
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
File: 31OLuqk3tpugC7J7caS3dubkGf4.mft (raw, json)
Hash identifier: ahbq4IitBdeHIzJ3xX5AslO8RzZTANWQ22OGH7T49bw=
Subject key identifier: 1C:F3:B0:9D:5F:0F:CB:39:9E:9F:32:30:46:D2:E6:D7:1D:AE:A8:36
Authority key identifier: DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE
Certificate issuer: /CN=A9191170/serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
Certificate serial: 0275
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
Manifest number: 026D
Signing time: Mon 21 Sep 2026 02:05:50 +0000
Manifest this update: Mon 21 Sep 2026 02:05:49 +0000
Manifest next update: Mon 28 Sep 2026 02:05:49 +0000
Files and hashes: 1: 31OLuqk3tpugC7J7caS3dubkGf4.crl (hash: 1jllujU3+rtmzfJCREkjoWg/gPRaTlM3/ZS5ULsItY8=)
2: 086823BE07B911F0875CC733C4F9AE02.roa (hash: w2WRCpMqJoD84OqoMD/qMy/kVRGMfZ+y1J2KKgIaseE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl
rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 629 (0x275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191170, serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
Validity
Not Before: Sep 21 02:05:49 2026 GMT
Not After : Sep 28 02:05:49 2026 GMT
Subject: CN=6ab090fd-286d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:db:a2:77:13:2e:b0:a3:33:20:c6:b1:41:4e:
d2:a1:c7:a8:23:1a:b1:a3:34:b6:53:04:9d:f7:a2:
2a:4d:66:d1:d1:92:ab:41:38:32:34:59:7c:48:d8:
84:2c:7f:7e:eb:29:12:86:6d:fd:2a:99:93:24:d1:
cd:3b:3f:24:54:7e:53:d0:f8:d0:72:e3:b6:3c:34:
ac:51:88:e9:90:0b:7f:b1:86:6b:a0:b6:7d:b6:e8:
db:22:78:9b:e8:86:c0:71:96:27:0f:0b:0b:76:6b:
a8:39:7a:35:62:2d:22:cf:ac:6e:bd:2c:08:e7:e1:
57:1e:83:ad:d2:a4:67:ea:fe:f3:0d:ab:58:34:87:
ff:2f:53:46:22:97:4b:80:02:73:2c:f1:27:bc:30:
aa:1d:bf:78:d1:c0:0a:36:c8:a6:25:3a:6a:5c:ad:
74:90:d0:1d:0f:06:fd:78:e5:03:bb:be:0b:0f:a7:
1b:3f:a6:7a:1d:a0:36:46:24:fc:2c:64:36:a5:da:
71:7f:44:14:d9:62:cd:c6:16:22:08:8e:0a:47:b8:
7c:99:2f:18:c1:31:49:14:18:12:28:52:0e:c1:b1:
0f:b7:f6:8b:ca:32:1a:a7:50:f3:c2:9e:54:2a:15:
99:18:c6:bb:9f:e8:e8:e4:0d:a4:27:b8:e0:de:b6:
fc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F3:B0:9D:5F:0F:CB:39:9E:9F:32:30:46:D2:E6:D7:1D:AE:A8:36
X509v3 Authority Key Identifier:
keyid:DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:dd:db:1b:4f:df:fc:ab:bd:32:b0:9e:cb:bc:67:e8:ef:6c:
1f:5c:9c:44:49:ed:5f:8e:0b:fb:a6:3a:51:d5:04:0f:14:ab:
80:3b:dc:98:7e:57:a5:41:7f:21:1f:f9:d4:f3:8d:1c:03:e2:
e3:2d:7c:6f:21:28:2a:1e:23:e5:0a:74:74:8e:b7:ee:ed:37:
1c:aa:38:2a:5d:b2:b9:47:eb:57:7b:09:75:33:8d:8b:d7:dc:
65:3c:85:01:5b:37:89:01:51:f0:31:58:5f:93:c5:d9:27:13:
a2:15:5a:1e:1b:41:39:f5:d7:c1:f1:2f:58:ba:b6:af:06:68:
e5:67:a2:9d:9f:63:0e:02:83:46:13:8f:a2:2c:77:53:01:d5:
73:80:89:6e:63:5c:98:3f:68:46:25:ad:e5:aa:0f:5a:5d:80:
4b:c4:f3:c9:41:59:4e:e0:df:88:92:b9:1d:c9:b3:28:6b:0b:
3f:f5:26:a8:58:2e:09:45:aa:ad:72:d5:36:4e:67:13:59:96:
ea:81:f9:c0:cd:73:93:f7:88:5b:06:bd:bd:78:7f:a5:34:85:
36:dc:e0:45:ac:58:5d:bb:91:f7:ac:de:df:ba:91:33:e5:ca:
eb:b6:0f:63:a1:7b:81:89:0f:be:9f:92:91:46:5a:59:fe:a6:
76:ba:59:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:27:16 2026 by rpki-client