
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
File: Soo5XlVsx_Garmqwav8GeUSVa0Y.mft (raw, json)
Hash identifier: flQIzkh0BsTXHDpI/H9sTH3NKtUqvmNJeUbTBny9ASM=
Subject key identifier: C0:C5:6E:AF:40:A6:3F:DD:B5:A3:56:E7:C9:B4:93:8B:BA:60:F8:1E
Authority key identifier: 4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46
Certificate issuer: /CN=A91CFD5A/serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46
Certificate serial: 0207
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
Manifest number: 0201
Signing time: Sat 03 Oct 2026 03:52:50 +0000
Manifest this update: Sat 03 Oct 2026 03:52:50 +0000
Manifest next update: Sat 10 Oct 2026 03:52:50 +0000
Files and hashes: 1: Soo5XlVsx_Garmqwav8GeUSVa0Y.crl (hash: jGmELBsnnWRJ2z0OUAyH2sFH9jZjfh/81QsoLrYNQK4=)
2: D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa (hash: wK1+Edckckm18V5hHREZQkXgnFJR1vbGMuvkctbUg7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl
rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:52:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFD5A, serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46
Validity
Not Before: Oct 3 03:52:50 2026 GMT
Not After : Oct 10 03:52:50 2026 GMT
Subject: CN=6ac07c12-5f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:bc:17:f2:66:12:e9:95:b1:a9:4b:3f:aa:
10:07:37:3c:6f:2d:38:24:e7:df:e6:dd:17:5d:26:
8b:51:3b:ea:d3:d2:6b:6a:34:b1:55:e6:33:cf:e8:
c4:32:e3:6f:19:87:37:35:b0:54:39:b1:cc:c7:85:
fb:5f:9d:ee:da:87:02:e8:1c:8e:bc:6f:37:31:2e:
c9:56:f9:a7:22:2d:3b:13:85:5c:4b:5a:42:2a:99:
67:ce:7d:0c:61:66:ed:bd:89:44:02:f6:e3:c0:fd:
95:04:21:78:0b:00:ee:e0:f5:8d:cc:1d:d5:b2:b1:
d3:31:87:80:1e:db:6e:36:7c:6d:d8:1d:5e:05:59:
4b:72:6f:90:d1:db:2a:55:ef:e9:9a:c4:6a:f6:9a:
ca:11:25:ae:5e:8a:2d:0f:e9:af:7a:64:08:4b:6e:
4f:29:35:4e:28:78:37:ce:07:1d:96:27:5b:55:23:
63:aa:13:47:46:5b:05:ee:6d:f7:d0:33:f1:1d:a1:
32:6a:5d:d6:00:67:2f:fb:d4:d5:5c:71:3d:3f:92:
8f:c8:5b:1a:dc:77:f0:6c:64:ad:a4:fa:b9:c4:98:
8c:1a:7c:23:a1:e3:c2:eb:7d:ab:69:cb:7b:f8:59:
23:05:26:d2:54:63:30:00:23:20:d8:90:11:25:6f:
98:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C5:6E:AF:40:A6:3F:DD:B5:A3:56:E7:C9:B4:93:8B:BA:60:F8:1E
X509v3 Authority Key Identifier:
keyid:4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e9:ef:4d:21:2e:f5:ca:8f:20:b6:41:c2:ff:2c:99:9a:64:
41:ae:35:04:ed:58:cd:fb:eb:fa:a1:24:0c:d5:e3:c0:c8:48:
7c:b5:ac:92:3b:ef:39:d2:17:d3:dd:61:5c:68:67:04:52:3f:
d5:bf:d7:9f:2b:3e:67:a7:a8:42:12:f2:9d:2a:85:ef:15:6e:
51:ea:bb:9d:b4:3d:55:56:94:d5:87:d5:b1:f6:4f:b2:dd:3a:
85:01:11:54:6d:2d:70:07:ca:1f:56:82:c1:8f:50:11:09:2d:
0b:da:fe:87:1e:72:aa:cf:8e:7a:6d:76:ba:ed:92:c6:78:88:
cc:90:99:22:68:53:f3:e1:ce:3b:6c:7b:96:26:f7:1f:76:b6:
8f:cb:c7:ce:d1:23:90:78:45:2d:83:1d:35:5b:65:f2:e6:74:
d8:68:25:c0:74:ce:f8:69:f1:be:a2:4b:64:09:79:c9:6e:74:
a6:fd:ed:ef:70:d6:ef:ad:2b:5f:7e:21:af:cf:73:49:74:a0:
d6:f3:d1:1f:9d:69:fa:a4:53:3c:7b:88:5a:44:77:e8:ca:16:
01:f3:76:91:07:4a:0c:f7:7f:fc:65:d7:bc:ab:99:b6:ee:cb:
82:41:1e:7f:da:0a:5a:b0:40:f0:c2:47:b6:04:66:4b:7d:01:
61:81:d4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:39:30 2026 by rpki-client