
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
File: 31OLuqk3tpugC7J7caS3dubkGf4.mft (raw, json)
Hash identifier: a34EVLBNwgYG0FqZ8Uol8uAD1zqWTo/lGmt5vJtQ/sg=
Subject key identifier: DE:58:58:3F:14:D2:E3:C2:03:8B:3C:75:1E:2E:D2:3A:77:B5:A5:9B
Authority key identifier: DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE
Certificate issuer: /CN=A9191170/serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
Certificate serial: 0224
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
Manifest number: 021D
Signing time: Sun 19 Apr 2026 02:33:25 +0000
Manifest this update: Sun 19 Apr 2026 02:33:24 +0000
Manifest next update: Sun 26 Apr 2026 02:33:24 +0000
Files and hashes: 1: 31OLuqk3tpugC7J7caS3dubkGf4.crl (hash: AsjNKG6WR60cwgYx5nvrfVQQR/kzTysR4qJ2QAlJ1Dw=)
2: 086823BE07B911F0875CC733C4F9AE02.roa (hash: LwADRNH2zXke5XeuF1Oo6gjD6e4ZUXmZaNArwtimmJA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl
rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191170, serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
Validity
Not Before: Apr 19 02:33:24 2026 GMT
Not After : Apr 26 02:33:24 2026 GMT
Subject: CN=69e43ef4-efdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:82:98:d5:f4:50:80:41:46:78:69:70:76:cf:
b8:78:32:82:e7:ac:37:de:cc:01:9d:bb:cb:e9:81:
f1:64:c4:2f:7f:ea:3c:69:7e:0a:30:d2:42:17:60:
38:92:17:7b:00:e3:c0:84:af:3b:59:f0:3e:fb:70:
ec:54:f1:75:b1:f8:b8:f1:55:f2:40:6f:a0:ab:18:
2b:bc:6e:b3:7c:dc:0c:c5:b3:64:ba:b5:8d:e9:b4:
22:dd:4b:00:eb:46:c4:be:9d:95:a6:32:41:1c:f5:
d0:d2:54:77:57:8c:68:f4:5e:b8:65:e7:9a:14:9a:
d3:b7:86:5d:2e:3c:16:07:ac:35:20:6a:9f:1e:61:
30:44:42:cc:71:24:09:3f:8c:1c:df:9b:e6:7b:b8:
ca:f9:fd:53:72:98:d5:cb:2a:33:5f:dd:6f:bd:49:
bf:5f:56:7c:29:af:17:5b:91:f0:1e:4c:61:94:a2:
b2:f6:6f:3e:43:77:e6:46:ca:71:c2:56:22:03:c9:
ff:38:45:48:5a:7c:fe:9e:ca:9f:8d:e1:89:64:77:
92:64:7b:66:63:e6:31:1d:17:cf:cb:8a:a7:4c:82:
97:2f:b5:b9:54:8e:a3:b0:f1:8e:18:81:fb:31:8f:
9b:3d:4f:88:51:a8:46:aa:23:f9:7e:f1:2b:fc:b6:
19:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:58:58:3F:14:D2:E3:C2:03:8B:3C:75:1E:2E:D2:3A:77:B5:A5:9B
X509v3 Authority Key Identifier:
keyid:DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:0b:c8:c2:1d:23:a2:04:4e:cf:24:02:6a:b4:cd:74:e5:d4:
0f:18:11:8d:d9:11:24:ea:e0:ef:ab:68:67:cd:dc:e1:1b:22:
e7:1d:45:e1:df:15:ce:f0:4e:67:dd:0b:97:37:2d:a7:93:7e:
f7:9e:bd:7b:e0:ac:71:59:57:21:75:65:62:0d:40:99:21:40:
a0:65:c7:13:15:f9:f6:2f:17:f1:c4:f0:b5:0b:3d:ce:20:93:
fc:55:e2:5d:af:21:d1:8c:47:19:39:c1:aa:c0:ff:4c:ed:03:
c8:45:78:cc:31:1c:b9:99:a5:eb:20:73:f5:2e:e2:85:6b:c6:
25:a1:93:53:e0:da:5b:4c:a1:26:ec:22:98:08:db:10:36:3f:
2f:75:cd:fb:97:c4:b7:c7:d6:8d:7b:09:71:fe:40:55:5d:b8:
f2:dc:de:16:5f:1a:50:90:32:be:ec:d6:d5:48:dc:e0:23:e2:
d5:77:21:6d:92:e3:c8:c7:2b:32:74:9f:27:7f:71:ab:d2:1a:
c3:b7:d3:c0:24:f0:83:75:45:bc:ab:a2:3b:1c:98:94:97:70:
fa:bc:e2:a4:60:65:4e:ae:57:dc:60:2c:11:ff:0d:db:f6:9f:
fe:f2:56:23:78:1d:3d:f6:7b:c5:bf:8f:29:bb:b7:24:ff:ed:
42:45:82:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTExNzAxMTAvBgNVBAUTKERGNTM4QkJBQTkzN0I2OUJBMDBCQjI3QjcxQTRCNzc2
RTZFNDE5RkUwHhcNMjYwNDE5MDIzMzI0WhcNMjYwNDI2MDIzMzI0WjAYMRYwFAYD
VQQDEw02OWU0M2VmNC1lZmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA24KY1fRQgEFGeGlwds+4eDKC56w33swBnbvL6YHxZMQvf+o8aX4KMNJCF2A4
khd7AOPAhK87WfA++3DsVPF1sfi48VXyQG+gqxgrvG6zfNwMxbNkurWN6bQi3UsA
60bEvp2VpjJBHPXQ0lR3V4xo9F64ZeeaFJrTt4ZdLjwWB6w1IGqfHmEwRELMcSQJ
P4wc35vme7jK+f1TcpjVyyozX91vvUm/X1Z8Ka8XW5HwHkxhlKKy9m8+Q3fmRspx
wlYiA8n/OEVIWnz+nsqfjeGJZHeSZHtmY+YxHRfPy4qnTIKXL7W5VI6jsPGOGIH7
MY+bPU+IUahGqiP5fvEr/LYZowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN5YWD8U
0uPCA4s8dR4u0jp3taWbMB8GA1UdIwQYMBaAFN9Ti7qpN7aboAuye3Gkt3bm5Bn+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTE3MC9GMzIzMDhDMjA0
MkExMUVFOTRBODQ5NDFDNEY5QUUwMi8zMU9MdXFrM3RwdWdDN0o3Y2FTM2R1YmtH
ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzMxT0x1cWszdHB1Z0M3SjdjYVMzZHVia0dmNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTE3MC9GMzIzMDhDMjA0MkExMUVFOTRBODQ5NDFDNEY5QUUwMi8zMU9MdXFrM3Rw
dWdDN0o3Y2FTM2R1YmtHZjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZgvIwh0jogROzyQCarTNdOXUDxgRjdkRJOrg76toZ83c4Rsi5x1F4d8VzvBO
Z90Llzctp5N+9569e+CscVlXIXVlYg1AmSFAoGXHExX59i8X8cTwtQs9ziCT/FXi
Xa8h0YxHGTnBqsD/TO0DyEV4zDEcuZml6yBz9S7ihWvGJaGTU+DaW0yhJuwimAjb
EDY/L3XN+5fEt8fWjXsJcf5AVV248tzeFl8aUJAyvuzW1Ujc4CPi1XchbZLjyMcr
MnSfJ39xq9Iaw7fTwCTwg3VFvKuiOxyYlJdw+rzipGBlTq5X3GAsEf8N2/af/vJW
I3gdPfZ7xb+PKbu3JP/tQkWCUQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:31 2026 by rpki-client