
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
File: x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json)
Hash identifier: lggSUP4E7twr8UamBdtYMdRwAP+mMu0xHW63k/3rK4I=
Subject key identifier: 93:A5:AC:3B:E5:37:04:81:1A:8F:9B:F6:B1:6B:A1:D8:FA:2D:D1:FD
Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Certificate serial: 0428
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
Manifest number: 0401
Signing time: Thu 23 Jul 2026 01:21:36 +0000
Manifest this update: Thu 23 Jul 2026 01:21:35 +0000
Manifest next update: Thu 30 Jul 2026 01:21:35 +0000
Files and hashes: 1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: K1Uc7uuUNtCT+oCSrgLWKo3kIJu+br2UtartS765doI=)
2: EB1C709C450411F09738105FC4F9AE02.roa (hash: +AncE6sTnOtU1ZeR9+gjMKLIkBP6FUz08DE0mz8mrdA=)
3: 2872E3EEB78511EFACBD807DC4F9AE02.roa (hash: xzTQB5ahnINBSmifSeaZ+vcG1Uy8tZ8MCMCjvhC6ThE=)
4: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: /iTMsXCUnyKaFWbmcrlhAvQFHMmknqRf7ToDYky66Rg=)
5: 27DC7846B78511EFACBD807DC4F9AE02.roa (hash: oTDoE/TmlZFxLgjHVcBtawSli7Z2FLQIv5kQf55g3cA=)
6: EAAF7884450411F09738105FC4F9AE02.roa (hash: E4W5oMfnGquPJA/5oOiZJesivTNv9jd8LinDZ2k9N+Y=)
7: EA2C5116450411F09738105FC4F9AE02.roa (hash: ZkfX4YPLvi9vkcBz9+NUu1NB2UO1R7auL+jxlTVunl8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:21:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1064 (0x428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Validity
Not Before: Jul 23 01:21:35 2026 GMT
Not After : Jul 30 01:21:35 2026 GMT
Subject: CN=6a616ca0-c454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b6:5e:1f:fa:dc:5d:64:70:d5:a2:01:5a:b2:
14:e0:98:aa:8c:ae:c7:8a:9a:06:96:7a:60:c2:53:
d1:54:80:d3:0d:cd:47:d3:e7:68:9f:6f:9f:37:ea:
49:6a:16:55:a4:6b:d4:86:cc:02:1f:24:b5:4b:20:
b8:6e:ea:80:83:2f:30:09:0e:78:e3:50:3c:58:b5:
e3:48:ad:a1:46:8b:45:4d:7d:79:66:84:9f:22:bb:
b9:38:0f:d8:39:79:a3:90:03:96:10:01:1b:aa:2f:
4b:5e:37:bf:dd:36:44:3d:96:d9:86:67:3f:77:96:
e5:a8:03:d0:9c:66:ec:a1:3c:20:ed:e2:85:5a:09:
9c:33:53:7d:7a:fe:5e:68:e4:bd:b1:2c:6e:77:29:
91:98:3e:a9:9d:35:f8:e2:c5:c7:bf:6b:96:aa:ea:
cd:e6:36:bc:bf:c5:ce:9e:41:29:69:c3:52:6d:a6:
55:c0:45:48:8e:8a:4d:58:59:30:42:54:e5:26:00:
9e:74:9d:7f:78:e8:df:e0:1c:dc:16:e5:50:5d:73:
6e:08:d8:cc:70:94:b2:4d:05:c3:e7:c8:c9:d6:22:
cc:a7:f8:39:7f:b2:89:fe:04:8e:46:80:cf:67:10:
dd:fb:f7:76:11:f6:7b:f2:a9:b7:86:04:a4:8b:64:
c2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A5:AC:3B:E5:37:04:81:1A:8F:9B:F6:B1:6B:A1:D8:FA:2D:D1:FD
X509v3 Authority Key Identifier:
keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3b:62:41:0e:c3:f7:46:7b:ea:5a:6c:24:41:fe:e9:79:74:
71:16:3c:e3:2c:97:06:06:35:8c:1d:00:e8:7b:08:5d:10:4e:
99:53:d1:ea:31:aa:29:98:c4:a3:71:e6:59:81:da:28:3d:52:
68:c2:3f:e7:2e:ee:fc:71:f2:1f:85:76:4a:04:fe:74:07:97:
96:49:2c:ae:56:27:c7:06:05:5f:0e:a5:35:c1:19:bf:82:ef:
8d:de:76:d9:53:19:67:1a:2a:f4:94:ea:49:58:21:0a:8b:5d:
39:b4:1c:bd:38:0f:87:8c:e8:93:19:ca:6f:5b:de:54:3b:fc:
c3:6d:b7:e6:8d:d1:49:b8:e0:3c:99:4f:26:05:7c:58:4e:20:
d3:d2:1c:2b:93:92:4d:4f:45:cf:d8:c1:88:67:56:bb:45:3f:
b8:af:f4:dd:37:9a:15:8a:28:5c:f2:23:69:0d:79:c3:7b:cd:
bd:ce:67:8c:00:49:47:36:e5:15:ca:cc:49:e8:88:1c:2e:48:
97:83:fa:61:0c:4f:6f:38:fb:e2:c6:af:e8:3e:0a:49:f8:26:
a3:39:ae:d7:5d:6d:ec:ce:4f:d8:c7:f0:f2:46:6a:c2:14:b6:
9d:54:4d:91:68:c8:6e:df:69:ed:11:b1:98:da:ad:e0:10:3b:
5e:b9:06:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:33 2026 by rpki-client