
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
File: SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft (raw, json)
Hash identifier: O9j3LDthM3UeWapaxWjpDCNZH8ZJ8OQN9Vkjzo775oI=
Subject key identifier: 54:86:1A:44:EB:63:C7:AF:1E:E8:7A:6A:CB:09:42:BB:AB:4D:33:85
Authority key identifier: 48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F
Certificate issuer: /CN=A91E563F/serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
Certificate serial: 09A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
Manifest number: 0982
Signing time: Thu 04 Jun 2026 20:06:15 +0000
Manifest this update: Thu 04 Jun 2026 20:06:15 +0000
Manifest next update: Thu 11 Jun 2026 20:06:15 +0000
Files and hashes: 1: SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl (hash: /UbLfEUjtRzGg+pAnfIVBxa046xAFc73BfiyDenY5g4=)
2: E101BEF6BA1111EAA2AF621EC4F9AE02.roa (hash: KuZTxHp0fquU3vOYsc/ZT4rMTUBwZrUSC5c3xgaDYh8=)
3: EABCE94C932111EE8C70453EC4F9AE02.roa (hash: Z5EXSqflUL/D/r+AuGpyvr0kie3DyXjBi6gYsTGAE8s=)
4: EA41FB0EB6A911EAB0EB257EC4F9AE02.roa (hash: d3rKZ//K+dxve4/XCAx+VA89CIyu6oQFqdYbiu3rWTw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl
rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 20:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2467 (0x9a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E563F, serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
Validity
Not Before: Jun 4 20:06:15 2026 GMT
Not After : Jun 11 20:06:15 2026 GMT
Subject: CN=6a21dab7-bc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:54:f0:61:8b:db:7f:8c:e4:72:90:3a:40:d5:
ac:81:d9:28:4d:41:f9:88:32:ee:6d:35:02:af:be:
31:ec:82:55:ec:56:9c:33:cc:fc:85:a9:82:9b:3e:
9b:f9:d7:50:36:62:b1:47:71:d0:27:a7:9d:5c:ed:
0d:ad:35:16:b9:2e:eb:f4:6f:11:b0:68:5e:8f:91:
5a:1f:d4:bd:a9:ed:9f:8a:fb:22:4d:ab:93:8a:59:
e1:b6:fe:3f:f6:f4:00:a4:22:5f:a2:56:ec:41:8c:
4a:b8:71:8b:d8:5d:df:d6:1f:76:35:32:1b:40:25:
d9:1b:14:eb:ba:f3:72:6e:fa:b2:83:14:e9:38:9e:
2b:47:89:40:69:e6:df:7b:7c:f1:7f:45:82:e5:a9:
5c:a7:11:76:ee:3e:95:7f:d0:a2:01:de:a7:03:70:
36:00:3d:c6:53:61:21:a4:91:56:50:e9:6f:9d:26:
6d:0e:70:94:aa:f2:b4:40:c2:61:be:0c:f9:45:94:
90:d9:13:0e:24:12:19:92:d7:4d:60:1a:fe:79:b9:
11:e4:90:94:0e:11:b1:23:9a:c6:2a:7a:a5:6f:17:
2e:eb:91:39:b9:f0:ba:cd:a3:39:f7:49:ee:cd:ad:
97:4e:7e:11:7d:ca:7e:d5:02:d7:e4:12:5c:7f:cc:
74:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:86:1A:44:EB:63:C7:AF:1E:E8:7A:6A:CB:09:42:BB:AB:4D:33:85
X509v3 Authority Key Identifier:
keyid:48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:1c:9e:37:e8:a7:11:45:3e:16:55:f7:66:a7:6d:80:4d:25:
b8:6c:83:87:4a:fe:dc:07:2c:70:f7:9c:83:49:25:23:c2:47:
33:c1:9e:b8:9d:02:4a:2e:ce:05:55:6c:b6:8b:0d:4b:63:d6:
7e:db:21:86:20:18:a7:10:e5:9f:4f:4b:f6:fc:80:43:9a:07:
0b:4a:f1:56:fb:61:40:20:68:f1:07:05:34:96:0e:fd:f6:89:
8a:b2:bb:47:60:1b:7e:49:bf:cd:54:7f:23:4c:43:69:bd:c4:
c2:a5:ee:16:18:f0:db:27:d7:4e:4d:18:28:dd:6a:d7:a9:3f:
24:a9:f4:b0:63:58:7d:4a:9a:54:e3:78:1d:61:0f:47:df:bc:
3f:3f:53:13:3b:97:7e:c4:0a:3e:1d:34:9d:f8:28:30:9c:e5:
8d:ce:71:99:1f:8f:d8:b1:ef:09:b3:32:eb:e0:11:88:f3:5e:
05:62:3c:e2:80:8b:8b:fc:c3:23:9f:7e:fe:fc:2d:03:2b:2e:
31:3d:52:62:e6:29:6b:5a:fa:a9:cb:12:57:00:5a:0e:d3:c1:
99:cf:4a:cc:ba:cf:24:87:6f:8c:65:ad:93:6d:76:cd:e9:b5:
3b:9f:2c:ef:5f:77:ec:7b:4a:8c:9d:40:47:c1:54:65:cf:3e:
98:39:55:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:50:48 2026 by rpki-client