
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft
File: scWMB4UVntc2lq-zEtI1z0DzxEE.mft (raw, json)
Hash identifier: w2xpAYP5YnJE/8iwVn7XAGWtof5mjI+vOq4UaDs3ZVU=
Subject key identifier: FD:E4:DA:96:77:99:ED:9E:EA:F8:89:4A:21:4D:68:36:74:01:A5:0B
Authority key identifier: B1:C5:8C:07:85:15:9E:D7:36:96:AF:B3:12:D2:35:CF:40:F3:C4:41
Certificate issuer: /CN=A91D6DBD/serialNumber=B1C58C0785159ED73696AFB312D235CF40F3C441
Certificate serial: 01CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft
Manifest number: 01CA
Signing time: Sun 05 Apr 2026 03:14:37 +0000
Manifest this update: Sun 05 Apr 2026 03:14:37 +0000
Manifest next update: Sun 12 Apr 2026 03:14:37 +0000
Files and hashes: 1: scWMB4UVntc2lq-zEtI1z0DzxEE.crl (hash: 2azDeuBsyegjHXzu24JEx4FhieEuCRi/Jdh2k+s6Nf4=)
2: FA39CA70790E11EE86665E43C4F9AE02.roa (hash: 8eJCqlgHNDS923884X/dfLG+BTELGwUB8rt4AWm/WOI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.crl
rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:14:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463 (0x1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6DBD, serialNumber=B1C58C0785159ED73696AFB312D235CF40F3C441
Validity
Not Before: Apr 5 03:14:37 2026 GMT
Not After : Apr 12 03:14:37 2026 GMT
Subject: CN=69d1d39d-fc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:57:00:84:9f:52:b2:57:f1:0f:aa:9c:bc:f2:
95:33:d6:e5:e3:95:e5:19:6e:37:6a:ec:fa:0d:0d:
3a:da:9a:94:8a:61:ad:35:ce:55:24:42:be:8a:62:
e6:4a:6b:d2:5e:a4:55:29:47:61:00:f5:11:a6:0a:
4f:f5:9e:30:72:8a:65:46:03:81:44:87:0b:35:58:
05:d8:84:56:06:ab:ee:15:53:a8:91:c4:49:5b:0c:
95:91:7c:e2:7e:c8:b5:99:93:c4:0d:0c:e4:cc:8c:
f4:d5:f3:24:81:66:e5:12:8a:09:b0:09:66:c3:7d:
08:28:82:90:82:d5:d3:f3:06:52:5e:4e:d9:65:d9:
c7:7f:57:1b:4d:eb:65:79:ae:30:78:03:39:e0:4a:
e2:7d:8b:2d:d2:7d:69:bc:f9:79:08:67:77:f5:3f:
cd:a8:72:11:8c:41:dc:86:79:ea:b8:94:60:02:cf:
1c:90:24:32:f1:33:5f:5e:2e:e0:fc:bd:25:76:53:
c0:d6:7e:89:68:ac:62:bd:25:3c:1e:b8:fa:95:b7:
d0:ef:b5:41:55:99:c9:ab:3a:0c:90:c8:f5:1c:d2:
10:54:56:6b:66:88:a4:77:6a:f8:43:a0:9b:d0:7c:
2a:ed:17:ad:53:cb:cc:90:e4:67:63:57:90:c0:86:
c0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E4:DA:96:77:99:ED:9E:EA:F8:89:4A:21:4D:68:36:74:01:A5:0B
X509v3 Authority Key Identifier:
keyid:B1:C5:8C:07:85:15:9E:D7:36:96:AF:B3:12:D2:35:CF:40:F3:C4:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:49:53:20:8f:3e:65:bb:b0:bd:5e:a8:bb:69:df:bd:bd:af:
a4:34:a3:0d:64:45:93:bf:3a:12:dd:41:2a:06:c1:bb:ce:04:
84:c7:2f:af:36:f5:df:61:86:a5:80:8c:92:b4:c9:90:1f:ee:
be:b5:d2:48:96:80:9a:98:4f:c5:ac:c4:01:b2:80:ed:62:26:
26:08:da:ce:67:8f:4c:d6:07:37:6b:30:99:b5:13:ec:c1:a6:
e3:6e:51:a7:f4:82:df:46:b2:bd:10:ab:7b:3a:4b:c0:4c:cd:
0c:1d:65:a5:2a:1c:42:80:72:1a:a7:ec:ef:78:13:74:4d:2d:
42:19:6c:89:df:09:70:aa:b3:ea:5d:a9:f4:f2:d6:56:a4:f8:
e1:a9:48:bb:f4:d9:4b:fd:80:a6:b4:8b:88:56:cc:37:00:07:
30:42:bf:bc:50:ad:24:7d:db:11:2a:5f:81:fe:a5:f1:0f:70:
61:cd:ac:df:aa:db:b2:a0:9b:dd:46:0e:59:1b:f0:50:da:f5:
bc:65:63:3a:2c:46:63:27:70:f0:83:93:b7:58:9d:ad:11:ce:
67:5e:c8:d8:62:52:82:71:d6:e9:48:14:a6:69:4b:49:a2:f8:
15:d1:44:41:03:cd:a6:d0:f7:e2:73:30:12:b3:ef:8b:9b:e3:
01:9a:5b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:39:58 2026 by rpki-client