
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
File: 31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json)
Hash identifier: PqLWJQin99r7pLeei0cyPw0RVxNK2Cxs4nYMAL5ozzw=
Subject key identifier: 62:8C:BE:A0:EE:6D:45:38:A9:81:BE:6D:C7:50:69:7B:08:B9:F8:CF
Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
Certificate issuer: /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
Manifest number: 0115
Signing time: Wed 15 Apr 2026 05:36:37 +0000
Manifest this update: Wed 15 Apr 2026 05:36:36 +0000
Manifest next update: Wed 22 Apr 2026 05:36:36 +0000
Files and hashes: 1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: 7I0s7GvXJYvdqhFduY8oPOsFop+EZARE6ogkjeTDTDE=)
2: 42230DF42DE211F0A991F83DC4F9AE02.roa (hash: yYz8vPsSQcwgOuF6A+VEinnO0ZhPnyp/BhHCVoBW8aw=)
3: 934C7D46FBAF11F08EB01E575F6F56BC.roa (hash: T7EaNfKZqoPd4uuGaZYXGqpfHmxAJUJXEQfDEFPp/W4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 05:36:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Validity
Not Before: Apr 15 05:36:36 2026 GMT
Not After : Apr 22 05:36:36 2026 GMT
Subject: CN=69df23e5-be68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cc:e3:24:06:bc:cd:74:b8:73:c1:f6:2b:97:
63:f2:fa:f6:78:b3:9e:81:be:59:e9:79:ec:ab:40:
45:5d:32:12:2a:f6:fd:64:b6:b2:33:c1:6b:fc:37:
66:ab:97:59:b1:41:a9:bb:38:fa:c5:7f:64:69:c1:
cf:5f:8b:f5:41:da:0d:b8:0c:af:12:81:db:5d:de:
0c:49:7c:97:f3:15:68:00:01:fb:4f:3a:70:7f:e8:
38:d5:89:30:c4:3b:c3:fd:b0:ee:d0:16:e9:a2:b4:
5d:a5:26:e8:14:a7:b5:4e:18:22:eb:f0:71:d7:be:
d4:a4:55:38:35:16:24:06:d2:d5:8e:87:59:82:0e:
92:2d:7d:76:1a:b6:14:d2:b4:d0:3d:ac:be:0a:41:
b3:fa:70:01:3f:b4:b6:7b:80:43:e7:8e:3d:1f:69:
76:0e:56:44:21:ef:23:72:dc:d4:4f:9a:5a:3f:cf:
30:1f:ce:3a:92:a2:91:5e:95:01:85:9b:92:7b:67:
12:69:fc:c5:ea:7c:3d:3d:b8:ce:79:34:17:25:de:
6e:d8:63:72:59:84:26:54:4e:4d:4d:f2:f8:f2:0e:
d5:04:08:0b:7d:eb:41:a0:28:74:48:a2:05:d4:ab:
8c:96:c3:12:03:2f:08:60:ec:8a:b4:f3:be:b1:51:
33:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8C:BE:A0:EE:6D:45:38:A9:81:BE:6D:C7:50:69:7B:08:B9:F8:CF
X509v3 Authority Key Identifier:
keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e3:d3:0f:86:e7:67:59:5c:00:ce:b6:26:08:ec:00:9b:55:
03:08:a1:f1:1b:ab:78:10:a6:50:c0:9c:56:9a:3b:b9:ff:1c:
1e:7b:8a:45:80:02:58:a7:f7:30:bf:82:a2:ed:b8:ca:b2:e8:
63:9c:da:94:82:f8:03:40:4a:4d:84:6e:0e:d4:87:20:62:3f:
9f:88:7b:7a:ff:43:b6:9c:31:a9:12:39:2a:b2:60:5c:a5:a9:
55:cc:d1:f5:aa:4c:9a:bc:3b:93:2c:5f:12:64:00:9f:8f:89:
de:a0:12:43:2d:08:25:35:14:27:7a:1b:c2:1d:2f:9c:9e:73:
f2:20:c1:3c:75:95:7c:a3:76:1e:b5:80:74:1b:3b:4a:93:d1:
18:50:11:f4:3d:9a:ff:ca:74:e3:16:41:62:c2:0b:c0:0f:12:
c1:31:5a:f3:d5:37:26:de:f5:85:ce:6a:05:92:99:8c:e0:e4:
a0:39:0a:16:40:41:7e:73:6d:5f:0c:95:c6:35:c9:9a:e3:2a:
b9:0a:2b:8f:f4:48:3f:7e:be:0d:ae:d4:5b:86:bc:d2:ce:30:
5a:b2:24:2d:00:0f:2c:18:50:d6:15:82:67:ef:b4:3e:49:03:
a4:cc:78:ea:d9:89:3c:0a:e1:9e:b5:a6:4e:e7:9b:19:48:9f:
ac:a7:b7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:40 2026 by rpki-client