
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft
File: SC2tuZLeLPG_mQg2R44ZlEmVseA.mft (raw, json)
Hash identifier: f7GPh8U6Ekeov03y6nB0Pg3f6H2eR/CJ849q8HUP8qo=
Subject key identifier: 5B:07:97:52:A5:6C:0E:65:CF:BD:53:8A:30:BE:E5:64:01:F0:10:3B
Authority key identifier: 48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0
Certificate issuer: /CN=A912E898/serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0
Certificate serial: 0FB6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft
Manifest number: 0FAA
Signing time: Fri 02 Oct 2026 17:40:41 +0000
Manifest this update: Fri 02 Oct 2026 17:40:40 +0000
Manifest next update: Fri 09 Oct 2026 17:40:40 +0000
Files and hashes: 1: SC2tuZLeLPG_mQg2R44ZlEmVseA.crl (hash: 1JKZIW6DPw0lbyuoHMcvedzgasfA0hQl9WkbzqN/qt0=)
2: 6E37C53C72CA11EC8CE7244BC4F9AE02.roa (hash: ZBqiSC8MaIqiFY8A4SYJFOCWnc1AAvTaOuaU1W8aPeo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl
rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 17:40:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4022 (0xfb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E898, serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0
Validity
Not Before: Oct 2 17:40:40 2026 GMT
Not After : Oct 9 17:40:40 2026 GMT
Subject: CN=6abfec98-b430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:56:72:a1:db:55:af:ea:04:ec:f6:ee:ca:
b4:b4:b2:f8:a4:04:0a:ce:d9:7b:d8:ab:4d:e7:68:
42:c5:b1:2b:a7:07:5e:66:5f:9e:e6:79:50:ee:e1:
52:1a:82:98:55:93:16:74:db:d5:9d:09:10:84:74:
1b:70:4a:3e:7d:84:e3:b8:82:e5:5c:ca:bd:8f:b0:
d0:99:db:ca:8e:50:61:75:b3:af:8d:dd:b3:50:02:
3a:81:54:4c:c7:50:fc:22:1d:e4:1c:2a:e7:31:88:
ad:9a:01:a1:57:87:cd:05:24:d9:4c:0b:ac:f6:40:
c9:00:5d:87:54:33:61:0b:6e:7b:cb:d1:87:6c:35:
d4:d8:62:35:9c:d2:e0:1b:fe:01:82:0b:46:ee:75:
35:be:ed:85:17:29:81:81:39:73:b2:51:5f:c1:d1:
4d:5e:0e:e3:f1:46:ce:3c:73:e6:fd:c4:6d:b3:e5:
31:1b:97:97:70:d5:16:bb:00:24:5f:23:c0:f8:dc:
fb:d4:43:7d:3a:07:8d:a5:3a:67:6f:f7:3a:9a:5e:
c4:02:51:e7:39:10:11:62:77:0f:bb:1b:25:99:b6:
a6:3c:b9:42:9e:d9:17:c3:66:b9:78:24:46:a5:1d:
75:34:44:c7:1a:89:85:95:79:5c:f4:2c:92:e0:67:
4c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:07:97:52:A5:6C:0E:65:CF:BD:53:8A:30:BE:E5:64:01:F0:10:3B
X509v3 Authority Key Identifier:
keyid:48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:05:46:e2:01:4a:64:13:f1:84:ba:1c:1a:df:63:ab:8a:64:
a2:a1:59:40:66:5e:d0:ea:b5:2f:2a:38:3f:29:0f:18:1b:c9:
49:0f:d7:e7:28:e0:bb:40:08:33:6a:7b:0e:db:56:40:72:7a:
da:63:de:3d:71:43:9c:66:9a:6e:81:4f:da:c5:8f:f3:2a:3c:
0f:8f:84:5c:ef:a3:3a:23:6e:1c:5a:ca:9f:70:74:57:60:a3:
64:5c:c3:4f:18:47:99:14:b6:3e:1f:f5:1f:10:3d:80:ce:31:
0a:08:77:7a:a5:d1:12:55:7c:3b:2e:17:38:7a:c1:2b:5b:30:
f5:a1:60:18:7a:24:b6:c8:69:85:98:5d:5d:4f:5f:ce:99:d4:
e6:20:98:e2:9c:83:5e:39:ce:ce:c7:87:9a:f6:e2:39:c2:00:
18:b3:8f:05:02:27:16:a1:a7:15:b9:8f:2e:d1:cb:3a:31:1d:
bc:7e:44:3f:41:e9:f0:57:1e:12:57:6e:9f:11:f3:6f:77:34:
e7:20:f1:36:62:82:a8:22:08:ae:f1:5a:fb:c1:4d:69:fb:b3:
5c:54:17:2a:88:93:63:7e:f7:b4:9a:09:27:91:8f:6a:ca:f3:
e1:74:c4:87:63:46:03:19:77:b2:e8:34:bf:4b:94:f8:9f:47:
dd:3b:35:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICD7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkU4OTgxMTAvBgNVBAUTKDQ4MkRBREI5OTJERTJDRjFCRjk5MDgzNjQ3OEUxOTk0
NDk5NUIxRTAwHhcNMjYxMDAyMTc0MDQwWhcNMjYxMDA5MTc0MDQwWjAYMRYwFAYD
VQQDEw02YWJmZWM5OC1iNDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtBBWcqHbVa/qBOz27sq0tLL4pAQKztl72KtN52hCxbErpwdeZl+e5nlQ7uFS
GoKYVZMWdNvVnQkQhHQbcEo+fYTjuILlXMq9j7DQmdvKjlBhdbOvjd2zUAI6gVRM
x1D8Ih3kHCrnMYitmgGhV4fNBSTZTAus9kDJAF2HVDNhC257y9GHbDXU2GI1nNLg
G/4BggtG7nU1vu2FFymBgTlzslFfwdFNXg7j8UbOPHPm/cRts+UxG5eXcNUWuwAk
XyPA+Nz71EN9OgeNpTpnb/c6ml7EAlHnORARYncPuxslmbamPLlCntkXw2a5eCRG
pR11NETHGomFlXlc9CyS4GdMhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFsHl1Kl
bA5lz71TijC+5WQB8BA7MB8GA1UdIwQYMBaAFEgtrbmS3izxv5kINkeOGZRJlbHg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg5OC8yMTFDNjQ0NjhD
MjgxMUU5QjAyQkNEODBDNEY5QUUwMi9TQzJ0dVpMZUxQR19tUWcyUjQ0WmxFbVZz
ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDMnR1WkxlTFBHX21RZzJSNDRabEVtVnNlQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTg5OC8yMTFDNjQ0NjhDMjgxMUU5QjAyQkNEODBDNEY5QUUwMi9TQzJ0dVpMZUxQ
R19tUWcyUjQ0WmxFbVZzZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXwVG4gFKZBPxhLocGt9jq4pkoqFZQGZe0Oq1Lyo4PykPGBvJSQ/X5yjgu0AI
M2p7DttWQHJ62mPePXFDnGaaboFP2sWP8yo8D4+EXO+jOiNuHFrKn3B0V2CjZFzD
TxhHmRS2Ph/1HxA9gM4xCgh3eqXRElV8Oy4XOHrBK1sw9aFgGHoktshphZhdXU9f
zpnU5iCY4pyDXjnOzseHmvbiOcIAGLOPBQInFqGnFbmPLtHLOjEdvH5EP0Hp8Fce
EldunxHzb3c05yDxNmKCqCIIrvFa+8FNafuzXFQXKoiTY373tJoJJ5GPasrz4XTE
h2NGAxl3sug0v0uU+J9H3Ts1mQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:40:14 2026 by rpki-client