
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
File: 31FHCxXowUGvL6hGoowDs4WRurQ.mft (raw, json)
Hash identifier: j3C3jQDOhOzpnHfw20LrLvTylTtL7uA/UgHMTlBTq5U=
Subject key identifier: 7A:8C:53:77:58:EE:91:10:5E:05:9A:51:2B:FF:36:75:68:A4:00:A8
Authority key identifier: DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4
Certificate issuer: /CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
Certificate serial: 0249
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
Manifest number: 0236
Signing time: Sat 19 Sep 2026 02:52:51 +0000
Manifest this update: Sat 19 Sep 2026 02:52:51 +0000
Manifest next update: Sat 26 Sep 2026 02:52:51 +0000
Files and hashes: 1: 31FHCxXowUGvL6hGoowDs4WRurQ.crl (hash: f95Du23AJRGAVLTXGXhaEQYLjqVWqN13O9O/Va/snCM=)
2: 7B50FA5EA13911EF8B634635C4F9AE02.roa (hash: 9GGpKqMuP60pZTecgihCPtCUwjJQr1u5VITWHt4kvQc=)
3: 367E2CC86E2F11EE9F5DEF32C4F9AE02.roa (hash: ZY1siwjbqnQaZCIx96bLhb0d0HA6YypX15NteDeXL0o=)
4: 361777766E2F11EE9F5DEF32C4F9AE02.roa (hash: 6r9HMe5N7O3EO/hoVyMLGjAo1zMWyRsh6cOTtVL/RMY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl
rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 585 (0x249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB7E9, serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
Validity
Not Before: Sep 19 02:52:51 2026 GMT
Not After : Sep 26 02:52:51 2026 GMT
Subject: CN=6aadf903-733d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:86:87:89:9e:69:eb:ee:1a:85:8c:92:33:
6f:b2:38:11:28:0d:f2:3d:22:da:84:14:db:a3:19:
4c:9a:fe:2d:fc:00:fa:ae:aa:41:83:54:7c:2e:60:
a8:27:9a:c0:a5:39:e6:5e:b3:e1:8f:fb:44:2e:2d:
a8:db:fe:2c:35:f8:76:22:f7:0a:a9:a7:d5:bc:fe:
88:d2:b8:ac:7d:fe:54:4d:3b:65:48:1e:d1:5e:83:
1f:e5:05:13:1b:4c:7a:2b:d3:13:44:80:09:89:88:
4b:0f:ad:89:1d:07:24:10:db:02:2f:7f:47:3b:b3:
91:59:f9:1d:92:4a:c5:c4:f2:18:50:5b:45:c1:7b:
a1:a7:20:40:4e:b5:d9:76:86:eb:c0:09:2b:d2:75:
a2:3e:50:dd:51:ac:18:bf:4e:88:7f:4f:58:4c:85:
13:cc:29:e7:a9:b8:82:c9:a1:3a:68:50:67:05:12:
98:8e:28:ef:4d:9f:15:6b:f1:0e:13:96:07:a2:d1:
0d:6c:6b:80:c7:f2:71:51:95:7a:e2:df:3a:96:41:
eb:35:77:6b:e8:56:18:23:eb:d7:af:aa:51:b9:1a:
a8:2b:14:71:eb:a6:a4:60:bd:bd:de:87:8d:f9:8b:
c2:ec:cd:82:89:24:d9:85:9c:ac:9f:83:22:93:c0:
3e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8C:53:77:58:EE:91:10:5E:05:9A:51:2B:FF:36:75:68:A4:00:A8
X509v3 Authority Key Identifier:
keyid:DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:fe:29:7c:32:20:7a:05:4c:53:16:c9:17:f5:33:a8:a3:63:
db:9d:9c:3e:1e:39:18:09:a7:f4:50:2f:b9:6d:32:55:9a:12:
2a:00:3d:a2:fb:b0:ff:74:31:95:1a:70:67:b1:6e:8e:04:05:
30:e4:fc:a4:02:0c:dc:f2:1a:ba:cd:df:7b:0a:5b:5a:2b:05:
2e:6e:bd:6e:fc:3d:7e:ab:ca:1c:d5:3d:39:68:5a:03:40:1f:
ba:ae:d5:84:a0:87:08:e4:e8:d0:99:00:9c:94:4d:c2:4a:c0:
30:a0:15:c5:67:7e:22:55:4e:66:9c:0c:6c:e3:09:07:3d:9b:
96:97:31:7a:7d:2c:c1:15:f4:3e:41:dd:bc:a2:d5:aa:bf:3d:
8e:26:52:65:4e:46:84:6a:f6:03:50:53:cf:25:6d:02:58:81:
f2:aa:e4:ce:a4:a3:1a:f9:f0:23:ad:79:0b:70:e4:0b:b7:e9:
e7:26:1e:0d:53:5f:8a:27:73:63:66:ce:d7:50:bb:ee:1d:09:
5f:de:e3:97:36:58:c4:e2:70:3c:3f:4f:31:1a:21:be:8c:94:
be:53:c0:83:69:fa:be:ae:8c:5e:ee:0d:fb:eb:de:ce:fb:4c:
3c:d1:6e:9f:96:2d:de:d3:04:17:c8:23:18:09:c9:d1:7a:c5:
c5:8a:13:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 00:48:23 2026 by rpki-client