
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
File: Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft (raw, json)
Hash identifier: oEKy6oekc9gUvl0QcjhTjlKIj5AocSeDEbAfsvqV8cY=
Subject key identifier: 32:91:85:50:4C:E5:D7:BF:FA:04:64:66:1B:BD:63:1E:AA:29:0E:AF
Authority key identifier: 49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E
Certificate issuer: /CN=A9194EF2/serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E
Certificate serial: 0DEA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
Manifest number: 0DE1
Signing time: Tue 24 Mar 2026 17:43:28 +0000
Manifest this update: Tue 24 Mar 2026 17:43:27 +0000
Manifest next update: Tue 31 Mar 2026 17:43:27 +0000
Files and hashes: 1: Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl (hash: W8AiDO/j682Vcl5o5OooH4KJis4iw0NhHfMSsjhIUis=)
2: 1214EE40D2BF11E9A7F4EF1FC4F9AE02.roa (hash: e4kOFF05o5VdluZF/kOk4uZ8x60T66NPK/E1N2Z8lgI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl
rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3562 (0xdea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194EF2, serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E
Validity
Not Before: Mar 24 17:43:27 2026 GMT
Not After : Mar 31 17:43:27 2026 GMT
Subject: CN=69c2cd40-a93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:88:27:68:23:1f:c4:16:bb:d0:78:9d:ce:
c5:ad:d0:e2:5c:e5:1e:f7:da:bb:fd:8d:6a:19:5a:
fe:91:8b:c9:0f:7c:d0:24:91:78:1c:76:6d:43:3a:
08:b3:a3:c8:28:7c:0a:a0:bd:a8:a6:d0:4d:87:95:
81:8c:ff:60:b0:b8:e9:2e:b1:34:b5:61:a5:0e:52:
5f:6b:03:6a:fa:da:92:c5:9e:7a:37:f2:32:13:e2:
f9:29:89:a1:ab:21:fb:d1:af:bf:d7:bf:b1:ad:42:
e2:75:3b:0c:fd:ac:68:c5:de:fe:4d:3c:89:aa:16:
4c:62:fd:ee:19:f0:1b:91:bc:16:18:36:01:83:5a:
27:a1:fa:62:b7:cb:ba:2c:26:7b:c4:77:68:a3:ba:
16:d7:be:6b:65:13:a5:e6:e8:da:9d:1e:58:5e:f2:
cd:54:07:cd:8a:48:fe:15:a1:3c:7c:2f:35:ce:81:
10:24:da:3e:59:27:cf:0c:01:3b:4e:0b:67:d5:5d:
20:9a:6f:45:60:55:87:c8:88:16:1b:16:a0:13:b3:
6a:11:00:53:c4:f4:e5:0b:d8:2f:1f:0d:bf:a2:4d:
1c:b7:60:bb:0f:5b:c2:f7:d1:ff:6f:03:38:53:05:
db:d0:a9:b2:74:d7:e2:2b:88:d4:bb:a8:52:04:7c:
22:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:91:85:50:4C:E5:D7:BF:FA:04:64:66:1B:BD:63:1E:AA:29:0E:AF
X509v3 Authority Key Identifier:
keyid:49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:c6:0d:25:21:b2:e5:79:53:29:3f:10:40:26:98:43:f7:d5:
5b:4a:a4:b5:37:52:47:1b:b2:2c:f4:cd:26:3f:73:11:6f:48:
44:c6:bb:73:79:53:ca:d7:89:6c:db:bd:1c:85:9e:7c:0b:b0:
86:fc:ec:be:b7:ee:25:af:d9:60:5f:52:d9:4b:e8:6e:3d:94:
3e:14:f7:10:7a:db:3a:bb:89:6b:e6:ad:2c:39:68:dd:8a:ed:
89:cf:35:ed:09:b2:81:c6:da:cf:ee:68:3f:e3:3a:35:3a:c0:
25:49:6e:3d:e1:35:dd:ee:db:0d:66:80:a2:da:37:b9:af:12:
c4:27:92:ca:d3:b8:ab:03:d2:2e:13:cc:a7:97:47:fb:00:df:
5d:70:5b:ee:8e:9d:ce:f0:ef:8f:57:59:2c:6d:f4:d1:e6:92:
23:a0:43:c7:12:af:e3:b5:2d:95:b0:f2:63:df:8b:9c:02:3b:
3b:47:02:04:f3:8d:fa:52:97:97:21:95:91:c1:19:b6:73:ae:
94:7e:2f:73:db:3b:7b:53:52:e7:b7:79:02:ad:72:8e:59:0c:
8a:be:c6:05:20:e9:20:ed:b8:7d:88:4a:1d:bb:a2:aa:ed:df:
36:16:ae:d0:91:88:6e:31:cf:e6:86:00:fc:d3:69:c0:84:90:
07:be:3d:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRFRjIxMTAvBgNVBAUTKDQ5QzlFOUUzMjI3Q0Q1NUFEMjlBMjEzQ0JBQTE3NDc4
NUExNjVDN0UwHhcNMjYwMzI0MTc0MzI3WhcNMjYwMzMxMTc0MzI3WjAYMRYwFAYD
VQQDEw02OWMyY2Q0MC1hOTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt3mIJ2gjH8QWu9B4nc7FrdDiXOUe99q7/Y1qGVr+kYvJD3zQJJF4HHZtQzoI
s6PIKHwKoL2optBNh5WBjP9gsLjpLrE0tWGlDlJfawNq+tqSxZ56N/IyE+L5KYmh
qyH70a+/17+xrULidTsM/axoxd7+TTyJqhZMYv3uGfAbkbwWGDYBg1onofpit8u6
LCZ7xHdoo7oW175rZROl5ujanR5YXvLNVAfNikj+FaE8fC81zoEQJNo+WSfPDAE7
Tgtn1V0gmm9FYFWHyIgWGxagE7NqEQBTxPTlC9gvHw2/ok0ct2C7D1vC99H/bwM4
UwXb0KmydNfiK4jUu6hSBHwi5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDKRhVBM
5de/+gRkZhu9Yx6qKQ6vMB8GA1UdIwQYMBaAFEnJ6eMifNVa0pohPLqhdHhaFlx+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEVGMi9CNjQ0MUVCNkQy
QkQxMUU5OUExRDRCMURDNEY5QUUwMi9TY25wNHlKODFWclNtaUU4dXFGMGVGb1dY
SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NjbnA0eUo4MVZyU21pRTh1cUYwZUZvV1hINC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEVGMi9CNjQ0MUVCNkQyQkQxMUU5OUExRDRCMURDNEY5QUUwMi9TY25wNHlKODFW
clNtaUU4dXFGMGVGb1dYSDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIcYNJSGy5XlTKT8QQCaYQ/fVW0qktTdSRxuyLPTNJj9zEW9IRMa7c3lTyteJ
bNu9HIWefAuwhvzsvrfuJa/ZYF9S2Uvobj2UPhT3EHrbOruJa+atLDlo3Yrtic81
7Qmygcbaz+5oP+M6NTrAJUluPeE13e7bDWaAoto3ua8SxCeSytO4qwPSLhPMp5dH
+wDfXXBb7o6dzvDvj1dZLG300eaSI6BDxxKv47UtlbDyY9+LnAI7O0cCBPON+lKX
lyGVkcEZtnOulH4vc9s7e1NS57d5Aq1yjlkMir7GBSDpIO24fYhKHbuiqu3fNhau
0JGIbjHP5oYA/NNpwISQB749QQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:17:46 2026 by rpki-client