
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/ScNR1UzEj6Gm_pofTPxL6MA2tKA.mft
File: ScNR1UzEj6Gm_pofTPxL6MA2tKA.mft (raw, json)
Hash identifier: zyyaV/H01nDer+a9ieh+YMWOL+B5Cu4WaSkSXdDOO6g=
Subject key identifier: 0C:68:54:13:E2:DD:9C:5B:87:5C:38:D5:01:A7:FF:B1:74:E3:A3:51
Authority key identifier: 49:C3:51:D5:4C:C4:8F:A1:A6:FE:9A:1F:4C:FC:4B:E8:C0:36:B4:A0
Certificate issuer: /CN=A9199197/serialNumber=49C351D54CC48FA1A6FE9A1F4CFC4BE8C036B4A0
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/ScNR1UzEj6Gm_pofTPxL6MA2tKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/ScNR1UzEj6Gm_pofTPxL6MA2tKA.mft
Manifest number: 11
Signing time: Sun 20 Sep 2026 20:23:32 +0000
Manifest this update: Sun 20 Sep 2026 20:23:32 +0000
Manifest next update: Sun 27 Sep 2026 20:23:32 +0000
Files and hashes: 1: ScNR1UzEj6Gm_pofTPxL6MA2tKA.crl (hash: UJ4ZBIXyW1WhK1P+7WEfpeljQB7R1/NQOhUrubDP8H4=)
2: 06C575F8A5B911F198D1D1366C11F970.roa (hash: NokoFevfvQskoHnxohVLzCM9L0IYhUXDVwoiqSoRVHQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/ScNR1UzEj6Gm_pofTPxL6MA2tKA.crl
rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/ScNR1UzEj6Gm_pofTPxL6MA2tKA.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/ScNR1UzEj6Gm_pofTPxL6MA2tKA.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:23:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199197, serialNumber=49C351D54CC48FA1A6FE9A1F4CFC4BE8C036B4A0
Validity
Not Before: Sep 20 20:23:32 2026 GMT
Not After : Sep 27 20:23:32 2026 GMT
Subject: CN=6ab040c4-4834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:37:de:95:d1:56:d2:90:8f:1d:7e:10:04:c7:
7b:cb:6f:23:d8:de:12:11:e5:fa:82:f8:6e:57:0f:
c5:60:45:a9:9a:59:83:1d:6d:60:10:4d:81:41:f2:
a5:9f:6f:91:51:1a:dd:61:9b:a6:61:e3:8a:e5:71:
6f:fa:cc:3d:3e:11:93:87:ce:17:02:b3:f1:03:ef:
f4:51:77:9a:75:23:3f:91:fb:e7:0a:a5:37:45:f1:
08:51:26:14:6f:c9:25:b0:1e:11:87:0e:7c:f9:54:
7b:67:6e:a6:f8:e8:fa:83:a6:e9:a5:b4:25:e7:2b:
25:40:0f:68:64:7b:e8:83:64:78:26:71:50:d9:c6:
5a:aa:14:46:6c:54:96:2a:41:93:fd:cb:30:7e:d4:
1d:50:a0:f5:21:f9:ea:05:4f:d3:26:c1:04:88:3d:
6e:47:23:cc:f7:0a:67:54:af:72:d0:e9:df:bf:bd:
93:ce:2b:f8:e7:50:c2:fe:93:05:56:b6:f8:99:76:
a6:e5:ea:ae:ae:c2:d0:74:62:17:eb:81:08:36:bd:
d9:9c:81:39:5c:f5:e6:46:59:af:7a:c9:d3:88:f4:
cb:43:9a:e3:28:a2:b9:84:72:7c:2d:d1:ec:9e:29:
0f:79:35:3a:86:ed:8a:0e:42:5c:30:1a:4b:34:f5:
be:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:68:54:13:E2:DD:9C:5B:87:5C:38:D5:01:A7:FF:B1:74:E3:A3:51
X509v3 Authority Key Identifier:
keyid:49:C3:51:D5:4C:C4:8F:A1:A6:FE:9A:1F:4C:FC:4B:E8:C0:36:B4:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/ScNR1UzEj6Gm_pofTPxL6MA2tKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/ScNR1UzEj6Gm_pofTPxL6MA2tKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/ScNR1UzEj6Gm_pofTPxL6MA2tKA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:f6:7a:7a:89:2d:71:f5:0d:5f:12:3a:8e:f9:7f:c0:cb:64:
30:76:24:75:63:3b:e8:28:6f:e7:62:28:7c:ce:ab:27:cd:71:
eb:ed:32:c5:77:41:8e:4c:a4:5f:49:9f:4e:8e:f5:37:bf:a0:
15:a2:f2:6e:81:e0:a2:2a:83:d1:bc:04:e9:ba:7f:5e:24:79:
fe:79:54:b7:d7:17:4c:32:84:9f:43:65:ee:ef:ff:92:14:9b:
a4:8c:de:00:6b:6f:01:2b:a4:8e:5a:c3:78:aa:3d:61:60:47:
28:b9:5f:e7:b7:16:e9:7e:8a:bd:80:29:20:f4:e3:24:9e:06:
62:a4:46:bc:63:74:fd:78:0e:d8:5f:28:89:bc:dc:f5:2c:5e:
91:78:15:0e:cd:20:3f:48:13:92:ed:a8:4f:1f:cf:8f:ba:5d:
46:c7:97:f4:6c:fa:9e:f6:73:0b:00:50:3e:c5:e7:29:c2:cc:
78:42:ab:72:96:a4:c7:56:65:3b:02:3c:8c:9d:04:a5:89:f1:
a1:7c:76:4a:5f:1e:e4:11:5c:d3:51:dc:33:a7:08:cd:19:ca:
6d:96:e3:28:f3:33:6e:b7:c2:65:4f:58:21:a5:65:fa:3e:ce:
2a:b5:f2:bb:47:90:54:78:3c:d0:40:fd:fa:4e:79:f5:1a:7e:
1a:b3:99:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:07:58 2026 by rpki-client