
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
File: x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json)
Hash identifier: pYixcZaPO2pR47z04YQ3U+TQFQAbmt6w4SoksHMNQU8=
Subject key identifier: 41:C6:5C:20:78:6C:94:2C:96:85:3E:3D:83:19:D5:75:7D:29:86:30
Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Certificate serial: 0425
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
Manifest number: 03FE
Signing time: Fri 17 Jul 2026 01:06:34 +0000
Manifest this update: Fri 17 Jul 2026 01:06:34 +0000
Manifest next update: Fri 24 Jul 2026 01:06:34 +0000
Files and hashes: 1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: XMIygGbv/COKAgq049LskUy3O1SzlHyAHbY+bCqMCw8=)
2: EAAF7884450411F09738105FC4F9AE02.roa (hash: E4W5oMfnGquPJA/5oOiZJesivTNv9jd8LinDZ2k9N+Y=)
3: EA2C5116450411F09738105FC4F9AE02.roa (hash: ZkfX4YPLvi9vkcBz9+NUu1NB2UO1R7auL+jxlTVunl8=)
4: 2872E3EEB78511EFACBD807DC4F9AE02.roa (hash: xzTQB5ahnINBSmifSeaZ+vcG1Uy8tZ8MCMCjvhC6ThE=)
5: 27DC7846B78511EFACBD807DC4F9AE02.roa (hash: oTDoE/TmlZFxLgjHVcBtawSli7Z2FLQIv5kQf55g3cA=)
6: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: /iTMsXCUnyKaFWbmcrlhAvQFHMmknqRf7ToDYky66Rg=)
7: EB1C709C450411F09738105FC4F9AE02.roa (hash: +AncE6sTnOtU1ZeR9+gjMKLIkBP6FUz08DE0mz8mrdA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 01:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1061 (0x425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Validity
Not Before: Jul 17 01:06:34 2026 GMT
Not After : Jul 24 01:06:34 2026 GMT
Subject: CN=6a59801a-cabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:06:75:e0:d1:41:73:d3:59:78:d1:30:f0:
89:14:51:7c:ee:1d:77:b1:42:ce:f1:4d:c8:31:1f:
dd:6f:b4:2b:96:44:cb:aa:5f:37:71:2f:78:39:fa:
a9:9a:62:ee:f8:21:68:07:8f:f1:b0:ed:e6:ba:94:
76:c0:06:95:b6:86:3b:d9:76:35:46:6e:0e:4e:e3:
63:d7:2e:99:2f:c9:03:48:c4:c9:cf:08:f6:0f:fd:
6c:f6:7b:31:3c:bb:f5:60:7e:f4:5b:e2:9e:02:20:
7c:24:8b:9e:5a:9a:28:39:b7:e1:60:e7:ab:b5:28:
f4:c9:fc:b4:16:55:ce:84:a1:39:bf:a1:35:15:35:
e8:cf:df:34:87:7c:30:d1:24:7a:a8:c0:ad:77:c5:
1b:75:c4:50:ca:8d:e1:ca:aa:b0:0e:c9:91:55:d6:
be:43:c5:0d:c3:ce:f7:66:71:9e:96:4e:88:35:70:
f5:69:a7:a0:fe:28:8e:3a:0b:86:4b:d5:69:51:22:
55:63:f3:ac:ca:cf:04:75:36:10:e9:d9:61:2f:ac:
49:cb:5f:89:bd:6a:7d:6e:84:da:a0:23:41:10:16:
d8:9a:f2:f2:e5:44:84:12:65:93:40:17:55:c4:c9:
bf:5d:c0:b2:01:c5:60:f0:aa:90:3c:96:8d:a2:37:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C6:5C:20:78:6C:94:2C:96:85:3E:3D:83:19:D5:75:7D:29:86:30
X509v3 Authority Key Identifier:
keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e0:dd:08:02:26:62:34:1c:c1:20:b4:23:83:e6:d2:61:b9:0f:
45:7d:ff:fd:62:99:de:3f:c8:0e:d7:a3:96:89:b3:be:eb:df:
02:24:63:b1:2b:77:68:3a:d2:83:85:c4:dd:f1:a5:d1:60:09:
3a:35:7e:11:e2:be:f0:94:4b:78:6e:e1:84:eb:da:97:9b:dc:
e7:52:f8:27:e3:23:40:d3:a4:b2:7d:1d:00:46:0c:df:ca:d0:
ee:6a:27:fb:5c:2e:9f:17:e1:1b:25:cb:5a:f4:eb:a5:7c:41:
b8:9c:2d:b1:5c:34:1f:e1:96:6a:6a:fe:cc:cb:c0:0e:b9:73:
21:f5:02:ef:9d:72:6d:61:c7:b4:50:b8:38:6c:91:52:c1:d3:
ce:77:ac:8a:93:e2:48:8f:d1:23:f1:c6:8e:09:b1:e4:f8:61:
0a:d5:d4:9b:c0:81:a6:70:1c:91:16:0a:1a:59:d6:89:9c:e3:
aa:ac:35:78:02:cb:ca:64:3b:85:86:07:e0:6e:25:14:23:f1:
0e:f8:c6:82:08:45:41:b4:36:32:1d:09:12:3d:0a:1f:5a:fa:
42:d7:8d:79:d1:93:87:0e:b5:c1:1b:a2:d4:be:bc:57:23:98:
05:b3:70:f0:fd:75:60:47:86:74:67:05:2a:9f:b2:21:aa:25:
5e:39:08:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg1NzkxMTAvBgNVBAUTKEM3RURGQjc1N0Y1OTRCREYyM0FERDcxMjFGNURCRTNE
MjVBRTAwRkMwHhcNMjYwNzE3MDEwNjM0WhcNMjYwNzI0MDEwNjM0WjAYMRYwFAYD
VQQDEw02YTU5ODAxYS1jYWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvDIGdeDRQXPTWXjRMPCJFFF87h13sULO8U3IMR/db7QrlkTLql83cS94Ofqp
mmLu+CFoB4/xsO3mupR2wAaVtoY72XY1Rm4OTuNj1y6ZL8kDSMTJzwj2D/1s9nsx
PLv1YH70W+KeAiB8JIueWpooObfhYOertSj0yfy0FlXOhKE5v6E1FTXoz980h3ww
0SR6qMCtd8UbdcRQyo3hyqqwDsmRVda+Q8UNw873ZnGelk6INXD1aaeg/iiOOguG
S9VpUSJVY/Osys8EdTYQ6dlhL6xJy1+JvWp9boTaoCNBEBbYmvLy5USEEmWTQBdV
xMm/XcCyAcVg8KqQPJaNojfOxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEHGXCB4
bJQsloU+PYMZ1XV9KYYwMB8GA1UdIwQYMBaAFMft+3V/WUvfI63XEh9dvj0lrgD8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODU3OS8wMTc2MDNGQ0NF
QjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5OGpyZGNTSDEyLVBTV3VB
UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3gtMzdkWDlaUzk4anJkY1NIMTItUFNXdUFQdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODU3OS8wMTc2MDNGQ0NFQjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5
OGpyZGNTSDEyLVBTV3VBUHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA4N0IAiZiNBzBILQjg+bSYbkPRX3//WKZ3j/IDtejlomzvuvfAiRjsSt3aDrS
g4XE3fGl0WAJOjV+EeK+8JRLeG7hhOval5vc51L4J+MjQNOksn0dAEYM38rQ7mon
+1wunxfhGyXLWvTrpXxBuJwtsVw0H+GWamr+zMvADrlzIfUC751ybWHHtFC4OGyR
UsHTznesipPiSI/RI/HGjgmx5PhhCtXUm8CBpnAckRYKGlnWiZzjqqw1eALLymQ7
hYYH4G4lFCPxDvjGgghFQbQ2Mh0JEj0KH1r6QteNedGThw61wRui1L68VyOYBbNw
8P11YEeGdGcFKp+yIaolXjkIVw==
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:55:10 2026 by rpki-client