
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
File: Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft (raw, json)
Hash identifier: QKW0aU8g+2gArpkGgvatziGKlGPbqUru44I7FLcOCSo=
Subject key identifier: 7A:E2:38:6B:98:F9:BF:30:77:66:DD:BF:E5:89:A0:97:9E:A5:D7:95
Authority key identifier: 49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E
Certificate issuer: /CN=A9194EF2/serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E
Certificate serial: 0E4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
Manifest number: 0E40
Signing time: Tue 22 Sep 2026 17:40:22 +0000
Manifest this update: Tue 22 Sep 2026 17:40:21 +0000
Manifest next update: Tue 29 Sep 2026 17:40:21 +0000
Files and hashes: 1: Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl (hash: h5KiXm80iOQ29x6OmwsJceiGpmDh4wyUDRuvAFmsmV0=)
2: 1214EE40D2BF11E9A7F4EF1FC4F9AE02.roa (hash: kRMi9OkAx4gCffi4gwugS98RYmWpVyoEaYXXeEv2AGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl
rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 17:40:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3658 (0xe4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194EF2, serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E
Validity
Not Before: Sep 22 17:40:21 2026 GMT
Not After : Sep 29 17:40:21 2026 GMT
Subject: CN=6ab2bd86-2682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:91:95:ba:cc:05:73:76:2d:62:2c:b3:52:
37:a1:56:1c:42:ab:c4:f6:54:0f:09:e4:1d:5e:7c:
91:98:ac:3e:6e:3a:96:18:74:46:b5:e9:e8:35:0a:
25:4e:fd:ad:2e:e1:18:57:2a:3b:8f:bd:da:4f:89:
93:fa:7d:bf:e6:4a:b4:32:25:3f:fb:b1:66:88:ce:
81:7c:de:8b:16:f8:80:d9:73:44:14:11:21:e1:16:
93:63:ec:77:b8:43:e6:58:6a:1b:34:0b:24:0b:8a:
75:dc:dc:46:22:6f:29:53:e0:cb:17:69:90:97:19:
88:76:a6:f5:3b:6e:91:6c:ab:13:38:10:be:f1:5c:
54:f4:1c:0e:d2:78:7b:b5:99:64:af:3a:5a:30:ac:
64:cd:d5:49:3e:d5:0e:98:0b:31:1b:c3:ed:1d:89:
f6:fa:1f:4f:18:10:0f:cc:d2:84:0c:cc:af:92:d3:
2f:48:33:c4:7e:62:47:f8:31:16:d2:d3:38:fe:e9:
b1:fe:e7:ba:d6:73:f9:89:c5:e8:f6:6a:53:c1:bd:
96:2e:e2:17:e7:d9:a5:32:83:07:c9:c6:fd:79:0b:
52:db:9e:f9:c7:06:ce:d6:58:70:e8:5d:27:80:43:
51:33:da:21:21:97:23:d5:ec:e2:fc:f2:07:ad:36:
9a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E2:38:6B:98:F9:BF:30:77:66:DD:BF:E5:89:A0:97:9E:A5:D7:95
X509v3 Authority Key Identifier:
keyid:49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:52:48:3e:a3:63:54:6e:6c:35:12:38:df:33:91:59:5f:9b:
e9:97:95:f7:72:3b:3b:9d:ff:81:e6:16:39:26:08:9e:76:56:
2d:59:10:24:57:ef:5d:74:62:8d:51:07:0a:15:42:7f:f9:57:
98:39:7d:43:ca:87:ca:27:4b:87:94:a0:44:f1:59:ba:30:c7:
9d:9d:35:d2:a8:b9:3e:14:1a:6b:99:82:1b:b7:c2:a8:b2:09:
12:9f:c8:d0:53:72:b1:3c:bf:2c:f5:4f:b2:3f:2d:26:d5:57:
70:fe:ec:da:2d:43:f7:6b:e3:39:35:9b:4c:d6:cd:f8:27:64:
38:34:0f:c7:b7:65:1d:ca:46:3b:28:29:ff:7c:63:af:9b:fd:
f4:dc:54:4c:32:df:ad:75:f0:e7:23:71:88:59:65:d7:b8:cb:
0b:c1:2e:55:3d:f8:f8:68:70:db:53:60:87:08:63:4c:74:36:
24:01:74:04:e0:4a:1e:32:e5:45:70:45:ad:62:7a:61:f0:81:
a5:4c:d7:72:70:60:e3:59:0c:f7:eb:4e:16:83:3d:93:21:f6:
97:a3:32:f3:8d:9c:23:ac:38:d4:7f:6c:dc:a4:5b:b4:b7:44:
71:87:f6:46:63:c5:e9:bf:03:e6:60:8f:c1:ce:ee:60:d6:57:
63:eb:be:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:54:04 2026 by rpki-client