
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
File: x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json)
Hash identifier: 84bwEtHS5UkCCzCIOvqzoeT0WwAMg7bhUmqmYlw0HFM=
Subject key identifier: 39:2D:F9:F9:E3:23:30:F7:EB:03:DD:C1:46:73:2E:D2:D0:B3:92:5C
Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Certificate serial: 03D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
Manifest number: 03B6
Signing time: Sun 01 Mar 2026 01:33:30 +0000
Manifest this update: Sun 01 Mar 2026 01:33:29 +0000
Manifest next update: Sun 08 Mar 2026 01:33:29 +0000
Files and hashes: 1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: hYXSTKzaab7/4TGQsmcDYa4qUQoH09LiKoBxc1IfuCE=)
2: 2872E3EEB78511EFACBD807DC4F9AE02.roa (hash: kZzMXdkHsbeWhqQo08LJANq63hJpAGNo4uFVGoBwQ/0=)
3: 27DC7846B78511EFACBD807DC4F9AE02.roa (hash: b5B3lzxVsrZlixjiSWlcyQY2EuLiKocCaABGFArbDwM=)
4: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: vXzSIXZBaXcIq7HGAv3/KzQ/zFxGEtVsxyV8BgD55Xg=)
5: EA2C5116450411F09738105FC4F9AE02.roa (hash: mDgnt/g1+zuzz/Dldep3lhpu+guK6efPn+25tb2sN6w=)
6: EAAF7884450411F09738105FC4F9AE02.roa (hash: tBvhikagp7Nt4A+RvXoPttqaLGkwIsP8h24We8nhn+w=)
7: EB1C709C450411F09738105FC4F9AE02.roa (hash: O/x91LtvdsHnu6UD+9TxpNdI3pzLLK+i+0wDI9cj5DI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 977 (0x3d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Validity
Not Before: Mar 1 01:33:29 2026 GMT
Not After : Mar 8 01:33:29 2026 GMT
Subject: CN=69a39769-334f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3a:51:0c:18:21:16:ec:02:57:fa:ba:eb:3a:
9c:c0:4d:f5:14:ec:d3:19:56:7e:9f:a2:10:8c:89:
a3:ac:fe:85:ac:e5:0e:2a:58:7c:35:52:3f:0a:24:
38:73:4e:de:7b:7b:7b:46:41:43:6e:25:07:ab:41:
ef:8c:bf:72:a2:f9:97:8b:ed:be:f2:85:a1:ae:bc:
ac:d6:a2:31:6a:5d:5a:d6:1e:6b:7a:67:c2:e8:db:
71:bf:04:b4:0c:6f:a1:b9:5e:6f:4b:e0:6a:fe:5b:
e3:3c:a0:5e:52:26:96:af:99:df:e0:c0:30:79:6c:
e6:9b:d9:52:56:e3:a9:8b:7b:05:60:77:c8:09:e3:
ed:cd:09:ea:90:ae:bf:2f:b6:c1:67:9a:1b:77:1f:
ef:3f:f1:96:c5:d3:b8:c4:40:ca:a8:4a:8c:6c:ac:
17:3d:39:51:c6:7c:c9:83:38:40:90:d5:db:00:8c:
c2:9d:73:ea:6e:6e:d0:5a:21:91:63:a1:fc:17:19:
10:26:09:b2:ab:ef:80:23:d4:ec:7b:5d:e2:77:f8:
4f:f1:8e:ac:27:c2:73:1f:22:0c:29:64:66:2a:22:
b2:a6:a6:6c:c6:68:43:14:31:33:87:98:6f:87:4b:
d7:7f:dd:01:de:60:5b:76:49:45:cc:5a:12:75:af:
fe:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2D:F9:F9:E3:23:30:F7:EB:03:DD:C1:46:73:2E:D2:D0:B3:92:5C
X509v3 Authority Key Identifier:
keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f6:76:05:75:68:e2:90:15:e5:b8:58:70:80:49:02:a7:71:
5d:5e:dd:b5:da:7d:36:45:97:3e:14:16:53:1f:13:ee:7c:6e:
2f:6b:24:52:48:0a:c2:6c:e8:b7:e1:d6:e2:11:72:79:73:e4:
36:e3:16:4d:8c:22:ab:78:ec:6c:50:82:19:04:4c:6c:35:6d:
a9:e9:42:9d:7b:a8:4d:05:d2:a4:37:ee:ec:8e:44:c8:a5:51:
85:fe:56:da:68:92:bd:e5:d8:d8:30:4b:38:a9:da:44:da:2f:
0d:c5:df:4a:f0:50:7b:48:08:60:16:d4:fe:2b:f4:c7:0a:9c:
95:d7:d5:0d:d8:30:c3:f5:70:21:2a:4e:86:35:3c:30:c5:25:
42:df:9d:65:a7:3a:f9:ff:c1:7d:64:a5:bb:3c:3a:fc:b9:c0:
1b:69:ec:08:73:c1:cb:e7:80:80:36:7f:04:03:b7:3f:49:f8:
dd:b4:72:84:ac:ce:13:fc:dc:5f:93:05:71:ee:7f:85:00:d1:
a7:26:7a:fc:72:6e:af:a9:9c:ca:de:22:d2:d3:6c:c5:de:04:
85:6c:36:09:4c:c6:52:be:79:6c:00:bf:2d:6c:85:26:aa:10:
28:2d:60:c6:c9:58:2b:da:05:41:1c:bf:76:9b:af:43:23:14:
27:6c:24:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg1NzkxMTAvBgNVBAUTKEM3RURGQjc1N0Y1OTRCREYyM0FERDcxMjFGNURCRTNE
MjVBRTAwRkMwHhcNMjYwMzAxMDEzMzI5WhcNMjYwMzA4MDEzMzI5WjAYMRYwFAYD
VQQDDA02OWEzOTc2OS0zMzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkzpRDBghFuwCV/q66zqcwE31FOzTGVZ+n6IQjImjrP6FrOUOKlh8NVI/CiQ4
c07ee3t7RkFDbiUHq0HvjL9yovmXi+2+8oWhrrys1qIxal1a1h5remfC6NtxvwS0
DG+huV5vS+Bq/lvjPKBeUiaWr5nf4MAweWzmm9lSVuOpi3sFYHfICePtzQnqkK6/
L7bBZ5obdx/vP/GWxdO4xEDKqEqMbKwXPTlRxnzJgzhAkNXbAIzCnXPqbm7QWiGR
Y6H8FxkQJgmyq++AI9Tse13id/hP8Y6sJ8JzHyIMKWRmKiKypqZsxmhDFDEzh5hv
h0vXf90B3mBbdklFzFoSda/+ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDkt+fnj
IzD36wPdwUZzLtLQs5JcMB8GA1UdIwQYMBaAFMft+3V/WUvfI63XEh9dvj0lrgD8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODU3OS8wMTc2MDNGQ0NF
QjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5OGpyZGNTSDEyLVBTV3VB
UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3gtMzdkWDlaUzk4anJkY1NIMTItUFNXdUFQdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODU3OS8wMTc2MDNGQ0NFQjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5
OGpyZGNTSDEyLVBTV3VBUHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPvZ2BXVo4pAV5bhYcIBJAqdxXV7dtdp9NkWXPhQWUx8T7nxuL2skUkgKwmzo
t+HW4hFyeXPkNuMWTYwiq3jsbFCCGQRMbDVtqelCnXuoTQXSpDfu7I5EyKVRhf5W
2miSveXY2DBLOKnaRNovDcXfSvBQe0gIYBbU/iv0xwqcldfVDdgww/VwISpOhjU8
MMUlQt+dZac6+f/BfWSluzw6/LnAG2nsCHPBy+eAgDZ/BAO3P0n43bRyhKzOE/zc
X5MFce5/hQDRpyZ6/HJur6mcyt4i0tNsxd4EhWw2CUzGUr55bAC/LWyFJqoQKC1g
xslYK9oFQRy/dpuvQyMUJ2wk0Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:41 2026 by rpki-client