
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
File: 31FHCxXowUGvL6hGoowDs4WRurQ.mft (raw, json)
Hash identifier: 1kkj76vj4jJbYAch9s1VmopBoNYPnLsin9Ojl2Mu1Z8=
Subject key identifier: 31:91:B4:CD:46:6D:94:A1:8D:24:40:AA:5A:FF:D9:83:67:D6:6A:48
Authority key identifier: DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4
Certificate issuer: /CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
Certificate serial: 022B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
Manifest number: 0218
Signing time: Thu 23 Jul 2026 04:22:10 +0000
Manifest this update: Thu 23 Jul 2026 04:22:10 +0000
Manifest next update: Thu 30 Jul 2026 04:22:10 +0000
Files and hashes: 1: 31FHCxXowUGvL6hGoowDs4WRurQ.crl (hash: Ripor4VSBUaPVi0GPPDtQ/Ato+VG7L46gyf96kr8kks=)
2: 361777766E2F11EE9F5DEF32C4F9AE02.roa (hash: 6r9HMe5N7O3EO/hoVyMLGjAo1zMWyRsh6cOTtVL/RMY=)
3: 7B50FA5EA13911EF8B634635C4F9AE02.roa (hash: 9GGpKqMuP60pZTecgihCPtCUwjJQr1u5VITWHt4kvQc=)
4: 367E2CC86E2F11EE9F5DEF32C4F9AE02.roa (hash: ZY1siwjbqnQaZCIx96bLhb0d0HA6YypX15NteDeXL0o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl
rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555 (0x22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB7E9, serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
Validity
Not Before: Jul 23 04:22:10 2026 GMT
Not After : Jul 30 04:22:10 2026 GMT
Subject: CN=6a6196f2-5404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dd:0e:82:ac:97:19:45:c2:af:d6:13:34:95:
93:f4:e7:70:00:04:7c:34:57:cd:e8:b7:17:25:e7:
b4:fb:1a:bd:6c:22:aa:8f:1c:56:8f:03:13:63:f6:
3a:46:93:f3:33:dc:4e:9e:31:90:ae:43:7c:d2:02:
d0:82:93:b1:63:95:c7:bc:33:3f:4b:12:04:e1:dc:
a4:ff:31:21:16:68:14:9b:c2:7c:cc:cb:3b:ab:a6:
42:d1:42:0d:e6:ac:81:3d:b1:07:22:90:4b:f7:f2:
d3:ca:92:5d:74:93:3b:d3:3d:45:1f:a3:af:ab:08:
00:0f:c0:87:b9:a7:1a:cf:1a:6c:3c:7b:8a:a4:44:
b0:a0:33:ee:4e:ee:74:02:77:5e:5c:a9:69:70:73:
46:a6:5e:03:c5:7f:dc:b2:d7:8c:f9:00:f2:64:b1:
e2:8a:0f:81:c5:3a:84:f4:97:c8:f1:eb:4f:1c:54:
5c:a7:01:cb:05:b2:8a:7e:4f:a8:05:5e:20:47:18:
e8:29:af:8d:4b:a6:b6:8f:b5:75:12:04:00:b1:07:
51:15:3b:b3:3c:e1:3b:96:83:62:d0:ee:4f:4e:f1:
92:70:03:9b:c7:97:50:12:56:a0:66:87:c1:a7:03:
12:b9:1e:e7:98:98:db:ce:b8:73:29:f1:08:76:96:
21:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:91:B4:CD:46:6D:94:A1:8D:24:40:AA:5A:FF:D9:83:67:D6:6A:48
X509v3 Authority Key Identifier:
keyid:DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:70:2c:f7:7a:fe:56:f4:a2:ce:ab:c8:84:67:0c:83:3a:c8:
73:91:f9:49:2e:09:d2:e9:dd:47:80:ea:76:85:8a:e6:78:15:
32:d7:0b:47:26:c2:1c:49:2b:ab:d3:81:30:a9:ea:cc:5d:a8:
62:c7:5a:57:63:66:67:90:a3:81:ff:f2:11:51:9e:80:80:1a:
48:65:8b:09:38:c7:de:bd:89:8b:c6:9d:0a:06:0b:52:ae:76:
af:77:f3:cc:c6:90:58:4e:c9:08:66:aa:24:77:17:b0:03:c4:
c1:94:82:4f:36:bd:db:27:cf:12:15:1c:2e:bf:d6:b8:02:c7:
ea:85:bd:06:0c:50:1d:b4:b5:7a:0a:d4:82:a2:85:78:20:c3:
cb:34:df:1c:e6:63:e7:4b:f2:c2:ae:0a:fd:6c:54:51:4c:4d:
b2:e3:08:9a:c1:56:5b:cf:e2:b4:1c:b7:12:fd:3d:c5:0a:14:
33:21:9e:ad:62:5f:38:c4:98:3f:83:f5:d1:06:d6:4e:85:d9:
64:eb:6c:db:bd:1c:d1:62:d0:96:9c:a7:b7:97:d1:da:28:9c:
d5:c1:7d:86:63:32:67:c7:6a:ee:22:d7:4b:b9:30:fe:e0:00:
f2:b3:d0:65:ad:aa:c4:29:ac:a4:e5:3d:8b:93:ee:46:ad:6a:
63:23:76:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:54 2026 by rpki-client