
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
File: rScP3pmx8Qadq473pXaqLCryxvA.mft (raw, json)
Hash identifier: mo9I37qN1jlEd6+CuBv6w62d+yO252fNBch3bqmgKnU=
Subject key identifier: 6F:69:72:1D:77:41:F7:CB:38:62:B2:3F:6C:4E:C8:21:71:E5:CE:BC
Authority key identifier: AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0
Certificate issuer: /CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0
Certificate serial: 3568
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
Manifest number: 354A
Signing time: Thu 16 Apr 2026 14:39:17 +0000
Manifest this update: Thu 16 Apr 2026 14:39:16 +0000
Manifest next update: Thu 23 Apr 2026 14:39:16 +0000
Files and hashes: 1: rScP3pmx8Qadq473pXaqLCryxvA.crl (hash: bpmOq6nCcB6N+zo0JVCEWMETMa11tVPTs/GxkkPmoH8=)
2: 5E26899A1B2211F093230420C4F9AE02.roa (hash: jxjWvIUdQtnre0sqE/p2npmnE5b2txY5C5YSTif6IFM=)
3: C64A9D821B2111F0B277571CC4F9AE02.roa (hash: UIYwNayG8hTeDwgvsuKN7XA3xd3VH9+6keHdCSYXSag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl
rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:39:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13672 (0x3568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170304, serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0
Validity
Not Before: Apr 16 14:39:16 2026 GMT
Not After : Apr 23 14:39:16 2026 GMT
Subject: CN=69e0f494-837a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b4:f0:37:5c:bd:28:54:34:d9:7f:42:c6:51:
bf:f6:85:ad:5f:f0:8f:26:d8:01:07:ff:ab:3c:9b:
18:cd:c2:17:d6:06:d0:4d:b8:72:ff:7b:77:0f:e1:
8e:90:45:d2:a8:3e:82:9e:7c:5b:e9:f6:c5:77:46:
c3:92:ad:63:6e:9f:16:2d:4e:75:fd:b4:97:93:bf:
01:07:89:cd:95:c3:d7:1f:1d:ca:06:6e:6d:81:dd:
77:f9:c3:1a:29:da:44:27:5b:ae:f4:ed:ce:b9:a0:
72:eb:86:f8:29:f6:8b:ac:81:2e:52:d1:a3:60:4e:
6d:22:f6:23:a3:ef:80:25:3d:a3:3f:af:88:7c:17:
72:85:73:76:a0:5e:4c:97:50:4a:6f:24:ea:0b:a4:
0b:df:31:a7:e0:ce:e4:4e:f4:87:b6:0b:4f:c1:e1:
0c:74:47:c7:ea:b0:58:56:d1:1d:a5:72:e3:48:99:
05:9c:2a:de:4e:f9:b0:b7:fc:ed:f2:eb:18:2b:bc:
9f:3c:d7:4d:0f:a3:5f:ea:65:15:8f:ab:21:08:0c:
f6:cd:f9:00:0a:f4:a7:05:9f:92:f9:29:08:6f:13:
56:f1:ff:0e:1d:bd:39:b4:95:27:e7:de:58:04:45:
0a:2b:e7:7b:25:64:60:36:ec:c5:81:bd:1e:c0:83:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:69:72:1D:77:41:F7:CB:38:62:B2:3F:6C:4E:C8:21:71:E5:CE:BC
X509v3 Authority Key Identifier:
keyid:AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:74:7e:9d:4c:d2:78:89:76:03:aa:ba:12:a4:54:31:69:8e:
be:68:70:93:ac:b2:e2:f5:eb:2e:12:f1:3e:56:8d:0e:11:42:
c0:a9:be:15:a7:88:c2:5c:6e:e7:c7:e4:53:ac:46:30:4f:87:
7e:43:50:ae:26:9c:ff:6d:b3:1c:df:aa:45:e2:a8:1f:e6:25:
c8:19:31:cf:79:4c:cd:d6:16:07:a4:cc:91:94:ca:0d:99:d9:
c6:e1:ad:c2:0f:3d:08:22:66:1f:6d:76:56:6a:4a:c9:09:5f:
9d:36:52:2e:a2:13:59:10:13:d7:f6:6f:b6:18:02:c9:95:15:
d4:5e:e9:ad:e0:64:2d:99:92:fd:36:bd:c5:d5:ad:73:ca:53:
0a:6b:20:8b:59:22:86:f9:7b:37:3c:29:6e:e7:37:34:67:be:
aa:0b:39:4b:70:87:4c:62:61:5b:c9:88:7d:bf:ce:3e:a1:18:
68:71:99:53:7a:d2:9f:c6:d6:e4:ca:c8:51:39:a9:40:50:45:
0a:f0:18:3f:c5:91:19:b7:a7:94:b7:2f:56:43:0b:4e:93:50:
fa:0f:1a:18:58:c3:42:05:8e:90:95:02:d6:9a:da:83:74:b9:
be:a3:a9:71:6d:e5:66:41:8f:d5:15:f7:e7:20:81:3c:2e:f6:
42:6d:b0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:03:14 2026 by rpki-client