e:66:6f:da:
b2:ee:44:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFENTExMTAvBgNVBAUTKERGOTFCNzcwQkMzMUI1MkZDODk0QkREODRBNjc1ODI3
NUFBRTUzMUQwHhcNMjYwNzI3MDkyMzQ5WhcNMjYwODAzMDkyMzQ5WjAYMRYwFAYD
VQQDEw02YTY3MjNhNS00MmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoiKTm87LZmuFUAoXYRR+D3jhGHeR2xRF7K+qigkJ/0es063cvtltilRN35mT
P1jmaTrglZ/A0acPBkvKVpDx/YyZYdR9E+0efomDhupei3GZrnrcQFIyBITQ1qfI
xnXgxfpRNxJdJSrPbNHZ93SsOB+hovqU0HWj7LU36ZUg+nBJ+yIMEAPZA21ULr+h
Hiyy8ZzjWU9RAvK9BYwMHTS0fXRYV2do+A2iBLPpEGm1FGgo6RzVpH8fc1kYpmG0
Qoson5DB7x7nZ3yRroAMx4Qm5cNqf2borIdXK9qZX+A7r5sGKdinTmg+lH9SVkoz
6Smp+HhusqDXGIY4ZkwkEtiVDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBEKm/oh
BIiWbhFkVEruIvgf+YsvMB8GA1UdIwQYMBaAFN+Rt3C8MbUvyJS92EpnWCdarlMd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUQ1MS9BNjgyRTFDNDhG
QzcxMUYwOEE5MzU2M0FDNEY5QUUwMi8zNUczY0x3eHRTX0lsTDNZU21kWUoxcXVV
eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzM1RzNjTHd4dFNfSWxMM1lTbWRZSjFxdVV4MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MUQ1MS9BNjgyRTFDNDhGQzcxMUYwOEE5MzU2M0FDNEY5QUUwMi8zNUczY0x3eHRT
X0lsTDNZU21kWUoxcXVVeDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfORYN42QuypnJ+lEzQrz2sIjwdfiVa1nTZqE8NUuQ9RbKtvsTb/1/o8fWRNX
PjSCHXR13RlZXvOgnTSK2vGBBf4sVNVfg93xVKrLjIYabxtmLozD3+ph4rtyAWNv
7sJsMHt4ZKuwPnOn/2CAsUE/4J32J+2ilkrbCW1AnG0PkJvoQMdmJvq8U9lsVLf6
5Lj+cN/X2HSCCq604lspt3tnSL7i65lC9q0Y7NA7oLAllGbK4oi2uALHRCccjaKt
bmhc72xZIbJVd0bekh420S2Xjxm/LSOTAyPTodds5gmUaG/fyduhOHYqmdwN6rKf
MAv7WgIyw8wSr6KOZm/asu5E3g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:42:38 2026 by rpki-client