
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
File: x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json)
Hash identifier: nhioUNson/7Br9pFgenrMAbVGOlfh9sP2VkRtJFnU9A=
Subject key identifier: 6F:A9:BF:25:10:60:5D:45:F3:C3:07:30:B7:FB:4A:E1:62:01:07:C1
Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Certificate serial: 040E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
Manifest number: 03E7
Signing time: Mon 01 Jun 2026 01:18:14 +0000
Manifest this update: Mon 01 Jun 2026 01:18:14 +0000
Manifest next update: Mon 08 Jun 2026 01:18:14 +0000
Files and hashes: 1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: RMm+BzNHCHvCPl+2tHNb8vTbOk0hzSKnynDOtYZVxoY=)
2: EAAF7884450411F09738105FC4F9AE02.roa (hash: E4W5oMfnGquPJA/5oOiZJesivTNv9jd8LinDZ2k9N+Y=)
3: 27DC7846B78511EFACBD807DC4F9AE02.roa (hash: oTDoE/TmlZFxLgjHVcBtawSli7Z2FLQIv5kQf55g3cA=)
4: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: /iTMsXCUnyKaFWbmcrlhAvQFHMmknqRf7ToDYky66Rg=)
5: EB1C709C450411F09738105FC4F9AE02.roa (hash: +AncE6sTnOtU1ZeR9+gjMKLIkBP6FUz08DE0mz8mrdA=)
6: EA2C5116450411F09738105FC4F9AE02.roa (hash: ZkfX4YPLvi9vkcBz9+NUu1NB2UO1R7auL+jxlTVunl8=)
7: 2872E3EEB78511EFACBD807DC4F9AE02.roa (hash: xzTQB5ahnINBSmifSeaZ+vcG1Uy8tZ8MCMCjvhC6ThE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 01:18:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1038 (0x40e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Validity
Not Before: Jun 1 01:18:14 2026 GMT
Not After : Jun 8 01:18:14 2026 GMT
Subject: CN=6a1cddd6-6446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:b8:9c:7f:36:c1:17:79:30:7b:d6:31:02:
40:c3:f7:15:0f:fa:23:44:b6:ed:5b:9e:1a:ea:26:
00:14:45:ed:5b:9f:cd:47:00:ff:b4:c4:51:e8:c3:
7f:2d:67:eb:79:c9:9b:10:71:37:d7:86:3c:95:2b:
27:e7:ef:35:7f:2f:ad:60:99:77:e3:4a:7d:ad:dd:
3b:6a:10:c7:05:6b:4d:c5:b5:86:a9:87:c3:a0:3d:
9b:8d:6c:d3:55:3c:29:7c:dc:59:9b:11:46:84:14:
41:f7:80:80:91:d7:87:26:eb:a0:d1:4e:33:cd:66:
d3:11:4e:a3:0c:35:96:57:4a:13:b2:39:f0:44:8f:
93:21:a9:7d:f5:76:3d:5e:ae:02:6f:24:a2:56:39:
43:f2:15:7e:71:56:5b:d5:8b:f7:5b:7e:7d:e3:43:
f1:aa:8c:af:f1:ed:f4:ee:30:5e:bd:4a:57:ba:2b:
98:cf:fd:64:cc:27:1e:2a:93:b5:0c:a3:1c:28:7c:
5a:ab:89:e4:47:69:db:7d:6d:10:a7:af:94:04:b5:
41:6d:f5:98:f7:3c:cc:45:cb:89:81:64:41:da:b8:
ac:8e:27:c6:6c:39:1f:86:74:cd:4b:cc:54:1c:ba:
10:a6:c5:f6:a2:43:f1:ed:f5:67:d3:4a:49:18:9b:
05:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A9:BF:25:10:60:5D:45:F3:C3:07:30:B7:FB:4A:E1:62:01:07:C1
X509v3 Authority Key Identifier:
keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:94:e0:53:37:24:e9:51:f4:e2:e2:37:ad:1e:d9:31:28:8c:
a7:a5:f0:f8:5f:51:49:95:a6:a0:8d:da:d0:62:51:48:37:c5:
d5:41:a1:cb:6a:74:7e:2d:77:93:7f:3e:55:be:94:94:24:f7:
eb:0e:7d:6b:ad:fe:a1:e6:14:38:93:28:b9:06:0f:b9:bc:e6:
8f:35:2f:bd:8f:f1:2d:75:4a:9d:68:c3:3e:92:b7:5e:87:06:
cf:96:f4:6a:11:65:c2:10:fe:02:14:e9:22:54:c6:84:b6:7f:
a1:23:52:03:8f:8b:aa:51:16:6a:a4:94:4a:65:30:ac:06:14:
29:dd:b2:10:e1:5a:24:fb:fa:f2:9e:c6:91:8a:b3:32:e1:83:
f6:08:68:45:6b:37:35:d7:63:e0:54:86:79:db:3d:34:dd:31:
28:04:41:48:fd:7c:ac:b3:4d:a4:77:ac:e2:c8:89:d3:cd:b9:
46:6d:22:98:0b:97:4a:69:04:bd:d1:05:ce:81:c8:dc:3e:ca:
68:f6:46:8f:29:5b:dc:16:34:f7:27:0e:a3:a2:94:de:27:02:
85:4e:86:8b:0b:a0:5e:cc:81:ff:c0:a1:00:3c:c8:39:f9:3b:
7b:df:8b:53:36:37:34:fa:a2:eb:4a:b9:ff:91:32:24:6e:e4:
9e:60:45:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:30:03 2026 by rpki-client