
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft
File: 31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft (raw, json)
Hash identifier: nbnPAegHItLZn/KErzQXcrHPyWqBu7iKpxb8IG0AHWk=
Subject key identifier: AA:B0:71:72:2B:FE:82:A8:1B:B1:D8:C0:0C:99:25:76:11:90:8C:0A
Authority key identifier: DF:51:5B:59:15:E8:33:EE:DB:44:4D:19:C3:0A:00:F0:97:81:5A:35
Certificate issuer: /CN=A915FBEA/serialNumber=DF515B5915E833EEDB444D19C30A00F097815A35
Certificate serial: 07AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft
Manifest number: 07A3
Signing time: Sat 10 Oct 2026 21:35:36 +0000
Manifest this update: Sat 10 Oct 2026 21:35:36 +0000
Manifest next update: Sat 17 Oct 2026 21:35:36 +0000
Files and hashes: 1: 31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl (hash: N/4/z3L1Zi5QcwVAfTQmRwdqiJryA4kXGu6vqTuEjro=)
2: DD3109D66C6C11EB92CE744BC4F9AE02.roa (hash: 1/FiSAp5S80nIms1MrbrTHxNEyVDVL/s7F44yTIycP0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl
rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 21:35:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1967 (0x7af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FBEA, serialNumber=DF515B5915E833EEDB444D19C30A00F097815A35
Validity
Not Before: Oct 10 21:35:36 2026 GMT
Not After : Oct 17 21:35:36 2026 GMT
Subject: CN=6acaafa8-ec43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:5c:ab:43:c6:7a:a0:4c:22:4a:29:e1:af:
d4:0a:e0:3d:b5:35:40:e7:27:76:44:75:ad:dd:89:
3c:84:44:0f:54:cf:69:e7:b8:9a:4e:70:b4:32:4a:
10:5b:b3:7f:2f:4b:bc:7d:f5:3d:a3:75:fd:53:aa:
31:63:b4:c8:42:a7:f4:50:37:5a:71:7d:71:1e:c5:
ac:cf:71:95:0b:73:f8:83:31:28:bb:65:de:f0:fd:
a7:66:61:2c:2a:54:74:5c:09:d2:9f:09:6b:97:6e:
71:9c:74:fe:57:b4:34:7e:2b:89:66:9e:80:f6:4f:
e6:4e:e7:13:bf:2b:14:af:71:90:18:26:82:f5:4b:
93:d8:ba:12:32:55:aa:72:34:a3:41:eb:52:f7:06:
b5:f5:16:3c:b6:c0:14:7a:01:8b:6c:9b:25:95:74:
a0:8e:6d:20:90:8f:43:c8:5a:4a:2c:da:ed:cf:7f:
8a:b9:88:59:02:65:3e:ec:61:10:ca:d8:50:7c:10:
17:2e:d1:05:0d:0f:02:82:66:a6:0e:98:ba:3b:4f:
e2:6c:cb:1b:8c:a0:53:d5:8c:ea:dd:fd:bf:15:09:
4f:14:b8:fb:5a:38:a7:2f:a0:66:19:2e:b3:d3:f7:
83:69:fb:d6:c1:74:e0:b1:66:8e:6b:eb:32:9e:0b:
68:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B0:71:72:2B:FE:82:A8:1B:B1:D8:C0:0C:99:25:76:11:90:8C:0A
X509v3 Authority Key Identifier:
keyid:DF:51:5B:59:15:E8:33:EE:DB:44:4D:19:C3:0A:00:F0:97:81:5A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b9:7e:18:c0:35:8c:3c:fb:fd:9a:74:0a:f8:c0:0c:80:50:
4d:b1:1e:c0:63:9c:28:ad:04:fa:97:a9:22:7e:3e:98:16:37:
95:7a:54:8c:9d:54:8f:fd:e4:91:da:ed:63:c1:9c:97:13:e7:
92:ac:63:f3:c4:9d:ce:81:a7:84:19:0e:05:e0:9a:f8:da:c0:
36:3f:86:d7:03:58:22:c1:9f:51:97:66:2d:a5:cf:79:64:fa:
67:0b:70:dc:58:32:0e:17:47:01:58:9b:ec:0d:42:38:fa:07:
7a:e2:21:fa:ff:69:9b:76:66:66:3f:4a:88:76:a1:d7:f3:7e:
08:84:86:e1:eb:97:f3:34:46:cd:57:5d:1f:5e:24:9a:08:e9:
cd:c9:f7:9b:ee:ab:bc:5a:31:5e:4a:1c:53:93:a3:c3:c1:15:
51:45:ed:83:da:a5:49:ad:df:9e:2c:2b:cf:49:8c:01:ae:13:
b6:8b:68:16:a4:2f:9b:e5:5f:2a:a3:fe:9c:4b:30:e3:04:cf:
b4:65:c5:7f:f9:98:b5:db:1d:86:5f:78:44:cd:a3:a0:24:ea:
ce:17:ed:24:0b:07:f3:1d:1a:22:a9:3a:2b:fd:36:b4:41:fe:
3e:d1:24:98:f2:f3:19:53:58:d8:43:cd:f6:c7:bb:85:34:31:
2e:d3:e1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:52:01 2026 by rpki-client