
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
File: 31OLuqk3tpugC7J7caS3dubkGf4.mft (raw, json)
Hash identifier: NK8jTkqfRE5TyBGE0A3nrHa9CXN4jPgxW8sFSfqn1KA=
Subject key identifier: E9:0D:20:7F:0F:24:B2:12:EA:0C:39:6C:E6:41:04:02:B8:FF:4A:45
Authority key identifier: DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE
Certificate issuer: /CN=A9191170/serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
Certificate serial: 0285
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
Manifest number: 027D
Signing time: Fri 23 Oct 2026 02:21:14 +0000
Manifest this update: Fri 23 Oct 2026 02:21:13 +0000
Manifest next update: Fri 30 Oct 2026 02:21:13 +0000
Files and hashes: 1: 31OLuqk3tpugC7J7caS3dubkGf4.crl (hash: NWKIL4yL+fK5qpaNS7VDsDE4pXleSP2McTagtkPv82I=)
2: 086823BE07B911F0875CC733C4F9AE02.roa (hash: w2WRCpMqJoD84OqoMD/qMy/kVRGMfZ+y1J2KKgIaseE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl
rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 02:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 645 (0x285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191170, serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
Validity
Not Before: Oct 23 02:21:13 2026 GMT
Not After : Oct 30 02:21:13 2026 GMT
Subject: CN=6adac49a-de66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:29:72:35:02:9d:ea:35:6e:6a:46:ff:c1:b6:
09:80:eb:55:30:0d:68:9c:b5:a7:77:f4:5c:71:48:
ab:6b:d0:1a:61:24:6a:b0:15:a2:c2:ca:74:59:84:
25:55:0f:98:13:9b:e3:8e:a8:95:05:67:ce:fa:24:
2a:24:d5:81:9e:76:ef:46:3e:36:61:8e:04:cf:f5:
1e:e1:48:a5:f3:cc:98:cc:9a:65:45:66:67:b1:92:
8d:82:7a:eb:0d:95:4d:17:86:ab:6b:40:ad:c0:3b:
a9:c6:7a:36:3b:fd:9b:08:30:0d:d5:85:b1:c7:28:
35:a8:88:51:c2:62:46:79:df:f8:e9:56:1c:c2:5d:
ba:e6:f6:f6:e0:c8:0b:b8:4d:90:13:27:21:29:66:
d6:5a:84:51:a5:ca:7a:87:37:37:a5:61:1e:28:21:
f5:05:15:0d:df:a9:69:e6:74:14:3f:1a:24:82:0f:
29:9e:ac:e3:1e:9a:ec:d1:59:20:0d:81:ff:be:b5:
f7:2a:8b:89:36:86:8a:30:6e:a4:42:5b:31:cb:af:
27:a0:67:e1:12:ba:5b:51:2a:7f:db:1f:ae:f2:10:
f4:09:9d:94:41:c8:ce:3a:4a:c0:65:54:7a:44:ed:
86:b2:e1:c0:ba:94:43:63:39:bc:0f:00:11:a1:d5:
0f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0D:20:7F:0F:24:B2:12:EA:0C:39:6C:E6:41:04:02:B8:FF:4A:45
X509v3 Authority Key Identifier:
keyid:DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:ab:4f:11:d0:35:0a:00:3d:3b:8d:52:1e:3e:a2:8e:ec:26:
4c:6d:f9:98:41:06:86:03:be:c9:56:ac:70:01:d8:8d:3c:b9:
ff:12:ae:75:10:89:c7:cb:b6:08:1e:a8:29:f0:a5:25:c6:9b:
20:7d:57:88:7e:4a:bb:40:20:bd:6b:3a:3d:26:48:d0:6e:47:
9f:e0:77:3c:37:4f:8a:95:33:0c:7c:10:74:19:43:01:95:60:
dc:f0:a6:f8:13:d3:9d:16:8c:10:a3:15:84:bd:aa:25:20:c3:
e8:04:e5:5b:0b:df:90:85:b8:bb:96:0a:24:9e:17:a8:cc:38:
af:d5:85:10:f0:d0:8c:56:51:e5:f2:14:34:52:96:e8:d5:4c:
d5:c0:fd:ee:f1:bb:f8:5a:ae:71:48:6f:9e:60:5c:da:f1:38:
25:59:9e:36:74:94:68:69:0c:4e:fe:0d:8f:8b:e3:2d:93:c0:
64:f6:e6:a7:95:dd:bf:98:bd:d6:19:4c:fb:62:e3:4d:2e:da:
6e:1a:0b:08:f0:c3:c1:4a:5c:c4:dc:68:44:95:d2:70:62:e1:
d0:83:ef:bf:b0:7f:d4:ed:3b:df:ba:84:02:66:90:cf:73:f8:
98:17:bc:b2:9e:3c:56:dd:3a:a5:da:58:44:6f:f6:15:7d:16:
b1:85:ca:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 02:45:45 2026 by rpki-client