
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
File: x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json)
Hash identifier: Ld7z8Xvqgj+wM0YyhRfOuKoSCJq67fdhr503PhsmTbk=
Subject key identifier: E4:C2:6F:87:59:35:4F:73:58:EB:D7:A2:CC:74:F3:93:39:3F:21:7A
Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Certificate serial: 045D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
Manifest number: 0430
Signing time: Mon 19 Oct 2026 00:26:57 +0000
Manifest this update: Mon 19 Oct 2026 00:26:56 +0000
Manifest next update: Mon 26 Oct 2026 00:26:56 +0000
Files and hashes: 1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: xksXkhrzXgoW/ml3E6dDG9EWQZW/ciQdUgTXlbvnVqA=)
2: EB1C709C450411F09738105FC4F9AE02.roa (hash: kKSTbR+tVpgjH6vhWqQI0BMVxGVtvEw6KnQiqBQIJPw=)
3: 2872E3EEB78511EFACBD807DC4F9AE02.roa (hash: MD5jR5tpYJlNlwKY582qX3evpCpiOhexciEbOh4B16Q=)
4: EA2C5116450411F09738105FC4F9AE02.roa (hash: Xr2VYUhkH0/de+tQtfsGqNTFcSg1V81ZtLTrfEbPMyY=)
5: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: xtfMhsvCmNC/KLnIedjo12Ghs4JLU1JBpj4bKmYOfGI=)
6: 27DC7846B78511EFACBD807DC4F9AE02.roa (hash: OOByC8/uw6ffnIWwfvMTnrrm+xO8XKIBxcxBWMrFOjo=)
7: EAAF7884450411F09738105FC4F9AE02.roa (hash: s7PvGMjj7mjpLP1ZkrrYQzfCt7Nowhw1ZhztentGrbk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 00:26:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117 (0x45d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Validity
Not Before: Oct 19 00:26:56 2026 GMT
Not After : Oct 26 00:26:56 2026 GMT
Subject: CN=6ad563d0-727b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:88:19:2a:29:81:32:e4:1b:d3:7a:db:81:
90:9c:2f:47:99:34:a1:e9:6b:32:38:f8:ad:9e:f4:
c4:d4:a4:68:e3:10:6a:76:c2:0a:9c:27:44:4a:63:
2e:81:d8:d4:40:c0:74:74:15:3e:54:21:8a:65:93:
0e:61:04:18:6f:1b:d9:77:d3:53:78:9c:2b:e6:e2:
ba:e4:f7:0b:ee:14:49:73:30:7e:b5:3e:2a:7e:fc:
2e:ad:80:3d:52:83:3b:33:c1:35:1c:3d:8e:11:e7:
64:14:2d:19:fa:b8:41:a7:ba:a3:d0:d5:1e:1d:4c:
8a:8b:c5:f5:04:d9:e4:90:76:2d:c2:40:8f:5e:89:
66:5c:31:82:2e:29:ef:1a:a3:24:da:22:53:ab:3b:
91:96:a9:a0:0d:38:d3:18:a0:9b:d1:d0:f4:39:b9:
8b:3b:6b:8d:6a:53:ad:4a:96:c6:8f:85:2f:d9:c3:
8e:f1:58:02:21:3d:8b:85:4e:ab:89:fc:1e:ce:b1:
3f:21:a6:01:97:ac:59:6f:b2:be:3a:a4:d3:f7:60:
89:fd:25:2f:9b:18:e6:56:07:39:d3:63:bc:08:40:
61:0e:f4:b2:91:4d:45:a6:e5:ee:cf:6e:d3:a1:b2:
e3:fc:84:ec:e9:23:e8:0e:b7:f8:bb:34:65:48:d9:
1c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C2:6F:87:59:35:4F:73:58:EB:D7:A2:CC:74:F3:93:39:3F:21:7A
X509v3 Authority Key Identifier:
keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8e:9c:50:1f:47:f0:a5:99:a8:27:12:b7:20:ee:ad:ad:82:
58:3f:fa:08:d3:0e:5b:1c:e4:db:2c:35:1f:49:64:57:a6:b0:
64:0e:9a:ca:f6:f5:30:5e:08:71:a1:0f:82:cb:cf:2d:a5:fa:
59:61:43:d7:3a:3d:f0:96:4c:9f:bf:b9:aa:30:ec:f9:a8:65:
56:6d:7e:5f:b6:07:fa:07:fd:7d:29:d6:c0:ae:28:ae:11:3b:
f0:d2:1e:6f:ac:8a:a8:9b:2e:9b:e5:70:6b:39:63:80:63:1a:
5f:fe:24:90:26:91:ab:80:91:17:16:16:45:ad:46:74:3f:a4:
3f:7c:39:d5:18:d5:e6:da:2c:d3:d5:ce:60:7a:9b:d4:7d:f2:
4e:1c:1f:db:9b:30:12:f1:df:d0:2c:63:ec:8e:35:16:c0:99:
5a:d3:2a:59:fa:de:a1:60:49:19:73:c8:15:3e:91:1c:67:f7:
51:e2:35:cb:42:64:8d:53:03:43:66:6a:27:af:67:4d:bb:20:
7c:b0:8f:5d:64:fb:5b:78:a0:dd:25:ea:a2:86:50:fe:89:db:
98:2e:15:07:89:10:84:d7:e9:79:c6:5f:8c:68:3f:21:60:23:
3f:f9:31:0f:45:5f:e7:66:0a:48:f3:ba:20:38:76:39:c9:98:
1e:84:57:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:21:28 2026 by rpki-client