
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
File: 31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json)
Hash identifier: 7hUTAEeOQKuMVgk7wEOpa7KnuqO+dThk7a+bNAi9oNc=
Subject key identifier: B8:0E:63:45:24:D8:66:94:15:D3:60:5E:A7:67:EE:8C:63:E2:62:3C
Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
Certificate issuer: /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
Manifest number: 0143
Signing time: Fri 17 Jul 2026 06:36:20 +0000
Manifest this update: Fri 17 Jul 2026 06:36:19 +0000
Manifest next update: Fri 24 Jul 2026 06:36:19 +0000
Files and hashes: 1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: qVs/R9Zj1kBYu35HQM+4CyxxUNDJ31yiWCfoC+wJRWc=)
2: 42230DF42DE211F0A991F83DC4F9AE02.roa (hash: yYz8vPsSQcwgOuF6A+VEinnO0ZhPnyp/BhHCVoBW8aw=)
3: 934C7D46FBAF11F08EB01E575F6F56BC.roa (hash: T7EaNfKZqoPd4uuGaZYXGqpfHmxAJUJXEQfDEFPp/W4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:36:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Validity
Not Before: Jul 17 06:36:19 2026 GMT
Not After : Jul 24 06:36:19 2026 GMT
Subject: CN=6a59cd64-f769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:bd:ab:56:be:53:04:97:fb:77:eb:e1:27:13:
e0:56:3b:59:aa:a8:94:6c:db:12:3c:dd:5a:41:4d:
4d:b1:98:6c:e0:8f:8f:58:60:16:2c:7f:57:a1:05:
11:e7:a0:55:00:de:74:dc:84:15:19:1f:30:68:7c:
7c:04:f8:ad:f3:fb:3e:e6:f3:06:05:b2:df:b7:9f:
32:d4:82:b0:c7:8a:6f:ef:3c:91:f0:45:76:07:37:
e2:bb:04:82:36:fd:11:5d:e1:f9:92:b9:8b:28:8b:
22:93:2b:8c:ec:cf:4e:d7:fe:bf:fd:5a:1a:a8:47:
7a:76:f4:eb:48:c0:0e:1d:ef:c6:48:6b:5b:75:b7:
96:43:f3:19:c9:85:e6:92:ba:c0:72:7d:64:ac:78:
37:d4:e8:96:0e:59:94:9c:94:78:85:da:65:09:bd:
f4:26:ad:be:99:41:e9:2e:f0:c0:f3:55:2f:b3:a8:
8c:51:20:22:56:34:98:7e:10:f5:34:e9:da:d1:e6:
7f:eb:a4:40:b7:20:62:77:45:56:bf:2c:4f:51:be:
73:1f:08:7f:f6:b2:15:3e:5d:bb:dc:f0:7d:31:9f:
ca:94:8a:c6:fd:b2:f7:62:d3:c5:fc:55:1e:86:b6:
2e:0b:a3:f3:11:45:83:83:91:97:c4:2a:a0:c6:4b:
88:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0E:63:45:24:D8:66:94:15:D3:60:5E:A7:67:EE:8C:63:E2:62:3C
X509v3 Authority Key Identifier:
keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:5f:35:52:ed:7f:bf:73:df:39:ae:d1:ae:29:bd:22:9f:45:
7c:40:8d:fe:7d:20:04:41:b2:80:ac:53:f0:fe:b9:9c:09:f6:
3a:f2:7b:0e:8b:84:34:36:0b:0a:be:9a:c0:5b:56:fe:c0:b9:
17:98:fa:36:a1:2e:c0:49:63:82:ad:21:e1:80:1f:4d:bc:fd:
d6:5a:3c:21:e1:74:8b:e6:5b:d0:bc:6e:43:bb:48:b4:c3:52:
c4:0b:16:49:e1:2a:63:e9:55:33:40:74:91:35:ea:a4:e6:96:
e0:22:81:44:3a:e2:88:1f:64:7e:03:ff:8f:c0:a4:8b:03:a2:
52:a3:7d:b9:80:af:97:51:75:74:9e:5b:53:bf:94:e6:65:87:
33:92:77:54:9c:8a:d0:cc:ee:40:fd:45:e3:2c:4f:43:46:74:
c3:f2:54:ee:f0:c9:ea:fa:aa:1c:0c:f0:70:0f:22:dd:f5:4f:
92:dc:92:29:5f:df:b8:8c:c6:26:6c:4a:ec:a4:52:a1:59:cd:
f2:36:e8:e5:cd:b6:bd:db:5f:a7:f7:10:c3:83:1a:35:9f:85:
3d:a4:ad:51:d7:ec:26:c3:91:17:b8:bb:93:1d:77:a2:b5:8e:
41:cb:3a:7b:26:3b:7d:74:b1:d5:03:87:bd:f0:41:e4:0d:38:
a8:ac:3d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:09 2026 by rpki-client