
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
File: 31FHCxXowUGvL6hGoowDs4WRurQ.mft (raw, json)
Hash identifier: H08asrBSbIh3D1pPO2MLTmnJswRdYt8jnSh91KekXVs=
Subject key identifier: 5E:9D:C7:81:97:D4:E4:75:5B:73:9C:51:45:E7:B7:C1:EA:11:4C:66
Authority key identifier: DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4
Certificate issuer: /CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
Certificate serial: 0228
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
Manifest number: 0215
Signing time: Fri 17 Jul 2026 04:02:43 +0000
Manifest this update: Fri 17 Jul 2026 04:02:42 +0000
Manifest next update: Fri 24 Jul 2026 04:02:42 +0000
Files and hashes: 1: 31FHCxXowUGvL6hGoowDs4WRurQ.crl (hash: 4PFrUhgmyLXnREK+cqwZaU3uOfvC/R8LaB/M0mwwEoQ=)
2: 361777766E2F11EE9F5DEF32C4F9AE02.roa (hash: 6r9HMe5N7O3EO/hoVyMLGjAo1zMWyRsh6cOTtVL/RMY=)
3: 7B50FA5EA13911EF8B634635C4F9AE02.roa (hash: 9GGpKqMuP60pZTecgihCPtCUwjJQr1u5VITWHt4kvQc=)
4: 367E2CC86E2F11EE9F5DEF32C4F9AE02.roa (hash: ZY1siwjbqnQaZCIx96bLhb0d0HA6YypX15NteDeXL0o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl
rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 04:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB7E9, serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
Validity
Not Before: Jul 17 04:02:42 2026 GMT
Not After : Jul 24 04:02:42 2026 GMT
Subject: CN=6a59a962-c052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2b:6d:b8:f6:01:51:39:aa:8e:fc:1c:20:bc:
19:e2:d9:db:91:00:6c:7b:e5:1e:ed:a2:ab:af:eb:
b3:51:27:cb:c7:19:fc:0f:70:e6:66:1f:17:b3:07:
81:39:d1:27:93:ee:78:52:ff:4a:47:85:20:9d:7b:
cf:5f:6f:b6:cf:a3:b3:9a:c8:94:2a:c2:bd:04:c6:
22:72:95:4a:8a:e1:5c:20:6a:5d:4d:c6:a0:eb:2a:
d3:3a:d6:40:ab:92:70:b6:be:9a:60:c7:8f:a7:2f:
70:f6:7f:76:e4:22:b3:ce:dc:ea:83:e4:67:e0:4a:
46:cc:f0:70:da:b4:58:dc:4f:4f:38:91:44:f2:bb:
99:15:76:20:ca:ef:38:a4:3e:77:8c:93:1f:34:55:
3e:92:42:62:8e:b4:92:ff:5c:5e:0f:74:f0:7b:7e:
d3:e6:82:9f:8d:73:a1:e2:44:8d:d5:4d:1e:ca:7f:
a6:59:0d:a5:44:37:c9:fc:77:e7:93:e0:7a:e6:3b:
2d:bb:83:67:69:1f:03:3c:fe:d9:f0:c0:41:5a:db:
0c:f9:da:36:66:bb:eb:73:7b:67:98:d7:6b:03:b4:
12:a1:32:c9:ea:a4:07:26:19:74:73:99:d5:4a:1e:
b8:9a:8c:4f:a9:47:3a:fe:df:6a:1b:1c:ef:d3:3c:
f4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9D:C7:81:97:D4:E4:75:5B:73:9C:51:45:E7:B7:C1:EA:11:4C:66
X509v3 Authority Key Identifier:
keyid:DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:65:83:78:96:af:01:d6:1d:f6:1a:d8:94:eb:52:62:ea:67:
c6:e1:05:f3:5e:d0:b6:0c:12:29:34:0e:ab:f3:e3:98:e8:bf:
e3:9c:57:45:5a:d8:dd:99:bb:3f:f5:f4:d0:0d:d6:47:95:96:
73:de:23:b9:a0:ef:c1:d6:01:20:0b:54:4b:64:fb:95:49:e8:
a1:2d:a8:e5:d3:cc:17:7a:f8:2c:df:0b:f5:55:ee:08:2e:1e:
d9:8b:f8:00:70:fe:4d:f5:b4:af:ad:20:b8:40:e5:df:05:28:
37:53:5a:5b:eb:c6:9a:f3:64:f7:76:e6:64:ca:86:e2:e1:9b:
00:78:77:0e:62:6c:f2:1d:07:37:c7:70:cf:e0:12:c7:37:95:
21:d4:12:bf:3f:83:bc:fb:7c:bd:ab:f5:2d:0d:50:26:4d:61:
39:ee:59:af:f4:50:07:4d:f3:8e:94:54:57:3b:c4:4f:82:a3:
a6:df:d6:fa:24:d8:bc:95:40:de:57:95:47:ee:86:da:50:33:
c2:bb:0a:5c:a1:e3:0c:94:d0:b8:df:28:48:d8:01:82:3b:a2:
d2:0d:d5:c3:3e:cd:da:1f:a9:2b:e2:86:ec:2b:02:1f:de:6b:
de:16:aa:52:e2:ba:1e:88:77:62:9e:b9:3e:c4:13:a4:24:9d:
27:37:8e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 12:14:56 2026 by rpki-client