
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
File: Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft (raw, json)
Hash identifier: t/B1mnQKLU9FI7Qmp/X0qJWyB4fySjFgx61obVM3cs8=
Subject key identifier: 98:65:D6:7F:F7:FB:19:9B:F9:F7:2E:3D:32:D3:73:B8:19:7D:87:5B
Authority key identifier: 49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E
Certificate issuer: /CN=A9194EF2/serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E
Certificate serial: 0E21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
Manifest number: 0E17
Signing time: Sat 04 Jul 2026 17:52:22 +0000
Manifest this update: Sat 04 Jul 2026 17:52:22 +0000
Manifest next update: Sat 11 Jul 2026 17:52:22 +0000
Files and hashes: 1: Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl (hash: IiUiQwLb3c2KPYmPAW4G12tmhMgSxkK6TTrXuaZVAQ4=)
2: 1214EE40D2BF11E9A7F4EF1FC4F9AE02.roa (hash: kRMi9OkAx4gCffi4gwugS98RYmWpVyoEaYXXeEv2AGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl
rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 17:52:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3617 (0xe21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194EF2, serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E
Validity
Not Before: Jul 4 17:52:22 2026 GMT
Not After : Jul 11 17:52:22 2026 GMT
Subject: CN=6a494856-5195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a0:53:77:7e:12:84:24:9b:48:59:e0:13:5b:
13:e5:86:64:72:c7:e6:5b:2e:d2:0a:33:88:8e:81:
2b:c8:14:0a:2c:27:b0:0d:b4:94:01:68:e6:34:e8:
0a:bf:26:48:42:42:f1:de:2f:28:3d:bf:c8:8e:89:
af:c4:e4:c8:03:1c:39:47:cf:5b:0b:b7:45:66:91:
1d:36:2d:0e:a9:d9:49:f0:9b:b5:0d:d5:af:ee:32:
9b:0a:b7:a7:b5:ce:05:21:1d:96:46:c8:8b:06:09:
9f:b9:a5:66:32:2b:18:80:2e:df:45:89:d5:16:0a:
8e:e7:77:fe:1f:ca:73:f7:1f:60:45:9c:1c:1c:ba:
fb:06:a4:60:dc:d8:5c:df:a8:ea:5e:4e:6d:92:4d:
30:2a:43:28:5b:af:62:7b:01:93:77:43:88:44:b9:
92:86:2b:f6:2d:9a:65:19:33:82:c1:9c:79:40:b7:
4c:63:52:9e:4f:a7:d0:03:70:d0:98:81:9c:a5:cc:
a9:b9:9f:39:e0:48:88:4e:9a:01:24:aa:9f:0f:74:
d8:6e:7a:5f:27:61:08:26:fa:0e:bb:7d:b7:5b:38:
af:1c:82:98:c8:55:42:9e:7e:1d:1f:83:89:55:83:
1b:be:02:c6:3c:90:d2:fd:36:3d:da:ce:22:11:ee:
c4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:65:D6:7F:F7:FB:19:9B:F9:F7:2E:3D:32:D3:73:B8:19:7D:87:5B
X509v3 Authority Key Identifier:
keyid:49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:bc:79:bf:53:43:80:e7:df:12:73:61:2c:62:58:e4:ae:b9:
31:d0:33:23:3f:78:cb:ac:0f:23:1d:b7:e5:df:75:a7:a9:83:
eb:6f:58:a7:e1:e2:38:ec:a6:b3:f9:5f:10:3e:ec:8e:2d:6d:
f0:60:93:d0:af:cd:49:8c:a5:4b:d5:9a:29:ca:9f:b2:8e:8c:
01:e3:20:d8:08:bb:93:c2:cd:16:d2:f1:1e:85:ef:66:d5:7a:
cb:5c:cf:9c:13:a4:f4:31:d9:8b:c7:6c:8d:ce:da:82:a0:b2:
2a:82:37:ef:59:a2:56:5b:8e:77:7e:15:db:28:91:cf:f9:87:
5d:b0:53:ba:80:cb:2e:d7:2c:77:0d:95:bb:d4:e7:43:0e:48:
c6:c7:c8:1d:22:59:37:f6:98:18:8b:f4:b9:fe:09:f6:bc:ac:
b4:30:9a:d3:92:da:66:f1:77:6c:db:f0:c2:5c:d9:e7:3f:67:
78:6e:ae:2c:60:3f:a0:63:40:58:01:d3:aa:53:c3:24:b0:a1:
75:e2:3b:ff:45:d0:ef:b1:69:25:e3:ad:d7:ca:cb:fc:d3:b9:
fb:d4:2b:25:4d:19:c6:3d:d0:34:1a:10:42:c9:db:6d:58:f6:
d6:fe:6c:52:f2:d7:3f:74:32:95:68:3b:17:75:fb:49:72:1b:
c7:54:17:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:43:11 2026 by rpki-client