
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
File: rScP3pmx8Qadq473pXaqLCryxvA.mft (raw, json)
Hash identifier: Km/7tCVN1nzvHHfLGdPZPpgcdHHoqQSLixr+s7Hn0JA=
Subject key identifier: C7:62:33:4B:D0:71:98:EB:21:FE:17:4D:13:0D:AF:8C:CC:C8:E1:A8
Authority key identifier: AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0
Certificate issuer: /CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0
Certificate serial: 35B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
Manifest number: 359A
Signing time: Sun 20 Sep 2026 14:38:30 +0000
Manifest this update: Sun 20 Sep 2026 14:38:29 +0000
Manifest next update: Sun 27 Sep 2026 14:38:29 +0000
Files and hashes: 1: rScP3pmx8Qadq473pXaqLCryxvA.crl (hash: oJ68NqqfqQstkY9YSpwO+4nzioupKXxhFIDYlDQKZJA=)
2: 5E26899A1B2211F093230420C4F9AE02.roa (hash: jxjWvIUdQtnre0sqE/p2npmnE5b2txY5C5YSTif6IFM=)
3: C64A9D821B2111F0B277571CC4F9AE02.roa (hash: UIYwNayG8hTeDwgvsuKN7XA3xd3VH9+6keHdCSYXSag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl
rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 14:38:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13752 (0x35b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170304, serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0
Validity
Not Before: Sep 20 14:38:29 2026 GMT
Not After : Sep 27 14:38:29 2026 GMT
Subject: CN=6aafefe6-297b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:59:a3:6f:97:99:3a:d2:a3:d7:3b:2b:32:
6b:b9:5b:a7:23:9e:05:f2:30:2b:d8:7e:6d:8d:71:
67:e2:ec:d7:37:ac:80:d7:de:4f:87:dc:17:e6:4f:
98:cf:2c:29:75:22:7a:4a:4c:7c:19:47:3f:33:cb:
ef:ae:87:70:34:d9:32:c1:90:54:01:41:4f:d7:f8:
38:28:91:98:92:28:d0:04:d8:0e:f1:e1:75:e7:19:
1c:43:90:88:81:93:69:75:e6:80:6e:33:ca:b1:e0:
bc:65:e1:c9:d3:aa:bd:fb:5a:4f:58:f7:c2:3f:2f:
cd:51:87:ca:ed:f5:3b:54:52:5d:62:88:01:d4:c9:
f5:72:74:c6:3a:de:ce:42:54:e9:7a:98:b9:aa:1e:
21:8a:ac:e6:12:78:1e:e2:19:e6:b8:c1:1b:f2:75:
c3:c1:ee:7e:02:07:d0:36:10:01:1d:a4:43:a9:e0:
96:ee:b8:92:a2:14:a9:d2:f7:b1:b9:a6:51:a1:aa:
fc:83:87:07:60:a6:b6:18:58:2a:96:d7:19:4e:22:
67:54:c0:ce:9c:26:83:fb:c1:7b:9d:f5:42:38:82:
84:84:9b:e5:ac:21:09:73:cb:e6:3e:cc:d8:3d:58:
6d:be:c2:0a:98:06:ff:07:04:99:d3:ff:83:04:60:
b6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:62:33:4B:D0:71:98:EB:21:FE:17:4D:13:0D:AF:8C:CC:C8:E1:A8
X509v3 Authority Key Identifier:
keyid:AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ac:2e:3d:9e:cc:f8:66:b2:ad:2b:4c:e4:83:48:be:8b:f8:
06:1a:ce:80:f2:16:bc:44:75:f8:36:2b:47:0b:e5:bc:bf:38:
47:4e:04:fd:6b:9e:a5:bc:87:3a:fc:3d:a7:7b:aa:ab:b2:9d:
9d:44:e6:87:66:3c:22:02:33:f3:ee:0d:dd:f4:28:97:ee:34:
9a:94:9b:25:40:c8:d5:68:ef:cd:94:da:20:ec:3c:ec:16:79:
a1:32:39:42:f7:48:b6:29:81:ff:6e:15:5e:fa:fa:24:72:00:
98:8e:95:f8:05:c3:5b:da:a3:71:4b:f1:4f:30:80:a0:e2:0d:
dd:53:4e:73:8d:cf:b4:bd:db:28:8b:95:5d:f0:b8:f8:59:b8:
29:30:59:65:cf:f1:61:33:b5:73:38:38:47:b5:0a:1c:25:1e:
d1:bb:c9:97:78:e8:05:ca:3a:b8:76:85:06:dd:72:0e:32:52:
83:6f:ac:68:5d:98:ad:41:75:f0:a8:ed:b6:d5:3f:cb:19:46:
72:73:f1:47:dc:c8:53:77:3d:05:56:73:94:0d:4c:c3:ec:c6:
ae:ac:b5:29:5b:2e:dc:66:73:62:f6:5b:b6:d3:9b:e2:24:8b:
2d:d2:e1:2c:c9:c7:f1:26:1c:db:b2:c3:26:a0:40:a8:86:d8:
4c:f6:f1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:26:17 2026 by rpki-client