
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
File: x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json)
Hash identifier: ++2iGuM0MKMly6OGDsubFndT5WEzTYW9Y4sTxyaa2sM=
Subject key identifier: B7:B0:17:DC:13:57:DE:B7:71:B1:34:0E:20:6E:72:30:4B:6D:0B:42
Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Certificate serial: 0403
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
Manifest number: 03DC
Signing time: Mon 11 May 2026 00:40:00 +0000
Manifest this update: Mon 11 May 2026 00:40:00 +0000
Manifest next update: Mon 18 May 2026 00:40:00 +0000
Files and hashes: 1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: kdJi6e/KKu33awQ4+GHcd3cJld/7dVqkt4j9eZXM6Ss=)
2: 2872E3EEB78511EFACBD807DC4F9AE02.roa (hash: xzTQB5ahnINBSmifSeaZ+vcG1Uy8tZ8MCMCjvhC6ThE=)
3: EA2C5116450411F09738105FC4F9AE02.roa (hash: ZkfX4YPLvi9vkcBz9+NUu1NB2UO1R7auL+jxlTVunl8=)
4: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: /iTMsXCUnyKaFWbmcrlhAvQFHMmknqRf7ToDYky66Rg=)
5: EB1C709C450411F09738105FC4F9AE02.roa (hash: +AncE6sTnOtU1ZeR9+gjMKLIkBP6FUz08DE0mz8mrdA=)
6: 27DC7846B78511EFACBD807DC4F9AE02.roa (hash: oTDoE/TmlZFxLgjHVcBtawSli7Z2FLQIv5kQf55g3cA=)
7: EAAF7884450411F09738105FC4F9AE02.roa (hash: E4W5oMfnGquPJA/5oOiZJesivTNv9jd8LinDZ2k9N+Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 00:39:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1027 (0x403)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Validity
Not Before: May 11 00:40:00 2026 GMT
Not After : May 18 00:40:00 2026 GMT
Subject: CN=6a012560-542c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:5d:dd:79:29:16:f7:ec:63:4e:77:98:46:
db:05:76:c0:29:8b:ff:d2:99:84:c8:81:2c:9e:72:
72:e5:b1:eb:0e:eb:13:bb:56:7d:d9:64:75:a4:dc:
16:89:96:87:c9:c6:82:41:38:be:2e:48:ec:ff:dc:
b2:54:a3:fd:41:63:d4:88:6d:c8:e8:11:61:07:66:
91:a0:23:be:d8:c0:fc:65:e3:ae:01:cf:b7:2a:53:
9e:a6:ae:48:49:e8:d0:eb:96:0f:ff:29:89:c5:66:
94:41:0f:af:05:40:53:a5:9b:24:e8:ef:7a:c9:1f:
4a:c8:85:c6:54:a0:9c:6b:c3:d2:66:2a:9e:ce:ca:
39:59:09:77:0f:1c:ba:fb:ea:86:d9:ef:e0:1d:90:
86:fd:e4:3f:59:20:38:da:3c:a2:43:fe:1b:1e:cc:
91:bb:c2:48:7a:81:74:fa:45:3a:7b:a4:e5:8c:6b:
44:fc:b4:76:ba:6f:9c:20:9a:9e:bc:60:73:a3:82:
cd:ec:4d:31:56:a3:ec:d7:0c:95:58:87:2d:7e:6c:
74:17:bc:4e:f9:d5:71:67:33:84:fe:fd:34:64:22:
56:45:bc:e7:9a:7e:b0:0b:cd:fb:09:22:b0:a2:74:
1a:b6:af:1c:a6:75:48:80:39:a5:1b:e4:79:3f:3d:
d6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B0:17:DC:13:57:DE:B7:71:B1:34:0E:20:6E:72:30:4B:6D:0B:42
X509v3 Authority Key Identifier:
keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fd:d1:b0:f6:e6:63:89:a2:f6:94:02:9a:23:22:93:93:29:
3c:be:ad:8a:95:9f:b5:2c:d0:fd:87:7c:af:35:f8:0a:90:de:
95:e9:dd:f1:9a:87:22:ed:0e:cf:8b:50:7b:bc:a5:8c:a0:ee:
26:65:61:61:34:8e:36:02:f0:ab:43:7f:c1:ed:8e:fb:a8:74:
75:a4:03:76:78:10:4b:3a:76:a5:7b:9e:42:1e:ea:37:ea:f3:
f5:ab:73:4f:5e:1f:90:76:aa:b2:9b:45:00:34:73:7b:86:8c:
84:ca:58:62:21:98:67:b1:4f:61:62:df:d6:ee:6a:85:56:7a:
72:c0:f1:53:82:0e:dc:b7:39:2e:72:a9:26:f5:dc:ff:9e:80:
29:13:11:2b:05:48:5d:ee:2f:7c:3b:b4:bc:fe:a7:77:7d:66:
b7:5a:88:3d:fa:ef:d5:05:97:fd:a5:3b:97:a2:6a:bf:90:d5:
05:23:84:36:9a:ed:90:55:6f:51:92:d6:1d:bb:ae:aa:ac:7c:
82:31:51:f8:37:ad:4b:8e:aa:9c:93:92:fd:56:65:c1:c0:53:
9e:33:58:45:29:2f:35:96:8a:37:e1:cf:c5:a3:43:54:a5:c4:
bc:8f:d4:78:e9:fd:03:a9:78:a2:76:20:97:d5:73:82:e9:5f:
a4:96:e9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:02:51 2026 by rpki-client