
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
File: 31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json)
Hash identifier: GOq/RRvRAjxPqYXKBruMxbhtHdfrZUWkd/NQIq201/k=
Subject key identifier: ED:A0:72:D2:F7:4D:15:18:E5:1B:5F:49:97:B0:F0:2E:2A:EA:86:E3
Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
Certificate issuer: /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Certificate serial: 011E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
Manifest number: 0110
Signing time: Sun 05 Apr 2026 05:29:20 +0000
Manifest this update: Sun 05 Apr 2026 05:29:20 +0000
Manifest next update: Sun 12 Apr 2026 05:29:20 +0000
Files and hashes: 1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: fNoF53iRcl81zlITDqiz8sydsxGXEcCPfW1JnMQmRIw=)
2: 934C7D46FBAF11F08EB01E575F6F56BC.roa (hash: T7EaNfKZqoPd4uuGaZYXGqpfHmxAJUJXEQfDEFPp/W4=)
3: 42230DF42DE211F0A991F83DC4F9AE02.roa (hash: yYz8vPsSQcwgOuF6A+VEinnO0ZhPnyp/BhHCVoBW8aw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Validity
Not Before: Apr 5 05:29:20 2026 GMT
Not After : Apr 12 05:29:20 2026 GMT
Subject: CN=69d1f330-2624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:27:44:23:ef:a8:16:d2:4e:bf:19:ae:32:
81:5f:bf:d6:31:20:e1:d2:43:95:0f:79:f9:65:47:
26:53:e7:22:da:ec:ad:b6:91:08:9f:dd:b6:3c:be:
ba:9b:da:4d:6c:39:3a:e5:5f:d2:c7:4a:a9:01:cd:
17:16:fe:fa:3d:40:b1:a7:8b:5f:cb:68:31:69:46:
a9:fa:85:30:09:33:cc:fc:4c:85:b0:1e:24:1a:e2:
18:f9:d7:8c:a7:8a:f5:44:e8:6e:61:12:c6:8a:46:
54:53:d2:9a:ad:c8:32:f5:ce:90:36:1f:d1:c3:4e:
cf:90:a7:3a:c7:ab:e5:21:e3:7d:a9:2d:e8:fc:97:
1f:a9:cc:79:9e:c5:0f:f5:cc:85:78:96:a9:2a:45:
6e:84:2a:83:79:39:91:ce:93:da:49:88:b2:b6:0d:
cb:35:82:1e:ad:16:7a:37:eb:f6:8d:d1:6e:e9:79:
68:7c:a5:2f:d3:61:42:01:43:23:00:ef:cd:70:a7:
dd:99:9c:e7:1b:59:1e:c9:36:ad:16:b2:2e:29:7f:
ba:68:28:72:b2:1c:3d:f4:76:22:2d:b5:3c:42:d2:
a8:26:24:37:70:34:2b:3a:df:f7:36:9b:34:f3:7c:
3e:1b:98:9f:4b:7f:1d:1a:25:16:2a:75:3a:bd:d3:
b3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A0:72:D2:F7:4D:15:18:E5:1B:5F:49:97:B0:F0:2E:2A:EA:86:E3
X509v3 Authority Key Identifier:
keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c0:a5:27:5b:ea:45:b5:4c:90:9d:59:c5:72:be:66:a2:b6:
2a:0b:1e:65:3a:7c:98:dc:15:25:29:4d:6f:24:85:19:ce:ce:
12:e7:3a:50:6d:05:58:69:52:c2:85:0a:77:5d:ad:7e:4d:03:
b7:58:b6:a0:1e:63:81:21:8e:5a:a6:99:28:db:53:29:fe:5c:
5c:bf:c9:ec:25:6a:df:2f:f2:e3:94:a1:8c:ab:43:f7:4e:85:
83:8e:91:57:ab:4a:58:f8:0d:f5:6a:72:0d:c4:05:80:34:7a:
4f:94:cb:c5:21:9c:a5:3f:d9:ce:78:de:4a:73:66:79:5b:87:
d9:ea:e2:b5:7c:97:f2:0a:ff:b4:0e:fa:42:87:79:98:75:b0:
e3:d3:96:ee:cc:75:08:14:a0:88:1e:26:c8:c2:fa:0e:9f:72:
63:05:f1:9c:78:db:8d:64:52:5c:b1:9b:3d:b3:20:14:76:b7:
65:b2:06:bf:1c:df:cd:e1:78:83:cb:25:1d:16:86:77:fc:a9:
ca:3f:95:2d:82:e1:de:8a:8a:86:cb:36:5b:fd:85:1d:e8:17:
b5:3b:34:9c:67:28:ad:f1:ba:93:9e:23:dc:d6:42:19:70:fe:
a4:21:ee:dd:19:00:94:ac:11:12:70:7d:86:0a:0d:14:28:4e:
29:12:52:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:11:49 2026 by rpki-client