
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
File: x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json)
Hash identifier: 4H6rr7R5Z57j8jgYgY2Q0CTVjfvr7MVPulaIFpdNXZY=
Subject key identifier: 9E:6F:52:92:A1:7C:78:84:0E:96:A2:31:21:CA:0D:A8:7E:A7:F6:E7
Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Certificate serial: 03F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
Manifest number: 03D0
Signing time: Fri 17 Apr 2026 00:32:35 +0000
Manifest this update: Fri 17 Apr 2026 00:32:34 +0000
Manifest next update: Fri 24 Apr 2026 00:32:34 +0000
Files and hashes: 1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: x1Eu92Oe3iSeGy3YfLsKY2tPMr3ltLU/blHJ9i6yZ88=)
2: 2872E3EEB78511EFACBD807DC4F9AE02.roa (hash: xzTQB5ahnINBSmifSeaZ+vcG1Uy8tZ8MCMCjvhC6ThE=)
3: 27DC7846B78511EFACBD807DC4F9AE02.roa (hash: oTDoE/TmlZFxLgjHVcBtawSli7Z2FLQIv5kQf55g3cA=)
4: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: /iTMsXCUnyKaFWbmcrlhAvQFHMmknqRf7ToDYky66Rg=)
5: EA2C5116450411F09738105FC4F9AE02.roa (hash: ZkfX4YPLvi9vkcBz9+NUu1NB2UO1R7auL+jxlTVunl8=)
6: EAAF7884450411F09738105FC4F9AE02.roa (hash: E4W5oMfnGquPJA/5oOiZJesivTNv9jd8LinDZ2k9N+Y=)
7: EB1C709C450411F09738105FC4F9AE02.roa (hash: +AncE6sTnOtU1ZeR9+gjMKLIkBP6FUz08DE0mz8mrdA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1015 (0x3f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Validity
Not Before: Apr 17 00:32:34 2026 GMT
Not After : Apr 24 00:32:34 2026 GMT
Subject: CN=69e17fa3-95ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7f:f3:47:66:6f:d5:22:d0:05:18:d7:0b:1a:
85:fe:e6:3d:e2:e1:4d:c3:dc:56:07:b2:1e:8c:a3:
a0:96:8d:cd:91:cd:27:fe:47:67:b7:22:b7:55:0a:
82:25:41:cf:20:0c:a8:51:10:58:ad:b4:b2:7d:c8:
a9:1b:59:48:69:b2:34:89:f2:4f:6c:ae:eb:44:d9:
3c:94:79:53:68:ec:d0:c5:fc:d7:61:9c:8d:c5:b0:
b1:02:df:fd:99:f8:91:1a:b4:13:23:42:0a:6e:6c:
68:ac:dd:1a:0b:e9:ab:42:63:a3:dd:50:67:ba:75:
d6:2d:2a:d9:3a:37:da:e8:7e:2f:0a:b7:d7:d6:34:
43:28:44:4c:8b:55:bd:51:6e:44:a0:50:c9:7f:64:
5c:e3:a0:3b:01:a3:3e:9e:1f:53:86:8e:14:cc:bd:
6b:a7:8c:ad:b9:2c:c2:95:20:9d:a8:4c:17:0d:d7:
26:15:ac:d8:7b:70:f3:e7:66:aa:f9:c1:35:28:b3:
53:46:a8:87:d0:be:a5:cf:d5:b1:91:72:03:ee:4e:
36:0c:10:db:74:fa:91:34:c2:11:20:9e:a6:e2:42:
89:08:13:c0:c4:81:ca:bc:fd:11:0b:7e:c9:f0:05:
1d:cb:20:79:ba:84:c3:7f:c4:dd:b1:42:56:ba:81:
a8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6F:52:92:A1:7C:78:84:0E:96:A2:31:21:CA:0D:A8:7E:A7:F6:E7
X509v3 Authority Key Identifier:
keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:81:f5:f6:68:53:5f:e0:19:37:dd:6c:ea:ad:6c:18:99:cc:
39:11:1f:db:fe:45:cf:e0:e5:0a:67:a7:f7:00:54:3e:12:0c:
d9:b7:a7:00:bd:5e:c1:cf:aa:ce:e4:4d:5d:de:e7:e0:06:99:
6c:71:c9:fd:6f:8a:70:fc:b6:49:49:b5:d8:f4:17:42:88:00:
b3:42:f7:55:e2:a8:ac:1b:d2:0a:cc:3f:8d:f8:09:13:c2:4c:
2d:6c:f4:7d:6d:3d:a7:34:2c:94:b2:1d:9b:06:88:29:bb:63:
b5:08:95:c6:e4:8e:f5:9c:2c:1e:0a:e5:39:ef:a3:17:d6:35:
08:c0:38:26:65:e9:cf:42:1d:c9:c4:65:0a:17:1d:e3:d6:9f:
05:42:ca:06:4c:98:24:5d:22:10:6a:be:83:30:2f:a6:63:32:
3e:6d:6e:86:b5:ee:19:5b:51:bd:f9:ed:d1:ea:1d:75:87:2c:
b1:14:0a:b7:df:89:f4:ed:42:e6:f2:fe:03:44:d8:18:2c:f0:
70:76:41:fc:fd:0a:2f:cf:cf:be:d2:07:f6:7a:7e:44:26:93:
84:b3:9c:93:60:d8:b6:e5:f6:8d:29:9f:30:40:6b:23:19:9a:
cf:ff:da:b5:3c:3e:00:2a:13:46:72:7b:df:3c:32:80:51:1f:
cd:89:26:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:07:53 2026 by rpki-client