
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
File: Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft (raw, json)
Hash identifier: ZB6HTgrY/cMoPll/0Z9pVlghh5AZQQ+Pm6hBJIrXcxA=
Subject key identifier: DD:8B:C3:51:FA:85:C0:32:BA:67:2C:88:DE:45:7E:F6:F5:76:BA:91
Authority key identifier: 49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E
Certificate issuer: /CN=A9194EF2/serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E
Certificate serial: 0E2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
Manifest number: 0E20
Signing time: Wed 22 Jul 2026 17:59:52 +0000
Manifest this update: Wed 22 Jul 2026 17:59:51 +0000
Manifest next update: Wed 29 Jul 2026 17:59:51 +0000
Files and hashes: 1: Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl (hash: X8vy+nhlyHpaU63n4NIIi0QhShXkJBdRXF72Oic1nQ8=)
2: 1214EE40D2BF11E9A7F4EF1FC4F9AE02.roa (hash: kRMi9OkAx4gCffi4gwugS98RYmWpVyoEaYXXeEv2AGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl
rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:59:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3626 (0xe2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194EF2, serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E
Validity
Not Before: Jul 22 17:59:51 2026 GMT
Not After : Jul 29 17:59:51 2026 GMT
Subject: CN=6a610518-6322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:6e:62:1c:9a:8f:7a:97:2f:8e:ba:99:40:
9f:6a:9b:f2:12:87:ac:b7:91:71:2c:a3:89:c2:19:
e7:45:e1:d0:91:a6:42:b4:a9:a7:c3:81:7f:fe:fb:
73:6f:6d:a7:e2:a2:0d:c1:75:13:94:55:cb:3d:bf:
d4:dc:c0:e1:44:a5:d5:cc:5b:80:87:1b:28:1a:79:
7c:df:cd:ab:0c:11:7c:8e:10:29:fe:1e:04:4d:93:
09:08:81:07:1b:62:0f:d5:0b:f8:a8:7b:af:70:c3:
51:f2:ef:a6:65:93:84:4a:81:d8:57:0a:ac:9c:ec:
2c:5d:aa:42:96:8b:62:93:17:39:60:51:35:65:58:
f8:18:9e:af:9c:86:27:c1:c0:14:20:b5:df:9d:29:
82:99:ee:bc:e0:e1:62:43:4f:98:04:4a:c9:f1:74:
fb:e6:d7:c0:6f:6c:d4:f0:ea:51:46:ff:cb:88:db:
f3:36:80:a8:fa:6a:f7:88:28:4e:d9:e5:cd:25:99:
d8:ea:c5:bc:91:23:aa:31:6c:a0:e2:77:4f:68:ed:
73:1e:05:55:fe:fc:63:88:f5:f0:de:05:88:7c:57:
25:f5:bb:0d:10:f3:a2:83:de:8a:8e:28:e5:61:4c:
9d:0e:6e:17:69:31:5c:4a:cd:a8:9d:26:8d:64:fa:
d5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8B:C3:51:FA:85:C0:32:BA:67:2C:88:DE:45:7E:F6:F5:76:BA:91
X509v3 Authority Key Identifier:
keyid:49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:20:2e:ed:c9:04:28:04:0e:9b:e0:a0:9f:55:ca:4a:b4:ef:
da:b0:40:15:bd:bb:98:95:e0:6e:f1:28:38:18:a9:e2:d5:28:
cf:7c:dc:ed:c1:5b:89:07:50:1b:5b:ca:2b:b9:5b:ca:52:8a:
b4:66:60:de:02:39:29:b2:45:db:78:bb:c4:e1:a7:0f:3b:e2:
1f:27:b4:b5:91:f5:0c:1f:41:f9:72:04:d6:d5:81:01:b9:5d:
81:9f:98:8b:96:37:78:ce:79:2f:01:17:77:61:52:c9:cf:80:
d8:bb:cd:78:b8:66:a2:2f:52:ec:06:8c:7a:9f:46:5e:d0:9d:
07:d4:51:a2:fd:6f:e8:cf:83:11:ba:60:2a:55:57:f6:ea:14:
b0:4a:dd:b5:ee:59:53:8b:51:f2:4d:69:b0:99:66:fc:b2:d2:
43:f9:92:d6:6a:cf:13:65:d5:6f:fd:f8:2a:cf:ec:9e:84:0d:
37:2f:4c:ac:a5:b9:4d:8a:b6:93:89:5e:f5:74:79:db:07:7a:
ad:96:28:03:3e:a5:65:0e:c2:99:48:4e:6f:f1:f0:12:eb:1b:
36:26:dd:62:94:72:c6:4f:12:1f:ca:85:c3:3e:55:e4:ae:4f:
aa:c5:52:80:65:81:78:d7:bf:e5:18:39:af:c2:f1:f7:38:83:
a9:c9:68:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:47 2026 by rpki-client