
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
File: 31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json)
Hash identifier: sJTEv0o02Mox47OmlIJTNcCy1TG/hKoIIJzVTh9foS8=
Subject key identifier: 57:31:C5:D0:46:A2:6E:46:95:5F:CD:3D:F8:B3:1B:F6:32:10:70:B6
Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
Certificate issuer: /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Certificate serial: 0156
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
Manifest number: 0148
Signing time: Mon 27 Jul 2026 07:21:08 +0000
Manifest this update: Mon 27 Jul 2026 07:21:07 +0000
Manifest next update: Mon 03 Aug 2026 07:21:07 +0000
Files and hashes: 1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: KP8bhg1SE3ZLYYbnXR/FhnbxhQ15P5LoCqR5FHPdr+Q=)
2: 934C7D46FBAF11F08EB01E575F6F56BC.roa (hash: T7EaNfKZqoPd4uuGaZYXGqpfHmxAJUJXEQfDEFPp/W4=)
3: 42230DF42DE211F0A991F83DC4F9AE02.roa (hash: yYz8vPsSQcwgOuF6A+VEinnO0ZhPnyp/BhHCVoBW8aw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:21:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Validity
Not Before: Jul 27 07:21:07 2026 GMT
Not After : Aug 3 07:21:07 2026 GMT
Subject: CN=6a6706e4-07b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:22:de:95:2c:31:1c:13:12:38:ed:8a:75:
0f:cb:ff:53:80:96:9b:6f:e7:95:e8:9e:9b:d9:16:
fd:07:f4:ae:dc:5f:f8:33:ae:cc:3c:93:7b:3c:16:
ca:f5:8d:3e:8d:49:70:53:0a:dc:61:83:dc:01:d3:
32:14:4d:d6:7a:e4:e5:91:0f:59:74:b8:1c:65:b3:
73:f1:72:9b:5f:92:4f:c5:21:ac:c1:aa:c5:ef:70:
3a:3d:91:3b:00:4a:7f:e6:b8:a9:ad:11:0c:85:e3:
f7:2a:a9:6f:03:80:55:d5:da:64:e6:8d:ca:26:75:
7b:05:40:a7:77:46:01:7a:4b:85:46:f6:c8:1e:88:
0e:9a:98:7a:fe:24:41:e4:97:44:30:ad:9f:e4:bd:
39:f0:3b:d1:11:0e:02:2a:fe:db:46:34:43:8d:fd:
c6:0e:37:ff:10:6c:31:7a:23:55:9f:96:bd:3a:a5:
67:e6:8a:64:1f:44:c4:13:f1:fb:d8:a0:b6:7c:03:
73:5d:3d:60:03:8e:9f:13:23:34:70:01:0c:d2:70:
20:ac:ac:0b:3e:d7:00:54:55:bd:73:0e:61:8b:51:
39:11:06:01:33:6f:0c:0e:f2:d2:b5:67:9e:06:23:
73:92:38:ac:1a:73:ae:c4:b4:f2:42:c2:bd:b6:16:
ae:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:31:C5:D0:46:A2:6E:46:95:5F:CD:3D:F8:B3:1B:F6:32:10:70:B6
X509v3 Authority Key Identifier:
keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:ae:b6:5f:fd:9a:77:08:d0:d8:f7:c2:ff:dc:b5:f3:0a:48:
65:db:10:37:d8:d4:44:03:85:af:1a:18:73:9d:0c:18:86:12:
18:0e:56:f2:d2:db:a5:bb:4d:06:41:59:c9:51:91:4c:76:7e:
d0:f4:a6:04:67:63:fe:b3:cd:e9:07:93:4e:61:c1:80:b1:8f:
11:99:d8:ea:a0:d4:4f:10:60:9c:90:a0:4e:d6:37:f5:90:49:
30:6d:5a:41:65:dd:02:15:e4:a3:03:38:3d:c6:02:e5:91:25:
bf:e9:61:ab:85:71:e9:51:32:83:ae:50:bd:36:ef:be:a6:f1:
42:f6:2e:89:40:e5:0f:47:c5:9d:1a:5b:22:bd:eb:42:7f:e3:
25:ac:41:76:6f:a1:28:dc:51:d2:de:1a:d7:ee:24:e6:10:bc:
4b:32:1c:1f:04:cb:1d:fb:6b:4d:39:5b:5e:e7:cc:63:b4:24:
e5:e3:7c:9b:50:f5:7b:50:d3:45:4d:91:fd:fb:3b:14:17:91:
81:0a:d8:e3:bf:db:67:77:d7:d7:10:59:b6:24:6f:64:bd:1e:
b0:c9:31:e7:ae:4e:3a:e7:e8:52:bc:42:60:d9:14:bc:54:2f:
fb:87:dc:32:59:1b:ae:b9:13:da:0d:78:ff:74:36:ce:f2:a1:
ee:8b:bc:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjc1MzcxMTAvBgNVBAUTKERGNUZFMjFCN0M5NTUyMTU5MzQ0NzE3OTREOEIwNzA2
NjNEMkIzNEUwHhcNMjYwNzI3MDcyMTA3WhcNMjYwODAzMDcyMTA3WjAYMRYwFAYD
VQQDEw02YTY3MDZlNC0wN2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtRki3pUsMRwTEjjtinUPy/9TgJabb+eV6J6b2Rb9B/Su3F/4M67MPJN7PBbK
9Y0+jUlwUwrcYYPcAdMyFE3WeuTlkQ9ZdLgcZbNz8XKbX5JPxSGswarF73A6PZE7
AEp/5riprREMheP3KqlvA4BV1dpk5o3KJnV7BUCnd0YBekuFRvbIHogOmph6/iRB
5JdEMK2f5L058DvREQ4CKv7bRjRDjf3GDjf/EGwxeiNVn5a9OqVn5opkH0TEE/H7
2KC2fANzXT1gA46fEyM0cAEM0nAgrKwLPtcAVFW9cw5hi1E5EQYBM28MDvLStWee
BiNzkjisGnOuxLTyQsK9thauAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFcxxdBG
om5GlV/NPfizG/YyEHC2MB8GA1UdIwQYMBaAFN9f4ht8lVIVk0RxeU2LBwZj0rNO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUzNy84MDJBRTY0NkEy
NzExMUVGQTM5MkYwNzlDNEY5QUUwMi8zMV9pRzN5VlVoV1RSSEY1VFlzSEJtUFNz
MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzMxX2lHM3lWVWhXVFJIRjVUWXNIQm1QU3MwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzUzNy84MDJBRTY0NkEyNzExMUVGQTM5MkYwNzlDNEY5QUUwMi8zMV9pRzN5VlVo
V1RSSEY1VFlzSEJtUFNzMDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUK62X/2adwjQ2PfC/9y18wpIZdsQN9jURAOFrxoYc50MGIYSGA5W8tLbpbtN
BkFZyVGRTHZ+0PSmBGdj/rPN6QeTTmHBgLGPEZnY6qDUTxBgnJCgTtY39ZBJMG1a
QWXdAhXkowM4PcYC5ZElv+lhq4Vx6VEyg65QvTbvvqbxQvYuiUDlD0fFnRpbIr3r
Qn/jJaxBdm+hKNxR0t4a1+4k5hC8SzIcHwTLHftrTTlbXufMY7Qk5eN8m1D1e1DT
RU2R/fs7FBeRgQrY47/bZ3fX1xBZtiRvZL0esMkx565OOufoUrxCYNkUvFQv+4fc
MlkbrrkT2g14/3Q2zvKh7ou8ow==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:34:20 2026 by rpki-client