
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
File: 37ZyNnIVHsLEbNBOccWfkWnK5vg.mft (raw, json)
Hash identifier: wFIAAZ0HSeJvqf6uyVzDzJLpX6GortXsr+RGkyFR+5Y=
Subject key identifier: 76:69:DF:2D:7B:08:E5:D1:92:A1:5B:12:C2:BC:EF:A1:5B:7A:59:79
Authority key identifier: DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8
Certificate issuer: /CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8
Certificate serial: 0D52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
Manifest number: 0D3D
Signing time: Thu 24 Sep 2026 18:11:15 +0000
Manifest this update: Thu 24 Sep 2026 18:11:15 +0000
Manifest next update: Thu 01 Oct 2026 18:11:15 +0000
Files and hashes: 1: 37ZyNnIVHsLEbNBOccWfkWnK5vg.crl (hash: rdE0y7aPubFqLjqMtOfd8ZCsT87QaZdaRbPhRFb2MN4=)
2: ED7EF624B2C311F188E07D2B4C11F970.roa (hash: uc1S2stm9Uhx3B+XK2xoEACktNTcIYwoUDOw85kBtAU=)
3: 2539C738B2C411F1B6FCC86B4C11F970.roa (hash: VC3fX4MCY7HkVhPO9ZGyHcHv/3ro8WspG+qBhtBaGbI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl
rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3410 (0xd52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A62F, serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8
Validity
Not Before: Sep 24 18:11:15 2026 GMT
Not After : Oct 1 18:11:15 2026 GMT
Subject: CN=6ab567c3-c816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:2b:a2:18:bd:af:0f:ac:5b:d6:4b:76:30:
9a:92:c2:40:c7:74:f3:48:35:47:bf:cc:0d:b4:67:
de:8a:42:2f:49:07:8d:0c:73:d0:6b:53:f4:1d:9f:
1c:98:b2:a7:65:76:d5:c0:26:73:f9:ca:2a:d2:7e:
52:30:19:ea:19:5e:f2:ce:05:6d:f9:d7:0c:b8:0e:
5e:bd:c4:a8:a6:72:28:61:e6:0c:27:0a:ef:fa:e2:
3d:69:ce:05:4d:54:26:91:68:97:4a:7a:ad:14:51:
ec:1e:7b:09:6d:f3:ac:c5:94:ca:93:5d:a2:43:e5:
be:df:85:48:44:86:7f:ac:79:d0:b5:81:6d:69:5a:
4c:da:0d:d4:b6:92:f4:21:9e:c2:44:30:e6:da:d4:
52:55:5f:97:65:dd:4e:12:9b:57:52:e2:ee:8e:ba:
ea:90:1b:d7:5d:db:eb:25:3e:dd:3f:1a:7a:b7:59:
72:67:dd:4e:1c:00:92:d7:38:ed:b2:b5:f2:4c:6c:
91:82:60:09:35:10:49:e5:31:d5:6e:57:9a:5a:8a:
61:c0:e4:37:0a:9a:f1:ab:f2:29:ad:e5:31:f3:e0:
7e:5a:b8:48:9e:fb:de:de:84:52:63:7d:76:7d:1f:
c8:65:41:c4:c9:ab:a4:ec:79:6b:72:7b:58:b0:d0:
61:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:69:DF:2D:7B:08:E5:D1:92:A1:5B:12:C2:BC:EF:A1:5B:7A:59:79
X509v3 Authority Key Identifier:
keyid:DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:39:21:db:10:68:a4:b3:ff:c1:13:ca:fe:06:78:d3:50:3f:
48:71:27:b4:d4:e9:7c:95:82:70:d6:b2:cb:c1:d9:eb:5b:27:
dc:84:82:f9:63:6a:e6:ed:e3:6c:80:36:d9:f3:14:36:fe:fd:
79:08:fa:96:6d:97:62:c9:20:df:46:7a:9f:9c:40:3e:6a:dd:
b9:fb:54:da:81:99:7d:3d:37:23:7c:2c:0e:9d:05:17:6b:10:
d2:79:ac:c4:73:24:69:1f:bb:03:35:3c:da:59:be:d6:85:1a:
f0:27:1b:d1:57:53:96:c4:ab:02:c2:8d:71:0f:cf:42:08:1d:
da:80:61:f7:ee:f6:07:34:73:61:b7:b2:64:22:5a:2e:e7:e8:
a6:16:9d:b4:6a:8c:21:66:8a:a4:1a:53:36:53:52:59:a5:0f:
9d:a0:37:07:78:82:da:dc:96:61:59:df:9e:7e:de:0d:6f:bb:
a7:0c:66:45:11:e3:fc:90:ac:df:f7:64:f1:b4:93:66:23:52:
e5:93:2f:ae:a9:b6:26:e5:b9:01:d7:77:68:68:8f:8c:65:4d:
f5:24:a1:e5:5c:36:9d:ae:a3:12:42:9d:26:47:e6:ef:00:ee:
49:bc:eb:8b:f5:aa:40:34:5a:4b:21:43:e9:85:65:3a:95:19:
8e:f7:04:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:04:46 2026 by rpki-client