
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/37cizTQUDBEiFDDMFWw6rJaNHP8.mft
File: 37cizTQUDBEiFDDMFWw6rJaNHP8.mft (raw, json)
Hash identifier: g1Yw8Uds2br45JVTK5cBwc8uOszFRaXrgS/9pDeugRI=
Subject key identifier: BD:AE:D9:E1:95:7D:E2:79:2D:CF:9E:85:A1:95:1F:43:33:51:5C:BB
Authority key identifier: DF:B7:22:CD:34:14:0C:11:22:14:30:CC:15:6C:3A:AC:96:8D:1C:FF
Certificate issuer: /CN=A91E64F1/serialNumber=DFB722CD34140C11221430CC156C3AAC968D1CFF
Certificate serial: 60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37cizTQUDBEiFDDMFWw6rJaNHP8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/37cizTQUDBEiFDDMFWw6rJaNHP8.mft
Manifest number: 5F
Signing time: Tue 27 Oct 2026 08:22:55 +0000
Manifest this update: Tue 27 Oct 2026 08:22:55 +0000
Manifest next update: Tue 03 Nov 2026 08:22:55 +0000
Files and hashes: 1: 37cizTQUDBEiFDDMFWw6rJaNHP8.crl (hash: liWrqkRPxGsW2pPxZCRNwPHs4EJtIuugKV6y8BvmqBU=)
2: 108D99AC3E6311F1A067C8A3CC833773.roa (hash: /JQEBfM1zZrqYFAT+lEkN7EgquebMH9d44BeOs81UzU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/37cizTQUDBEiFDDMFWw6rJaNHP8.crl
rsync://rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/37cizTQUDBEiFDDMFWw6rJaNHP8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37cizTQUDBEiFDDMFWw6rJaNHP8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 08:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E64F1, serialNumber=DFB722CD34140C11221430CC156C3AAC968D1CFF
Validity
Not Before: Oct 27 08:22:55 2026 GMT
Not After : Nov 3 08:22:55 2026 GMT
Subject: CN=6ae05f5f-8113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:14:9f:60:d4:fa:12:a3:60:3f:b6:16:71:
a1:57:ac:ce:29:54:d1:54:d0:53:2e:64:16:65:de:
b3:21:24:4e:78:c6:d7:ea:92:ef:51:d9:78:4e:57:
6d:d8:9b:61:d9:7c:5e:32:9f:da:cc:0b:f8:5b:79:
27:e9:c0:d7:80:16:0a:28:fa:0e:0b:f0:5c:89:32:
81:dd:aa:02:e5:ae:20:96:8a:8d:66:25:41:57:4f:
d0:01:f6:d8:ca:d7:48:c6:de:65:72:25:f2:7b:c8:
76:d7:d0:8f:2c:21:89:77:00:4f:a2:ab:0b:87:72:
3c:13:c4:92:f6:c2:64:cf:f8:79:d6:2c:55:cc:b7:
72:96:52:e8:ea:d3:7a:54:7a:8a:7a:ed:1f:3c:4b:
3c:55:c2:5c:1e:46:11:0a:d8:9b:bd:9b:5f:fe:5d:
a3:ea:8a:d5:94:38:40:2c:48:fe:a7:df:45:c2:d1:
af:51:8a:b3:da:e6:51:61:34:ba:47:04:eb:e0:7c:
7a:35:ca:14:e4:5f:9f:fc:d9:f4:b3:c1:3a:ce:6a:
91:2b:65:81:8f:40:c0:f7:53:f9:92:a3:e6:1d:08:
67:d2:65:a9:9c:c0:47:ad:21:17:84:b2:23:8f:df:
72:df:80:6a:ee:03:a3:f9:fe:b9:e0:c6:e4:91:38:
89:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AE:D9:E1:95:7D:E2:79:2D:CF:9E:85:A1:95:1F:43:33:51:5C:BB
X509v3 Authority Key Identifier:
keyid:DF:B7:22:CD:34:14:0C:11:22:14:30:CC:15:6C:3A:AC:96:8D:1C:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/37cizTQUDBEiFDDMFWw6rJaNHP8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37cizTQUDBEiFDDMFWw6rJaNHP8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/37cizTQUDBEiFDDMFWw6rJaNHP8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dd:81:d2:60:1f:f1:f6:a0:7b:75:b9:87:13:ff:58:e6:e7:cd:
7a:50:f7:b8:d1:8b:1b:05:3e:27:79:a6:0a:81:9c:54:c3:62:
93:f0:3d:05:45:65:8d:a9:3c:cc:8b:3e:e2:50:42:a6:c3:8e:
7c:1e:00:39:dc:48:e4:9e:d2:2d:c6:25:53:38:be:16:ef:88:
c7:80:9e:6d:15:27:5d:61:f2:19:59:19:fd:e5:79:93:39:27:
86:57:2d:05:25:f7:8b:ab:e0:ca:74:c7:d1:30:c2:80:5e:d5:
b9:30:df:b9:66:89:2b:f9:64:5a:b0:17:03:b4:6b:fb:60:61:
d6:dd:13:a5:ce:0d:12:2b:1d:4f:f5:b2:13:87:e1:a1:77:7a:
2c:c1:a8:59:ef:4e:a8:33:53:8a:79:74:04:29:a0:26:58:11:
50:8a:5b:6d:3f:6f:a6:17:ca:51:8e:56:dc:6a:6c:5f:e6:c6:
8d:cb:66:1c:d7:11:a5:44:70:b8:86:cc:b2:5f:28:3d:40:ef:
e2:e8:5f:a1:ca:fc:14:40:d4:09:27:da:11:a0:98:2b:49:a7:
ec:1e:27:d8:ef:9c:28:04:6a:d8:9d:17:3c:7c:6d:a7:b8:15:
7d:ad:f2:fc:e8:15:2f:99:b9:97:b5:1e:6d:f6:1f:b3:ec:53:
d3:ab:09:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:24:11 2026 by rpki-client