
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
File: 31OLuqk3tpugC7J7caS3dubkGf4.mft (raw, json)
Hash identifier: WcZ40BTO9n7UGcCagRDwQKAi/YjhVq61etl2WofaxNs=
Subject key identifier: 06:40:27:E5:30:36:74:EC:39:29:1C:05:7C:94:29:91:1D:EC:29:A9
Authority key identifier: DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE
Certificate issuer: /CN=A9191170/serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
Certificate serial: 0286
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
Manifest number: 027E
Signing time: Sun 25 Oct 2026 02:15:10 +0000
Manifest this update: Sun 25 Oct 2026 02:15:09 +0000
Manifest next update: Sun 01 Nov 2026 02:15:09 +0000
Files and hashes: 1: 31OLuqk3tpugC7J7caS3dubkGf4.crl (hash: AdCIeM8BF1B33jMC6K9Y4jUVEWvOp+IDy1mOExDdTUA=)
2: 086823BE07B911F0875CC733C4F9AE02.roa (hash: w2WRCpMqJoD84OqoMD/qMy/kVRGMfZ+y1J2KKgIaseE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl
rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 02:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 646 (0x286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191170, serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
Validity
Not Before: Oct 25 02:15:09 2026 GMT
Not After : Nov 1 02:15:09 2026 GMT
Subject: CN=6add662e-81dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:42:e6:66:8b:19:11:13:3f:3b:bc:68:2b:
e9:c3:92:01:17:ae:3a:8a:42:62:5c:b7:c4:c7:5a:
fa:71:2a:9b:0d:26:18:8f:c0:78:34:e4:9b:26:85:
05:62:04:50:ef:ba:35:8a:5d:ae:d7:79:3f:e4:77:
53:14:17:e3:ec:5e:1a:f4:5b:6b:9f:e5:80:74:2a:
a1:79:29:f8:18:99:06:c3:ec:94:1d:1e:6e:b6:43:
7a:04:48:d6:51:6f:d4:73:fd:44:a8:51:f9:fc:ab:
d0:c5:da:15:52:59:fd:ef:a7:7b:b3:52:3d:48:ea:
33:3b:11:3d:b9:a1:98:62:91:1d:b9:1f:8a:4e:54:
94:74:f6:94:cd:be:46:fa:d5:77:c8:89:6e:aa:b3:
65:8c:ce:7a:63:43:97:96:7e:56:e4:f1:fb:52:4e:
0d:0b:e8:5a:4c:6f:61:0c:34:13:8b:1d:6a:50:b9:
d3:ea:9a:3b:ce:a3:22:c0:b5:eb:6c:cc:5e:ac:32:
dd:dd:d5:51:f9:ac:66:e5:c1:b7:f9:96:a6:55:61:
09:af:3f:6e:20:50:af:84:61:f9:30:39:80:bf:c6:
af:53:38:4e:18:46:e7:10:ae:90:e0:4b:b7:ad:66:
cf:d3:e6:72:8c:67:f8:4a:10:a0:b9:eb:0a:84:35:
df:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:40:27:E5:30:36:74:EC:39:29:1C:05:7C:94:29:91:1D:EC:29:A9
X509v3 Authority Key Identifier:
keyid:DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:c8:bc:54:0f:1d:6b:ca:0d:06:81:1a:d4:76:ef:39:5d:50:
7c:28:26:89:e3:f6:05:0f:18:f5:9b:1e:23:82:cc:dc:a7:45:
e6:11:dc:78:69:8b:9e:76:6c:6a:10:5f:42:40:2d:8a:20:0d:
45:84:8a:48:8d:80:0b:60:f7:8e:cc:58:55:9e:97:5c:4c:1f:
77:77:8f:2a:86:84:ba:f4:87:17:93:b2:31:ee:c7:bd:ed:74:
16:b4:23:fd:71:bb:5b:c4:35:e3:2e:b4:0e:e7:b3:46:6f:30:
aa:4c:ef:ef:e8:c2:1d:62:53:19:1f:91:97:cd:d2:3b:ec:50:
38:c9:ef:86:7f:16:7c:5a:df:52:5d:b0:de:c9:c4:e8:da:2e:
42:a2:28:1c:69:19:a3:90:f9:99:40:61:4f:77:12:5e:d7:bf:
3b:7c:f3:e0:d0:00:dd:3e:fe:88:a6:9c:cb:88:f3:bf:ae:00:
06:9f:73:14:f6:8d:40:ac:88:27:10:8c:c3:fd:ab:d5:1b:4f:
d1:6b:21:d3:b8:c6:63:3c:aa:a4:e3:8c:2a:6b:7a:6f:ea:2a:
d1:3e:15:6e:77:2a:88:f0:97:0f:85:65:2a:24:4b:27:27:3c:
48:ee:47:df:3a:a9:cc:0a:c7:1e:f1:1d:d9:93:2a:fe:9a:3c:
04:de:17:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:45:33 2026 by rpki-client