
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
File: sCOWweSXbcJLufJA9c5Vbtgn-is.mft (raw, json)
Hash identifier: GYUPg/S/26EEk5RFpKcUek8SyRmiY2iknGjxiWG0w9U=
Subject key identifier: 70:03:88:AD:15:F7:B9:F6:30:3D:A8:F2:1A:7B:09:E8:EE:95:02:F5
Authority key identifier: B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B
Certificate issuer: /CN=A91124CD/serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B
Certificate serial: 01DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
Manifest number: 01D9
Signing time: Mon 21 Sep 2026 03:34:50 +0000
Manifest this update: Mon 21 Sep 2026 03:34:49 +0000
Manifest next update: Mon 28 Sep 2026 03:34:49 +0000
Files and hashes: 1: sCOWweSXbcJLufJA9c5Vbtgn-is.crl (hash: Bw3sIv6eA2RLE3mzwiQk3RiD9NxGxsaicitif/RFOL4=)
2: CC6220C0E02E11EEBA9D291AC4F9AE02.roa (hash: XGT7f3N6d7VyR5B4Z12+X5V0xJRoN3FoBvQSpbBJPeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl
rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91124CD, serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B
Validity
Not Before: Sep 21 03:34:49 2026 GMT
Not After : Sep 28 03:34:49 2026 GMT
Subject: CN=6ab0a5da-f69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fd:4a:1e:1b:b3:55:c3:87:28:70:84:b7:84:
8f:bd:33:8e:11:7e:17:ea:9d:79:31:80:99:54:dc:
f8:a2:04:75:ea:23:ef:4d:8f:eb:38:7d:01:4e:ae:
51:4f:da:53:48:25:04:25:b1:d2:2b:3a:8b:5b:1d:
e0:90:09:88:7d:82:29:5d:9a:3e:ab:cf:31:44:c3:
c6:7e:85:87:2f:98:fc:00:93:54:52:7b:79:6e:27:
28:33:ab:9d:b1:a0:ca:50:7a:3d:39:f0:a6:86:26:
22:7a:84:bc:11:b0:3f:74:8d:8d:33:d6:f7:3b:e5:
77:4b:3b:23:76:3f:05:d6:36:71:9f:d8:50:45:35:
72:b2:bf:29:c4:fc:b8:0f:72:49:28:e6:7d:1c:e0:
f4:f0:aa:6e:0c:0c:08:ff:20:09:32:41:32:bb:b4:
de:0b:61:73:6f:f7:9e:49:c5:34:df:cd:36:e8:f7:
12:36:63:f6:03:33:de:cc:a5:fa:cb:29:5b:52:f2:
fd:b5:a7:8a:6f:08:39:7a:f3:b8:ef:99:96:97:55:
18:71:4b:9c:b3:15:6d:01:bc:ce:6c:2f:a4:63:41:
d4:73:f8:f1:71:60:0a:56:66:2e:61:48:b1:d4:78:
e9:2b:e6:e3:94:c8:de:a5:99:17:70:3f:79:09:e3:
f7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:03:88:AD:15:F7:B9:F6:30:3D:A8:F2:1A:7B:09:E8:EE:95:02:F5
X509v3 Authority Key Identifier:
keyid:B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:64:03:ee:8b:9c:c1:ab:db:3d:25:bd:4f:12:6e:13:4d:73:
35:3d:42:02:b5:b3:d2:ef:ae:b3:74:f7:62:9e:d2:db:f7:d2:
17:3d:a8:85:0d:1f:6e:67:80:33:ac:39:aa:07:15:ef:87:d9:
9a:aa:30:9a:8f:62:d5:b6:c8:43:75:37:51:14:fb:af:1f:97:
24:4e:41:84:f9:75:80:2b:bc:e7:82:09:ec:1c:df:be:b1:21:
db:60:5d:aa:c3:a0:f7:9d:75:b1:d5:73:ff:0b:8d:35:d2:84:
74:11:f6:38:54:de:26:87:06:7f:1d:cd:f3:66:14:65:89:85:
60:14:00:e8:04:c4:74:16:da:ba:ce:dc:95:d4:2e:cd:62:e5:
e1:fe:aa:49:1c:8d:af:81:13:ab:c5:dd:b4:07:6b:44:c8:ed:
7d:5f:66:25:25:d0:01:3c:80:a9:09:a6:52:c1:b1:b1:1f:28:
c0:92:95:a8:ae:9c:e1:27:9d:3e:ae:c6:0a:dc:b0:81:a0:be:
42:68:0a:c3:39:b6:76:37:4e:64:c0:66:43:16:11:45:0a:99:
a9:7b:d5:99:6b:47:a8:68:03:95:65:0f:36:b1:ec:26:5d:3a:
a5:2a:a9:2c:38:a3:fa:a0:59:1e:a7:9f:93:bf:49:2d:8f:0a:
86:da:04:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:33:41 2026 by rpki-client