
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft
File: SokSJxJpPqAI66ehAaxiJpX67CQ.mft (raw, json)
Hash identifier: C4NXVKWJoo9aQ9jhv8jpYZXx2Yu6GWYxa8buEMtRwIg=
Subject key identifier: C8:C7:69:8C:0E:8E:E6:F7:C9:79:21:F2:E2:1A:07:56:81:14:30:2E
Authority key identifier: 4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24
Certificate issuer: /CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24
Certificate serial: 052C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft
Manifest number: 051E
Signing time: Thu 14 May 2026 23:43:13 +0000
Manifest this update: Thu 14 May 2026 23:43:13 +0000
Manifest next update: Thu 21 May 2026 23:43:13 +0000
Files and hashes: 1: SokSJxJpPqAI66ehAaxiJpX67CQ.crl (hash: uJFvFrJbQjOdZ5Mai+SNotTwk6rSYKEeXms4vI5fTXQ=)
2: 05F05A76D07B11F08779390AC4F9AE02.roa (hash: vYbquqIITIw2ttWYVfnYgoYEL08nDVMuIyeHY1P7sck=)
3: 178FCB6AE8AC11F0B6F09D7D576F56BC.roa (hash: uo0O5iMqmXBY9eNhFbE9nAU1PqFbkE1Yki+rMiTnIkk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl
rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 21 May 2026 23:43:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1324 (0x52c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEF20, serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24
Validity
Not Before: May 14 23:43:13 2026 GMT
Not After : May 21 23:43:13 2026 GMT
Subject: CN=6a065e11-7027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:52:ad:17:c2:17:5a:0f:3c:5a:8a:48:98:df:
d4:93:1b:d1:7d:f4:2c:a7:7c:91:c7:8f:27:8f:d8:
67:f1:94:01:f2:3d:4f:d9:fa:85:db:05:8f:c2:f2:
62:0f:c8:07:5f:c9:69:d0:4d:2e:56:dc:32:0c:10:
01:97:90:ee:00:9a:96:05:23:7e:d1:88:25:c8:37:
38:9a:18:ef:24:cc:25:1c:b6:7e:26:2f:91:aa:97:
32:ef:94:a4:4e:be:aa:80:db:13:6b:66:00:f3:68:
f1:2a:47:ab:cc:8f:2c:55:a7:f5:85:33:eb:e8:b1:
76:1e:06:d9:79:3a:ab:cd:3f:10:8d:f5:4e:86:7f:
f8:d9:95:9d:3a:5b:23:1d:e2:ca:1e:fb:4d:ef:3d:
3b:53:f8:59:df:24:d2:4f:83:e7:c4:93:fc:3b:d3:
7b:6e:88:72:2f:63:24:38:96:53:ea:81:a8:b1:48:
18:64:f7:b2:43:f3:8f:26:f0:a1:6c:c3:48:6a:fc:
6d:3b:28:2e:72:df:4c:4f:3a:59:3d:6b:0d:0a:90:
6c:68:2b:87:ce:3e:fa:45:28:70:48:f1:f2:aa:1e:
53:5f:7b:a8:d3:9e:5c:b1:0c:83:a2:5a:7f:7b:5b:
f6:cb:48:33:dd:7a:53:8d:41:87:a6:88:dc:6d:87:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C7:69:8C:0E:8E:E6:F7:C9:79:21:F2:E2:1A:07:56:81:14:30:2E
X509v3 Authority Key Identifier:
keyid:4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:44:8a:07:1e:5e:68:ea:f3:98:48:8f:3d:48:42:4f:24:bb:
15:c0:c2:61:d2:d8:d2:a5:fe:4a:46:ea:76:46:17:97:96:5b:
86:fe:0b:01:6d:a7:d9:7a:c2:7c:cd:f2:49:f9:6c:2f:7c:c6:
3b:b5:ea:b6:70:66:5b:e2:60:bd:86:0c:c0:bb:c3:c7:0b:dd:
f3:7e:29:72:2e:4f:15:b1:d7:bc:85:37:af:42:a6:80:22:33:
87:b8:a7:93:2c:ca:ad:99:61:9e:99:b3:70:88:bb:47:47:2a:
1e:c7:5f:87:42:08:ad:15:f4:26:b7:44:47:2f:0f:df:b1:d8:
22:86:ca:ba:dd:b1:7e:fb:88:06:4b:51:20:7e:04:80:d3:cf:
92:23:16:4e:07:d8:e6:3f:9f:9c:e1:10:52:79:95:27:5a:e2:
8d:69:dc:97:72:6b:02:08:27:1f:78:4d:6f:51:61:87:95:f8:
52:8b:b0:26:73:d1:d6:95:fd:f9:1f:4c:a5:dd:72:f0:40:2d:
6d:f7:39:32:50:e8:75:00:f9:7a:ef:1d:61:f6:ae:69:e3:74:
de:6a:89:9d:8e:02:86:d3:43:d8:1e:39:32:85:05:ce:d2:ae:
44:05:46:80:2c:97:14:11:96:39:f6:ab:3b:43:9c:01:52:f2:
e5:f2:d1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 02:56:31 2026 by rpki-client