
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
File: rScP3pmx8Qadq473pXaqLCryxvA.mft (raw, json)
Hash identifier: 123x9FK7li5K7DTibt3ADT4Y1i8gg+1n/lU9V9gHeFw=
Subject key identifier: 35:A2:7C:EC:66:32:39:EC:CC:27:FD:E5:FE:0F:C7:F9:12:88:DB:CE
Authority key identifier: AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0
Certificate issuer: /CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0
Certificate serial: 355C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
Manifest number: 353E
Signing time: Tue 24 Mar 2026 14:39:06 +0000
Manifest this update: Tue 24 Mar 2026 14:39:05 +0000
Manifest next update: Tue 31 Mar 2026 14:39:05 +0000
Files and hashes: 1: rScP3pmx8Qadq473pXaqLCryxvA.crl (hash: KbZPfPex6RPnLXkRxr2uJU2tJjgW00HmeUUGThRbfrI=)
2: C64A9D821B2111F0B277571CC4F9AE02.roa (hash: UIYwNayG8hTeDwgvsuKN7XA3xd3VH9+6keHdCSYXSag=)
3: 5E26899A1B2211F093230420C4F9AE02.roa (hash: jxjWvIUdQtnre0sqE/p2npmnE5b2txY5C5YSTif6IFM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl
rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:39:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13660 (0x355c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170304, serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0
Validity
Not Before: Mar 24 14:39:05 2026 GMT
Not After : Mar 31 14:39:05 2026 GMT
Subject: CN=69c2a20a-2ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:a0:62:fd:0d:32:6e:fe:4f:b4:12:ce:78:
60:99:50:2f:fc:d9:6a:07:03:c4:20:c5:5b:3b:6e:
1b:f7:ca:f0:80:66:60:f9:df:4c:fd:d8:f7:07:10:
33:e9:6f:8f:80:fc:47:54:0c:7d:d6:42:89:49:f9:
05:91:6d:b6:42:e0:19:78:a2:7a:ed:eb:3b:6a:e4:
1f:b4:bb:8d:33:a5:0b:11:5d:82:02:5b:73:28:8f:
c4:0c:15:71:be:58:7b:f1:9e:e4:12:50:69:cf:e4:
5b:7e:d4:67:e7:d1:80:af:93:fe:2f:10:47:76:37:
fb:87:69:80:ea:ff:d2:b6:c6:3a:2c:9f:e3:89:78:
77:bd:10:7f:4f:d2:5b:f1:32:25:f6:4b:36:65:64:
cc:49:7c:24:1e:b5:aa:73:a1:0c:f0:49:a3:c7:80:
bd:e6:8c:09:3f:95:b5:59:1e:12:42:2b:e6:8a:91:
a2:3d:ac:b4:30:7b:a4:18:12:46:cb:ff:ea:59:cc:
d4:20:11:ba:59:97:45:e5:b9:22:a6:cf:f4:7e:b9:
bc:7b:08:b9:35:4a:2c:b4:3f:d4:ab:17:58:11:a8:
42:e3:f9:4c:d8:34:38:95:96:a8:09:d7:2f:ba:2d:
1d:51:53:21:a3:b1:5b:6d:5b:b3:27:02:94:7c:95:
76:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A2:7C:EC:66:32:39:EC:CC:27:FD:E5:FE:0F:C7:F9:12:88:DB:CE
X509v3 Authority Key Identifier:
keyid:AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f6:f0:fe:b6:0d:9e:67:48:24:2c:e2:da:a4:2c:a4:02:d0:
ce:31:ca:68:58:09:d4:c2:74:5d:5b:60:ba:8d:7b:ae:11:86:
6c:75:b0:f1:ae:b4:c7:ab:ac:64:62:45:1f:20:8d:70:9f:e3:
78:9f:30:08:9b:c7:04:9c:09:d4:d5:81:94:12:b9:3b:6c:7d:
a7:82:5c:d1:86:42:66:12:9a:69:6d:b2:cf:bc:cb:d8:68:45:
f1:5f:ab:0c:91:dd:78:f5:bf:9e:05:a5:14:fb:fb:25:b3:2e:
a0:80:2f:61:7a:91:b0:63:08:15:68:18:dc:69:0d:10:66:af:
91:a1:b7:c8:bf:3d:26:31:79:f3:b1:75:24:da:6e:a8:e4:34:
59:ec:5f:7c:6b:90:67:33:f2:20:ac:98:94:9b:87:38:2d:99:
c9:6e:b0:8d:61:9d:e4:18:22:cc:4d:e3:5f:87:50:3c:10:99:
af:7d:b4:db:f2:6b:ae:7c:87:5c:ad:7f:af:3c:e1:d1:ab:99:
96:e3:06:e9:59:7b:4b:86:15:a9:91:a7:d1:bb:35:83:1a:1d:
fa:28:49:03:99:ff:2a:1a:56:3e:92:3f:07:32:3c:ef:30:08:
ae:87:7e:50:6c:31:2b:69:2e:53:b5:9d:ff:48:4c:64:d0:35:
62:12:14:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:26:56 2026 by rpki-client