
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
File: 37ZyNnIVHsLEbNBOccWfkWnK5vg.mft (raw, json)
Hash identifier: lw+nOwWxqMTWyExLfqiYIcj7zsCyu0T0z7Uzu0Rkmag=
Subject key identifier: 49:7E:0F:2A:18:87:B3:DA:68:07:66:58:F1:EF:96:B3:CA:80:A0:41
Authority key identifier: DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8
Certificate issuer: /CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8
Certificate serial: 0CED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
Manifest number: 0CDB
Signing time: Tue 24 Mar 2026 18:11:15 +0000
Manifest this update: Tue 24 Mar 2026 18:11:15 +0000
Manifest next update: Tue 31 Mar 2026 18:11:15 +0000
Files and hashes: 1: 37ZyNnIVHsLEbNBOccWfkWnK5vg.crl (hash: NlQ4UtFvIdw7l2398Ts5uVLSPi1GWsn+ilsHXN2G2qw=)
2: 9DF59BFADA1611ED87B4D357C4F9AE02.roa (hash: Ljx7IsxKp3SSCVlf/kifFj6AmtovPD1vTrmVMoxhp1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl
rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3309 (0xced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A62F, serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8
Validity
Not Before: Mar 24 18:11:15 2026 GMT
Not After : Mar 31 18:11:15 2026 GMT
Subject: CN=69c2d3c3-889a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5d:6c:42:b6:9f:b7:f2:8b:79:7f:a9:e3:5b:
7f:96:33:06:f5:46:a5:90:67:36:6e:41:32:48:55:
68:6e:f1:a6:9a:99:97:4c:6e:26:35:97:96:cc:dd:
dc:46:32:c4:96:4f:60:ed:37:20:ac:c2:cf:af:64:
aa:38:ad:a3:97:fb:b8:5b:23:be:8f:26:c5:c2:78:
2d:d6:60:48:ad:4f:cf:a0:e2:af:92:65:1f:da:cc:
d6:6f:b8:2e:05:ff:02:3c:f9:ef:72:86:e2:ca:14:
23:16:ce:94:96:bb:95:1e:09:22:2f:24:47:8c:0c:
55:be:df:e1:af:3c:15:87:be:6b:33:49:da:08:bd:
49:d6:b5:0a:f9:d8:27:4b:ff:b3:80:2b:fb:74:24:
2b:89:87:d4:ed:e7:68:9b:51:56:58:a8:bd:a7:21:
3b:88:fe:d3:34:e2:27:ce:0c:52:47:0f:8a:77:13:
4d:9d:68:8f:8a:01:b0:b4:3b:5c:4e:04:13:08:c9:
f1:8d:09:10:53:4f:f7:bc:8d:38:17:15:95:2b:13:
a7:6a:25:1c:d2:6d:be:cf:05:7f:ed:69:7d:74:6d:
2e:d0:24:1e:43:7a:77:28:ab:74:38:e8:0d:34:b0:
8e:30:20:fe:f7:f5:72:9d:0d:de:f3:8c:c3:24:2c:
95:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7E:0F:2A:18:87:B3:DA:68:07:66:58:F1:EF:96:B3:CA:80:A0:41
X509v3 Authority Key Identifier:
keyid:DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f5:28:ac:51:3b:08:d2:57:72:df:ff:22:44:20:46:98:d7:
d7:07:3d:e9:08:d4:4c:c3:fd:5f:72:34:4a:be:a2:e5:ae:4c:
42:f3:e2:19:dc:37:8b:fe:7d:c9:7a:87:b7:cc:66:57:7f:8a:
bb:ad:d1:dc:de:a5:96:b5:b9:ba:77:e7:42:3e:5f:36:de:9e:
7c:2a:21:29:45:bc:7e:04:ac:81:20:b4:d6:d5:e6:41:1b:cc:
94:5c:e6:bb:e1:f2:22:63:92:be:bb:ae:fb:bd:f5:6d:62:8c:
bf:2a:54:61:a7:21:d0:6e:ac:42:28:bc:a3:44:fd:e4:20:56:
e3:4c:ae:b0:21:c2:bd:d5:4a:7f:3d:c2:06:af:91:02:bc:47:
5c:52:74:4e:1d:74:14:2a:d6:60:49:50:bb:9e:8f:52:1f:51:
45:98:f9:6d:67:4b:e2:d9:94:01:8d:0b:ac:a1:ec:23:77:dc:
eb:01:f5:5e:e2:22:30:19:5c:b1:0c:32:6f:bf:1e:9d:6a:cb:
5a:d0:a7:d7:3b:21:cc:7c:ef:98:8f:65:3a:80:21:2a:6a:26:
6d:67:7a:23:01:15:e8:38:b6:d4:9f:63:60:3c:2c:3d:b5:65:
17:44:e7:11:7d:19:37:af:22:de:0a:e8:4c:72:fe:fd:28:44:
4b:f7:96:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE2MkYxMTAvBgNVBAUTKERGQjY3MjM2NzIxNTFFQzJDNDZDRDA0RTcxQzU5Rjkx
NjlDQUU2RjgwHhcNMjYwMzI0MTgxMTE1WhcNMjYwMzMxMTgxMTE1WjAYMRYwFAYD
VQQDEw02OWMyZDNjMy04ODlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAml1sQraft/KLeX+p41t/ljMG9UalkGc2bkEySFVobvGmmpmXTG4mNZeWzN3c
RjLElk9g7TcgrMLPr2SqOK2jl/u4WyO+jybFwngt1mBIrU/PoOKvkmUf2szWb7gu
Bf8CPPnvcobiyhQjFs6UlruVHgkiLyRHjAxVvt/hrzwVh75rM0naCL1J1rUK+dgn
S/+zgCv7dCQriYfU7edom1FWWKi9pyE7iP7TNOInzgxSRw+KdxNNnWiPigGwtDtc
TgQTCMnxjQkQU0/3vI04FxWVKxOnaiUc0m2+zwV/7Wl9dG0u0CQeQ3p3KKt0OOgN
NLCOMCD+9/VynQ3e84zDJCyVEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEl+DyoY
h7PaaAdmWPHvlrPKgKBBMB8GA1UdIwQYMBaAFN+2cjZyFR7CxGzQTnHFn5Fpyub4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTYyRi8xQ0Y5ODcyNjA4
NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhzTEViTkJPY2NXZmtXbks1
dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzM3WnlObklWSHNMRWJOQk9jY1dma1duSzV2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTYyRi8xQ0Y5ODcyNjA4NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhz
TEViTkJPY2NXZmtXbks1dmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp/UorFE7CNJXct//IkQgRpjX1wc96QjUTMP9X3I0Sr6i5a5MQvPiGdw3i/59
yXqHt8xmV3+Ku63R3N6llrW5unfnQj5fNt6efCohKUW8fgSsgSC01tXmQRvMlFzm
u+HyImOSvruu+731bWKMvypUYach0G6sQii8o0T95CBW40yusCHCvdVKfz3CBq+R
ArxHXFJ0Th10FCrWYElQu56PUh9RRZj5bWdL4tmUAY0LrKHsI3fc6wH1XuIiMBlc
sQwyb78enWrLWtCn1zshzHzvmI9lOoAhKmombWd6IwEV6Di21J9jYDwsPbVlF0Tn
EX0ZN68i3groTHL+/ShES/eW0A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:27:20 2026 by rpki-client