
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
File: 31FHCxXowUGvL6hGoowDs4WRurQ.mft (raw, json)
Hash identifier: q4/83ockvYyb1Z8BfPYVU8T819sV98FyhcK024n+HdM=
Subject key identifier: EF:55:7E:CC:CD:BF:0E:27:18:9A:6F:42:78:D3:AD:62:1F:2E:54:18
Authority key identifier: DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4
Certificate issuer: /CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
Certificate serial: 01F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
Manifest number: 01DD
Signing time: Sun 05 Apr 2026 03:09:37 +0000
Manifest this update: Sun 05 Apr 2026 03:09:37 +0000
Manifest next update: Sun 12 Apr 2026 03:09:37 +0000
Files and hashes: 1: 31FHCxXowUGvL6hGoowDs4WRurQ.crl (hash: lvuWgMx+mbcRpOfi0CyCahbvEfJsa+WwFL/Yjvtq1QA=)
2: 367E2CC86E2F11EE9F5DEF32C4F9AE02.roa (hash: ZY1siwjbqnQaZCIx96bLhb0d0HA6YypX15NteDeXL0o=)
3: 361777766E2F11EE9F5DEF32C4F9AE02.roa (hash: 6r9HMe5N7O3EO/hoVyMLGjAo1zMWyRsh6cOTtVL/RMY=)
4: 7B50FA5EA13911EF8B634635C4F9AE02.roa (hash: 9GGpKqMuP60pZTecgihCPtCUwjJQr1u5VITWHt4kvQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl
rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:09:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 496 (0x1f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB7E9, serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
Validity
Not Before: Apr 5 03:09:37 2026 GMT
Not After : Apr 12 03:09:37 2026 GMT
Subject: CN=69d1d271-9477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:8d:91:e7:10:b3:db:42:68:12:91:56:1c:
cf:e5:f4:18:fb:b0:89:8e:c0:0f:e0:be:62:4f:3b:
d6:8a:2d:e7:f0:93:b9:c1:55:fc:50:64:60:44:10:
71:c8:d8:b2:2f:9e:00:68:38:09:13:fc:a8:68:48:
cc:f9:3d:be:fb:48:a1:c0:31:a8:cb:09:a5:96:5f:
9c:5a:2e:da:34:a2:39:c6:f1:26:ce:8c:34:34:fa:
80:80:f5:31:fd:35:14:1d:93:dd:0a:cb:98:f4:33:
94:52:74:1d:fe:b4:84:d7:5e:74:33:8c:f1:86:93:
07:48:81:df:4d:31:b1:e3:18:98:3d:90:f1:d6:1f:
76:04:8b:cc:1c:97:63:c7:32:46:0a:58:0f:92:7d:
b0:7d:c5:ba:88:d4:c3:14:b0:6b:cc:d2:7a:13:4e:
cd:89:9b:1b:99:df:48:e9:da:bb:e2:38:ea:14:09:
97:ca:fe:57:bf:b7:55:85:e6:b2:55:2f:50:32:11:
33:bf:02:cb:65:9f:fe:67:43:c1:df:f8:e2:01:38:
9f:7a:ff:c1:eb:31:ac:e4:39:f1:8c:a3:47:a9:4c:
76:c1:19:65:5e:82:74:76:67:3a:eb:ef:82:ee:26:
07:c9:8a:5e:ad:d5:da:5d:f3:e2:87:dd:1a:e4:8a:
fe:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:55:7E:CC:CD:BF:0E:27:18:9A:6F:42:78:D3:AD:62:1F:2E:54:18
X509v3 Authority Key Identifier:
keyid:DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3a:0d:fc:3e:5e:47:3e:65:ec:aa:0b:25:de:43:bb:10:c2:
4a:53:48:51:3e:5e:5c:fb:1a:5f:6a:a9:06:50:11:76:bb:f1:
cd:3d:5e:a8:92:cb:82:2c:1d:cf:36:a8:33:10:ff:e2:9d:7b:
c3:d7:75:49:c1:cb:5d:07:d5:2d:95:0e:ee:55:53:7a:07:ea:
d3:01:9c:0d:4e:13:3c:5e:0c:85:11:49:4c:fc:e4:fc:c3:81:
17:e4:c7:ff:d8:70:25:ba:27:0d:fa:3e:67:39:9a:8f:ff:10:
64:bf:9c:9d:f1:7b:b9:cc:56:96:7d:3d:7a:dd:21:bf:49:05:
8a:dc:b6:ab:81:c6:19:d2:d0:d3:02:af:cf:6f:73:05:39:51:
9e:c9:08:49:1b:23:e0:15:8e:a5:71:c8:5f:ff:2f:87:7c:ce:
75:82:9d:ab:48:20:1b:21:08:b4:44:48:af:33:0e:dd:24:11:
32:b5:72:b3:30:61:94:ed:ad:78:e9:21:a2:32:53:c7:83:03:
11:22:72:4f:a3:c3:75:7b:d0:1a:5c:4b:de:37:22:86:af:88:
29:d7:9e:6e:9e:bc:f8:5d:55:19:91:c2:ac:70:3f:64:7b:6f:
c7:e2:9a:e6:9a:f6:48:81:24:6c:3b:ab:ec:8b:e0:98:57:5f:
29:44:7b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:55:08 2026 by rpki-client