
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
File: Soo5XlVsx_Garmqwav8GeUSVa0Y.mft (raw, json)
Hash identifier: Ca4Un/zD0px9p4xFQ9sWQ03F7lc8xRu1P7L64X/Qoyw=
Subject key identifier: 00:F5:F8:75:36:6A:24:2D:9A:2B:A0:03:2C:89:CB:8A:A5:56:5F:A5
Authority key identifier: 4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46
Certificate issuer: /CN=A91CFD5A/serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46
Certificate serial: 01C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
Manifest number: 01C3
Signing time: Mon 01 Jun 2026 04:39:18 +0000
Manifest this update: Mon 01 Jun 2026 04:39:18 +0000
Manifest next update: Mon 08 Jun 2026 04:39:18 +0000
Files and hashes: 1: Soo5XlVsx_Garmqwav8GeUSVa0Y.crl (hash: Od6wSLyIwdPjO12ZeX3Umb3W0Nm7JcAvIPeQswEUsHs=)
2: D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa (hash: wK1+Edckckm18V5hHREZQkXgnFJR1vbGMuvkctbUg7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl
rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 04:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFD5A, serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46
Validity
Not Before: Jun 1 04:39:18 2026 GMT
Not After : Jun 8 04:39:18 2026 GMT
Subject: CN=6a1d0cf6-e51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d5:83:4b:4c:91:f9:91:e4:d9:8e:d9:7a:a1:
b7:0e:61:14:81:de:52:bf:12:b3:7b:02:a5:1a:cd:
bb:66:f2:05:76:26:49:b4:85:08:27:6b:b5:6b:e6:
60:a9:61:75:1c:04:08:47:7c:cf:2b:f3:39:7a:49:
ea:f3:f4:39:0f:7a:a7:25:6c:7b:c7:4a:d0:02:e3:
10:dd:a0:58:df:88:6b:5a:b0:e9:b8:20:a7:85:01:
4e:0e:a1:db:8d:1d:2b:7a:24:a6:5a:b6:b6:b4:3e:
46:5b:33:75:94:5e:f6:fe:f6:c1:41:47:28:92:94:
71:43:bf:b9:a9:65:b7:2d:4a:fc:49:a8:84:95:ca:
51:08:e1:83:6b:88:a5:12:85:44:f2:76:4d:a5:1e:
5f:3d:09:48:13:b0:b5:9e:d9:f9:fb:da:b0:dd:f7:
f8:7b:88:ce:7a:46:34:ef:f5:c0:a7:4d:ff:0a:5a:
cd:9a:43:f1:ab:51:b0:3d:41:d9:f7:5d:e3:a0:04:
08:13:b1:48:c8:1f:03:7c:35:c9:6e:ad:72:42:22:
b5:35:0d:62:b6:51:a7:07:d7:c8:d0:c0:bd:d9:34:
eb:1e:ad:c9:d8:fe:f6:7d:83:cd:83:3c:95:3b:34:
ed:3d:5e:21:fc:0b:3e:1d:f5:76:6f:12:ad:ae:fa:
67:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F5:F8:75:36:6A:24:2D:9A:2B:A0:03:2C:89:CB:8A:A5:56:5F:A5
X509v3 Authority Key Identifier:
keyid:4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:1f:85:3c:3b:33:6f:38:a3:4f:6f:df:e4:41:6b:98:11:40:
8e:d2:dc:2f:0a:88:61:52:b1:8c:aa:ba:79:96:d2:66:0a:8c:
b4:63:93:28:fd:33:05:a4:b7:79:54:cf:12:d1:a2:a9:80:1a:
17:c5:4e:38:f7:3a:b0:60:d8:03:cb:f7:15:1e:f1:d5:f2:ef:
fa:f0:9a:8f:4b:37:43:45:73:c2:30:f6:28:5e:70:ec:f2:1e:
4a:b5:f7:93:51:cb:aa:55:76:32:8b:ee:9a:e5:ba:02:7a:87:
97:43:a0:07:08:f3:b1:83:b3:47:99:ca:68:34:9f:cd:87:55:
4c:77:fb:19:a2:d0:41:20:9a:58:ee:42:50:bd:6c:78:a8:d7:
87:ce:ff:b0:c5:6e:1c:e0:8f:b0:4c:ee:08:70:f8:0f:b6:d5:
cd:5a:7b:3c:b9:dc:7f:e8:8e:d0:9d:ad:4f:c9:74:2d:2e:28:
7e:43:9a:11:ee:57:70:2b:11:58:0d:60:de:e0:9e:9d:4c:c0:
3c:c0:35:c6:14:60:93:c1:3d:20:26:1f:cb:dd:21:15:cb:e9:
35:f0:91:e0:8d:9e:24:67:6c:7d:b4:05:d9:a5:ed:23:a0:f9:
f2:24:3c:61:ec:d8:82:ae:27:5d:18:df:b0:5c:36:7a:b9:00:
86:41:95:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:35:01 2026 by rpki-client