
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
File: 31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json)
Hash identifier: 0bfo8YIsceG8j963JdvBpDOXKsRmt5ddoSSc1OTrQkE=
Subject key identifier: 03:E3:B8:E0:67:EE:E4:21:50:D1:7A:4D:53:99:6B:39:21:24:51:37
Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
Certificate issuer: /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
Manifest number: 0146
Signing time: Thu 23 Jul 2026 07:04:16 +0000
Manifest this update: Thu 23 Jul 2026 07:04:16 +0000
Manifest next update: Thu 30 Jul 2026 07:04:16 +0000
Files and hashes: 1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: Q20+61dK5heLw03MK2v0063W0JKdpk+jL9oj+zmDxac=)
2: 934C7D46FBAF11F08EB01E575F6F56BC.roa (hash: T7EaNfKZqoPd4uuGaZYXGqpfHmxAJUJXEQfDEFPp/W4=)
3: 42230DF42DE211F0A991F83DC4F9AE02.roa (hash: yYz8vPsSQcwgOuF6A+VEinnO0ZhPnyp/BhHCVoBW8aw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Validity
Not Before: Jul 23 07:04:16 2026 GMT
Not After : Jul 30 07:04:16 2026 GMT
Subject: CN=6a61bcf0-adf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0e:ed:17:b5:f4:a8:18:4f:32:2e:4c:98:21:
5e:f3:5d:a5:a3:df:7c:46:96:d0:bf:b3:a9:87:e4:
21:d4:2b:1f:6d:1b:72:1d:59:62:06:5e:f4:88:c0:
fc:d4:b3:79:12:3b:37:ce:4d:8f:f5:2e:ce:70:27:
aa:04:03:b2:5e:9c:02:4e:01:85:b1:71:10:54:cf:
7b:a2:01:59:81:78:e9:40:7b:3b:05:8f:41:f8:57:
ad:ca:e7:10:b4:b8:eb:9b:36:2d:76:15:b3:b2:7a:
94:fd:1d:9d:cf:cd:dd:cb:f6:5a:37:46:2c:2e:d0:
7c:cf:0b:5c:59:8a:1f:58:e2:16:d1:f4:da:a0:71:
de:ce:6e:c4:10:3f:c2:8f:bf:76:1e:86:7c:1c:59:
6a:45:4b:5a:a5:c5:fc:05:db:c7:3a:24:30:81:93:
67:3d:d3:c0:c4:03:cd:d1:1e:13:00:41:a7:eb:d0:
5e:81:75:b2:72:32:98:a8:0a:d0:68:6b:7b:12:f9:
42:ac:9a:f4:41:21:93:97:cf:19:83:0e:07:91:54:
de:54:45:12:87:e9:d1:a9:65:9c:38:f2:3a:32:32:
10:40:e5:3a:05:b6:be:f7:5e:77:3c:28:4d:aa:b5:
97:bc:e3:dd:c1:fe:5a:78:f5:a6:c4:74:df:42:5e:
05:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E3:B8:E0:67:EE:E4:21:50:D1:7A:4D:53:99:6B:39:21:24:51:37
X509v3 Authority Key Identifier:
keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:51:3f:12:f8:80:fe:28:c0:f3:3e:a4:ac:6c:12:5f:90:84:
e2:52:c3:a3:79:58:4e:3b:35:9d:29:8e:a9:68:2b:40:82:d2:
5d:94:ce:da:a2:22:64:63:c1:09:37:3c:7c:c6:93:25:7d:bb:
e2:0a:33:c2:41:06:d6:06:b9:48:8c:b8:91:4a:0b:01:bb:43:
a7:e4:2d:85:9b:cb:82:55:b9:63:ae:ec:1c:e6:1c:5d:7f:50:
7a:a6:fe:db:4f:c6:b0:36:9d:f7:0b:0f:77:29:a0:1c:4e:f9:
67:f2:dc:cd:d0:d8:5a:f2:a4:8d:94:d2:b9:39:bf:e5:41:3a:
83:41:b8:89:7d:25:7b:c6:ac:46:0f:ce:d7:f1:59:09:e3:a3:
a7:50:f0:b8:94:1f:78:04:26:d8:27:cd:cd:f2:4f:ca:cb:b0:
80:cb:30:b4:f3:42:4c:86:e8:3a:12:c6:ec:4c:c2:0f:00:f0:
25:98:18:7d:12:ef:d3:65:5d:26:2c:ab:5e:14:ed:11:16:e9:
9a:79:0c:57:c1:c0:8b:07:59:48:04:15:61:c7:8c:50:71:c0:
d1:bb:a2:2f:58:74:ae:58:94:82:27:28:99:75:82:e3:bd:b3:
cd:91:45:1b:15:0c:23:2d:11:66:ed:9b:23:c9:40:c5:95:2e:
1d:4a:6e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:44:40 2026 by rpki-client