
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
File: SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft (raw, json)
Hash identifier: 4o0n16MVjkTRlb0bGXW3X/TJVZE0hXAQ6ALB4xapwNk=
Subject key identifier: 6F:03:6B:1A:A5:C9:F6:73:A7:11:4E:EA:51:6C:A5:00:2F:36:43:CC
Authority key identifier: 48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F
Certificate issuer: /CN=A91E563F/serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
Certificate serial: 09C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
Manifest number: 099F
Signing time: Tue 28 Jul 2026 20:21:40 +0000
Manifest this update: Tue 28 Jul 2026 20:21:40 +0000
Manifest next update: Tue 04 Aug 2026 20:21:40 +0000
Files and hashes: 1: SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl (hash: v2h7QwUvj/cNBhBAoclKKbHoUF/6v7Wi16DzSW4F0N8=)
2: EA41FB0EB6A911EAB0EB257EC4F9AE02.roa (hash: q5r71D24itdj8J50uNyU8Rtge2UCWOL1SZiaqCxJONc=)
3: EABCE94C932111EE8C70453EC4F9AE02.roa (hash: h1w1nC9gSMgyjYC+9as/6/ce1zugeDbCSFTWCTHQIdM=)
4: E101BEF6BA1111EAA2AF621EC4F9AE02.roa (hash: F0eRWyxznh4A95wola8Wt0wEw8FGRQEkSXXva8DJ0JQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl
rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:21:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2499 (0x9c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E563F, serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
Validity
Not Before: Jul 28 20:21:40 2026 GMT
Not After : Aug 4 20:21:40 2026 GMT
Subject: CN=6a690f54-d412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:87:9b:de:e0:32:3f:ac:5b:39:cf:61:e0:
b4:32:9d:b9:48:23:89:78:40:72:8c:56:9c:f6:0e:
a8:38:a1:6a:9e:e3:28:c3:1c:d2:fb:a0:16:2e:b9:
18:6a:2c:0d:2f:f8:e4:dd:ae:5c:f9:b1:7e:ea:a0:
b6:2e:13:8c:f3:31:3f:54:59:5b:ad:99:c1:1c:a3:
75:e5:18:10:b9:b5:13:3c:55:94:7a:c5:e1:54:c6:
2c:98:71:38:55:a3:cc:42:bf:65:ef:0f:70:c1:ab:
85:b0:51:f7:b5:7d:1c:d9:ba:f0:c1:e2:4f:60:09:
95:0c:23:7e:98:6a:5c:77:3f:4e:58:8d:2c:0a:e9:
41:43:aa:dc:c1:fe:01:4f:97:f3:36:8e:de:5f:bb:
15:29:32:15:34:24:0d:c3:33:df:b1:f4:b5:bd:7e:
b3:36:78:ee:76:0b:6b:ef:fe:45:4c:d3:01:f6:aa:
75:08:2a:83:e2:bf:bf:c5:08:98:8f:2f:c8:3c:c1:
6b:5a:8a:9b:7b:fe:c1:00:af:d3:d1:aa:f0:0e:de:
e4:3d:fd:7d:78:79:8f:76:7a:c3:c6:1b:ca:0e:71:
2a:dc:fa:20:02:e1:ee:97:ae:b9:86:1a:15:f2:5a:
6d:bb:bd:d0:b2:4d:a8:e5:39:e9:f6:89:5b:c7:2c:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:03:6B:1A:A5:C9:F6:73:A7:11:4E:EA:51:6C:A5:00:2F:36:43:CC
X509v3 Authority Key Identifier:
keyid:48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:7c:ad:de:50:09:42:fd:8b:20:82:ed:89:67:94:ff:ff:6d:
16:1d:ae:bd:d1:25:85:c4:a7:73:07:98:49:66:6a:22:36:79:
3f:58:de:3b:d0:42:d5:65:86:b6:92:ae:d9:7d:39:0a:41:4d:
74:1e:51:8d:04:a7:0b:d3:65:9a:ad:cb:fb:69:45:b7:96:f2:
bb:eb:98:45:56:ff:e5:ed:b5:bd:6a:cb:85:93:6b:f4:8b:4b:
87:d2:f2:60:34:19:21:e2:5e:6f:4c:6b:83:08:7d:91:b2:cd:
5f:40:17:3e:b8:49:ae:91:c7:8a:f0:7f:a0:aa:55:52:eb:3e:
3d:fc:5f:39:ec:c7:b0:55:fb:bc:25:94:f0:19:40:72:64:f6:
9d:9f:e5:b7:d3:19:f9:ec:cf:8a:5b:ce:3e:7b:02:c9:ca:61:
98:eb:a4:d7:2a:77:c0:28:af:ab:58:8b:56:bf:ff:5d:b2:b9:
19:42:04:92:cd:83:5d:87:cf:af:e0:2c:0c:70:50:01:50:aa:
ba:78:1b:94:89:b2:c9:48:5b:7a:6c:d6:3e:e5:9e:03:f3:31:
89:e5:f2:34:08:3f:04:60:25:a1:02:50:0f:1a:31:60:22:cd:
1e:11:b0:2a:57:d7:db:55:df:d1:84:ba:af:d5:fb:05:0c:2d:
71:3c:c4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:26:39 2026 by rpki-client