
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
File: x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json)
Hash identifier: MfGx8/NeB5VmJ6ke0Qr+3dAQw4PQpWfkxEgPYb7mgpE=
Subject key identifier: 04:B8:1F:E3:59:F2:A8:C5:2D:E7:DE:46:18:CC:A5:6F:CC:11:01:63
Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Certificate serial: 0445
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
Manifest number: 0418
Signing time: Tue 01 Sep 2026 00:19:10 +0000
Manifest this update: Tue 01 Sep 2026 00:19:09 +0000
Manifest next update: Tue 08 Sep 2026 00:19:09 +0000
Files and hashes: 1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: OE+D9OSLlUh617u32pZjzoKQC7E2Yg7/y8nRu/bUzR0=)
2: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: xtfMhsvCmNC/KLnIedjo12Ghs4JLU1JBpj4bKmYOfGI=)
3: EAAF7884450411F09738105FC4F9AE02.roa (hash: s7PvGMjj7mjpLP1ZkrrYQzfCt7Nowhw1ZhztentGrbk=)
4: EA2C5116450411F09738105FC4F9AE02.roa (hash: Xr2VYUhkH0/de+tQtfsGqNTFcSg1V81ZtLTrfEbPMyY=)
5: EB1C709C450411F09738105FC4F9AE02.roa (hash: kKSTbR+tVpgjH6vhWqQI0BMVxGVtvEw6KnQiqBQIJPw=)
6: 2872E3EEB78511EFACBD807DC4F9AE02.roa (hash: MD5jR5tpYJlNlwKY582qX3evpCpiOhexciEbOh4B16Q=)
7: 27DC7846B78511EFACBD807DC4F9AE02.roa (hash: OOByC8/uw6ffnIWwfvMTnrrm+xO8XKIBxcxBWMrFOjo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Sep 2026 00:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1093 (0x445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Validity
Not Before: Sep 1 00:19:09 2026 GMT
Not After : Sep 8 00:19:09 2026 GMT
Subject: CN=6a9619fe-fdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6a:17:ce:79:b6:f2:79:2a:da:d3:66:9e:cc:
b9:1d:18:f0:49:ca:4b:c8:1f:4e:94:06:82:4c:e9:
d0:ac:a8:1a:a2:02:b1:b5:7c:6d:58:77:2e:94:36:
6a:27:b0:e2:f4:75:7f:83:33:a2:84:ff:ef:7c:93:
00:b7:20:19:19:93:fe:cd:ff:4e:ca:53:1b:c1:0c:
c2:fe:64:a2:07:f4:80:55:fb:c7:74:5a:2b:71:90:
8b:eb:ad:90:06:98:d3:1a:42:9d:d5:22:db:3e:69:
55:ae:67:59:82:8f:37:32:00:23:8b:9c:4c:6e:92:
f9:57:65:9e:4a:25:af:f2:17:6c:42:6e:0c:fa:cf:
18:83:3a:b8:b8:1f:da:f5:13:18:31:e3:c2:87:92:
40:1f:b9:18:1f:86:5d:d5:da:b4:d4:6a:1c:3e:15:
51:4c:e1:9e:22:ca:a2:02:dc:0b:5e:77:5d:4a:be:
41:6c:f0:ec:13:37:85:62:c5:b9:96:6b:ba:fb:d2:
c0:8f:fa:37:e8:db:bf:bc:77:f0:03:f6:87:23:99:
3e:0a:40:bb:6c:0d:35:25:6f:7d:28:27:d0:65:da:
99:2a:32:11:ab:7c:c8:76:d0:6a:f9:3e:2b:07:f3:
7d:89:28:97:2d:1c:a9:77:37:47:f0:3a:0c:27:b2:
46:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B8:1F:E3:59:F2:A8:C5:2D:E7:DE:46:18:CC:A5:6F:CC:11:01:63
X509v3 Authority Key Identifier:
keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e6:58:01:94:98:39:1a:24:45:98:93:6a:77:58:91:89:23:8f:
40:74:02:68:48:74:c3:3c:20:8f:90:88:d0:7f:f9:48:55:21:
93:ef:b4:76:9e:0a:f6:c1:f1:fe:8d:04:fd:5c:41:88:90:13:
c2:30:64:0b:55:0b:81:a1:50:a5:ce:84:80:1d:99:9c:f1:8b:
d2:55:77:56:f1:42:8e:97:79:26:ef:fb:41:08:50:4f:6a:54:
29:2c:2f:78:7f:60:b0:47:2b:8e:38:19:8d:8e:b3:10:27:12:
85:cc:77:22:bf:e6:13:e8:44:47:42:3b:9c:cc:fa:68:05:3d:
cf:d1:4b:1a:f1:72:f6:f3:3a:ea:e5:c7:fe:2f:81:6f:5b:50:
6e:dd:35:dd:42:da:ce:90:d5:ac:32:14:54:90:d3:02:58:6c:
7c:fd:c9:a5:57:db:11:9c:79:d5:d7:be:ea:92:4b:96:68:55:
fb:05:ab:c1:59:80:78:ac:04:a4:c9:47:89:d3:e0:50:50:93:
76:b8:56:ee:e5:34:23:fa:d6:3f:d1:16:a8:d9:66:c1:59:ad:
50:1d:8a:94:14:23:a7:67:ae:28:bd:63:ee:a1:a1:8a:8b:f2:
6e:58:88:ef:e4:72:48:a6:90:73:c1:e3:dd:1b:4e:46:09:71:
81:56:f6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:06:53 2026 by rpki-client