
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
File: scNHRW5UpGYuEJfs0zSsEcAs4As.mft (raw, json)
Hash identifier: bw1RjsU2RNamzZOwD9pFKYseybBYzgwTERjTPeVVZas=
Subject key identifier: 3E:9C:E0:B9:71:49:3C:0F:E4:6B:E5:78:D9:C3:3A:F1:34:4A:DA:46
Authority key identifier: B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B
Certificate issuer: /CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
Certificate serial: 07DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
Manifest number: 07BE
Signing time: Tue 22 Sep 2026 21:11:53 +0000
Manifest this update: Tue 22 Sep 2026 21:11:53 +0000
Manifest next update: Tue 29 Sep 2026 21:11:53 +0000
Files and hashes: 1: scNHRW5UpGYuEJfs0zSsEcAs4As.crl (hash: JFVarBLekfkQv6/zLLHIoVS7ob8RSnRzh5WWObDs9mQ=)
2: 31137FAA5E7311EB8B143F3BC4F9AE02.roa (hash: OuyC5TmVNJMLDabcwM8A0FwhQBrfR/VlGDzUJTCn8/U=)
3: 2mAvWNmJ-wT9J8VEJAZoZpykpf8.asa (hash: ZJ5wRyiN9xTWxZ56f7HInHFmchNgRi4/XyNoHCmCObQ=)
4: 31D902165E7311EB8B143F3BC4F9AE02.roa (hash: WVvSpMhKFxSN9i8JnDOZYNXQPB/pQobS+FdjnkNHrVI=)
5: 3263B6905E7311EB8B143F3BC4F9AE02.roa (hash: QtOxsjWDqgNGgCTcsMTzCCptaAMNkGCIlXxZlBPaZcU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl
rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:11:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2012 (0x7dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160438, serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
Validity
Not Before: Sep 22 21:11:53 2026 GMT
Not After : Sep 29 21:11:53 2026 GMT
Subject: CN=6ab2ef19-8ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d3:d8:25:ba:4c:19:78:9b:6f:05:73:a1:33:
5e:9c:9f:f0:51:de:73:d0:02:e0:ca:6c:07:cf:fc:
b0:33:ef:03:0e:fa:0e:53:ce:34:c4:19:63:4c:82:
5d:92:16:1b:03:6e:98:cc:8a:bd:17:a6:73:ea:0a:
ec:8c:cc:1b:53:33:b7:77:a3:7b:ba:2a:b9:bf:d4:
91:27:3a:7f:bc:a7:e9:71:d8:ea:5d:ac:5c:4a:47:
57:46:db:97:59:e1:af:38:e6:d7:c1:08:e3:c6:2d:
33:e8:50:20:6f:38:fe:9e:9a:94:15:d0:62:1b:4e:
fa:21:9c:51:63:e9:f8:c9:bd:7c:97:db:a8:7c:44:
0c:59:b9:62:6d:0e:e1:a0:56:65:f9:f9:b4:52:de:
35:23:b7:36:7d:80:90:85:dc:a2:08:bd:c6:4a:af:
f4:91:d4:dc:0c:af:97:07:64:c5:fd:6a:bb:c5:20:
7c:ad:b0:79:e7:03:c2:74:e5:e7:07:a5:c3:ae:85:
f1:89:bd:27:54:5e:23:3c:94:57:01:0d:c7:64:63:
3c:0d:e8:98:2d:08:3d:eb:4a:50:c8:29:b2:c0:46:
ba:b3:c9:da:96:fd:49:f5:e3:2f:97:14:1f:be:45:
1b:aa:6f:8a:4f:18:76:f4:a4:e1:68:09:72:f8:97:
d9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9C:E0:B9:71:49:3C:0F:E4:6B:E5:78:D9:C3:3A:F1:34:4A:DA:46
X509v3 Authority Key Identifier:
keyid:B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:78:01:93:f4:aa:c6:5d:76:8d:59:8d:a0:2e:e3:71:a3:6f:
62:fd:54:9d:f0:4a:00:09:aa:b4:5a:0d:63:d4:2e:af:8a:6c:
e2:28:e3:6d:fd:33:8c:de:76:11:7a:af:2a:72:23:2b:55:f9:
4b:5e:09:19:f7:52:e4:ab:e8:5a:e7:b8:f8:f9:77:0b:69:ef:
85:ca:cb:4e:b9:9a:18:7f:25:98:e1:11:1d:5c:ac:d2:a5:f1:
05:c6:5a:a7:dc:22:92:83:c2:d1:e9:47:20:d6:f2:90:78:7a:
30:90:9c:b9:db:74:4c:ae:ca:f6:56:47:5f:38:05:2f:79:91:
54:37:7a:97:f7:90:dc:4a:ed:a3:09:61:da:cf:ad:f3:83:6e:
f5:08:b8:57:ef:80:aa:22:b0:ee:56:89:51:71:6e:b9:bd:2f:
20:c3:f5:6a:a8:6d:da:1e:b4:dc:22:ff:91:17:46:39:d0:10:
ab:94:db:59:3d:84:34:8a:cd:af:75:74:0e:ca:f3:3d:4e:28:
80:b1:11:a2:bd:42:e6:f9:54:1f:74:9e:27:28:ad:d3:80:ac:
9b:be:e5:cb:2b:8f:58:d7:a6:16:88:17:20:c7:28:7a:4d:ce:
63:e0:da:6f:77:1f:4a:5c:e9:73:c1:af:1a:e5:21:85:62:6d:
50:42:89:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:06:01 2026 by rpki-client