
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
File: rScP3pmx8Qadq473pXaqLCryxvA.mft (raw, json)
Hash identifier: 9msG3M1cl5veiCYlJ7uwiYLB4qfsrYxdNE8EWltpPxc=
Subject key identifier: A3:80:05:94:E8:47:D3:72:BD:17:05:66:FA:91:0E:FA:50:51:0B:C5
Authority key identifier: AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0
Certificate issuer: /CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0
Certificate serial: 359C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
Manifest number: 357E
Signing time: Tue 28 Jul 2026 14:41:34 +0000
Manifest this update: Tue 28 Jul 2026 14:41:34 +0000
Manifest next update: Tue 04 Aug 2026 14:41:34 +0000
Files and hashes: 1: rScP3pmx8Qadq473pXaqLCryxvA.crl (hash: EK9GZeYUgCEXa7iHq+EJxTxh3vi5RX4LC5kCLSC4UkU=)
2: 5E26899A1B2211F093230420C4F9AE02.roa (hash: jxjWvIUdQtnre0sqE/p2npmnE5b2txY5C5YSTif6IFM=)
3: C64A9D821B2111F0B277571CC4F9AE02.roa (hash: UIYwNayG8hTeDwgvsuKN7XA3xd3VH9+6keHdCSYXSag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl
rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:41:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13724 (0x359c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170304, serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0
Validity
Not Before: Jul 28 14:41:34 2026 GMT
Not After : Aug 4 14:41:34 2026 GMT
Subject: CN=6a68bf9e-06fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:c7:5a:cd:fe:b6:29:bc:ea:63:d7:0a:cc:
52:89:35:4c:e8:79:8c:3a:0b:70:b0:d1:02:62:55:
73:bf:41:4d:5e:d2:56:45:29:fa:b2:b8:31:5d:18:
7b:07:5c:ac:ab:55:bb:87:c6:8a:62:d1:f1:28:74:
a8:de:85:df:1b:c9:0e:3a:17:3e:ac:5b:d8:7a:4b:
ff:23:bd:2c:51:8e:23:4c:5f:5c:6f:95:98:37:2a:
17:56:a2:a2:4f:01:0c:83:32:1f:c4:0c:fa:06:9f:
c0:9e:5f:33:58:ec:a2:9c:85:81:26:9e:07:79:d6:
10:dc:8c:0a:f7:ef:54:7d:cf:6f:68:df:01:36:b9:
99:4f:7b:6d:0b:2d:a1:57:4f:e6:71:91:bd:70:4c:
9f:f9:f6:7c:6e:b8:25:7f:63:9d:ea:02:a9:31:08:
29:cc:5e:0f:e9:ec:d2:93:c6:60:12:95:45:9b:e7:
a3:6f:36:69:16:5a:94:45:eb:e2:2b:cc:a5:64:24:
5c:2e:4f:55:5f:83:2c:c8:cc:55:63:1e:c6:c5:96:
9d:7b:ae:51:c7:b2:7a:ed:e4:47:98:78:f3:36:b8:
f3:32:94:bf:a8:1b:e3:71:91:11:dd:80:a7:a9:16:
4c:5f:19:73:fd:d7:6f:ed:ac:0e:20:8d:90:55:a7:
92:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:80:05:94:E8:47:D3:72:BD:17:05:66:FA:91:0E:FA:50:51:0B:C5
X509v3 Authority Key Identifier:
keyid:AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:9a:b2:a3:4c:84:bc:66:42:fe:7a:ef:30:b7:f5:0f:6b:42:
21:71:08:fb:a8:55:2e:98:83:51:44:1a:6a:76:1e:30:3e:4e:
6e:48:0a:b1:2c:c5:02:eb:22:ff:a2:85:c7:c1:78:cf:3d:bd:
75:de:07:2e:13:8a:0e:9d:fd:da:54:b1:ff:2b:50:bf:03:d7:
3f:cd:8e:d7:13:df:a4:33:ea:4c:23:e6:65:5c:45:63:3e:3c:
24:c2:64:98:36:71:4d:b2:79:36:24:ad:1d:c7:a6:43:93:7d:
4d:62:1a:26:18:8e:7e:7a:6b:89:53:cd:e5:f1:56:d4:d4:a0:
d9:fc:5b:5b:45:ee:b7:69:f3:60:2a:da:17:1a:e2:22:99:4b:
22:9a:e3:cc:ca:60:f8:26:ae:c4:52:93:40:6e:78:bf:b5:82:
d2:0f:8b:a9:3e:e7:f6:2a:d6:45:25:6e:7c:38:dd:66:8a:4b:
74:59:b7:88:23:e0:a3:58:08:fd:96:01:a7:04:d9:29:13:c5:
01:3c:33:83:93:4a:af:f6:93:20:54:37:7b:6b:a9:c5:e4:65:
df:ed:42:15:31:ce:d5:17:14:5f:99:84:a0:2e:74:23:e2:35:
23:77:f2:8c:a8:00:99:07:e3:df:13:51:82:b5:3d:65:62:bd:
28:e8:f8:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzAzMDQxMTAvBgNVBAUTKEFEMjcwRkRFOTlCMUYxMDY5REFCOEVGN0E1NzZBQTJD
MkFGMkM2RjAwHhcNMjYwNzI4MTQ0MTM0WhcNMjYwODA0MTQ0MTM0WjAYMRYwFAYD
VQQDEw02YTY4YmY5ZS0wNmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtfnHWs3+tim86mPXCsxSiTVM6HmMOgtwsNECYlVzv0FNXtJWRSn6srgxXRh7
B1ysq1W7h8aKYtHxKHSo3oXfG8kOOhc+rFvYekv/I70sUY4jTF9cb5WYNyoXVqKi
TwEMgzIfxAz6Bp/Anl8zWOyinIWBJp4HedYQ3IwK9+9Ufc9vaN8BNrmZT3ttCy2h
V0/mcZG9cEyf+fZ8brglf2Od6gKpMQgpzF4P6ezSk8ZgEpVFm+ejbzZpFlqURevi
K8ylZCRcLk9VX4MsyMxVYx7GxZade65Rx7J67eRHmHjzNrjzMpS/qBvjcZER3YCn
qRZMXxlz/ddv7awOII2QVaeSPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKOABZTo
R9NyvRcFZvqRDvpQUQvFMB8GA1UdIwQYMBaAFK0nD96ZsfEGnauO96V2qiwq8sbw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC85RUY0MTEzMDFE
OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhRYWRxNDczcFhhcUxDcnl4
dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3JTY1AzcG14OFFhZHE0NzNwWGFxTENyeXh2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDMwNC85RUY0MTEzMDFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhR
YWRxNDczcFhhcUxDcnl4dkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASJqyo0yEvGZC/nrvMLf1D2tCIXEI+6hVLpiDUUQaanYeMD5ObkgKsSzFAusi
/6KFx8F4zz29dd4HLhOKDp392lSx/ytQvwPXP82O1xPfpDPqTCPmZVxFYz48JMJk
mDZxTbJ5NiStHcemQ5N9TWIaJhiOfnpriVPN5fFW1NSg2fxbW0Xut2nzYCraFxri
IplLIprjzMpg+CauxFKTQG54v7WC0g+LqT7n9irWRSVufDjdZopLdFm3iCPgo1gI
/ZYBpwTZKRPFATwzg5NKr/aTIFQ3e2upxeRl3+1CFTHO1RcUX5mEoC50I+I1I3fy
jKgAmQfj3xNRgrU9ZWK9KOj4nA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:06:48 2026 by rpki-client