
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
File: 31OLuqk3tpugC7J7caS3dubkGf4.mft (raw, json)
Hash identifier: dVo6cC9834pQddbpD6j+5eQPA6Y3XQvwEsLBD9s3z9M=
Subject key identifier: A5:DD:5F:C7:FF:30:09:D2:A5:C9:43:41:A6:E6:33:8B:31:8B:0C:93
Authority key identifier: DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE
Certificate issuer: /CN=A9191170/serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
Certificate serial: 0252
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
Manifest number: 024B
Signing time: Tue 21 Jul 2026 03:34:05 +0000
Manifest this update: Tue 21 Jul 2026 03:34:04 +0000
Manifest next update: Tue 28 Jul 2026 03:34:04 +0000
Files and hashes: 1: 31OLuqk3tpugC7J7caS3dubkGf4.crl (hash: tRZIYrmu6e+bZKc2nsU7VR+Ct/zy2Qu5OrB62xm3KFg=)
2: 086823BE07B911F0875CC733C4F9AE02.roa (hash: LwADRNH2zXke5XeuF1Oo6gjD6e4ZUXmZaNArwtimmJA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl
rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 03:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191170, serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
Validity
Not Before: Jul 21 03:34:04 2026 GMT
Not After : Jul 28 03:34:04 2026 GMT
Subject: CN=6a5ee8ad-a692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2e:0c:43:71:04:40:d3:5d:ff:4a:5e:57:46:
10:81:5f:d0:5e:ca:84:c2:af:94:7d:5d:bd:d7:db:
75:d5:d4:ad:b1:c0:62:9e:7f:d5:5b:51:24:cc:db:
0a:a8:91:f9:d5:ad:b1:bf:54:8b:f4:91:f8:99:7a:
f5:03:aa:a0:0c:3a:96:65:32:0c:c2:1e:ce:f4:2a:
6b:c3:69:59:f4:3d:33:4f:9f:ae:0f:f4:81:4e:4c:
4d:1f:f2:2a:40:cf:dd:5a:03:d8:b7:9c:a3:1b:ed:
c6:e8:44:00:e7:dd:9e:ce:47:8f:bb:4c:b0:e2:33:
0e:fb:e5:90:ea:70:4f:95:3f:41:e4:39:28:f5:08:
29:89:0f:85:38:5f:5e:fc:b4:7b:58:e5:2b:fc:87:
7b:2b:12:48:84:db:5d:34:0c:da:98:ca:f4:91:36:
e3:c9:07:7b:7a:20:c1:f7:2c:73:fe:07:e9:ed:16:
48:92:3e:3f:dd:d1:70:70:79:f2:b2:9c:78:76:e1:
fd:e7:a4:f2:72:4f:bc:11:66:4f:32:b1:f3:d1:b8:
97:dd:c9:97:4d:9e:34:31:52:8e:6f:49:52:6c:71:
5e:80:5b:20:cf:07:17:3d:b8:5e:9f:c8:f2:df:e4:
b7:93:cb:c3:44:f0:44:91:1d:65:d5:46:5d:1c:ec:
14:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DD:5F:C7:FF:30:09:D2:A5:C9:43:41:A6:E6:33:8B:31:8B:0C:93
X509v3 Authority Key Identifier:
keyid:DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:9c:f3:49:d8:93:c7:f8:fc:d1:e6:cf:3d:7d:ef:3a:6f:a8:
bb:f3:18:68:dc:3f:c4:7d:cd:31:a2:1c:74:fe:20:f4:11:c3:
b0:00:77:1a:77:20:0b:7a:9d:21:07:1f:aa:19:87:59:5a:eb:
e7:ce:b7:e5:0b:ad:ee:60:68:65:09:7d:61:14:a0:89:db:96:
e5:56:da:d0:b4:db:3a:da:08:2a:c1:44:e6:34:2e:63:a3:94:
b1:93:4d:39:ca:b3:1f:8c:59:d7:0c:d0:e2:05:f4:b7:ed:90:
da:c6:4a:17:5b:48:93:ea:ed:f9:f4:1c:fc:9e:4e:fc:50:03:
74:5a:73:76:52:8e:6d:3e:fb:3f:12:67:92:30:da:ab:10:76:
c3:e5:07:cc:d0:74:8e:4f:35:e1:f5:45:ba:f8:c1:1f:cd:1a:
ab:47:6a:7f:07:fb:55:82:4b:88:d0:f6:17:0b:cc:fa:8e:65:
d7:58:e7:c8:d0:49:9b:f5:e8:88:8b:80:5e:60:74:f4:64:4b:
9e:9f:c9:02:b2:65:bf:79:3b:eb:79:99:c7:64:e8:62:d9:c9:
ea:ac:97:42:47:d3:2e:53:d7:c2:7d:04:45:52:d2:8d:51:e1:
c6:5a:da:47:45:c9:40:50:3d:02:02:5d:09:8d:cd:b2:b6:8d:
eb:a7:cb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:14:26 2026 by rpki-client