
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
File: Soo5XlVsx_Garmqwav8GeUSVa0Y.mft (raw, json)
Hash identifier: N+BdPtsswJTGwysXAmWCmHtfl/UUCZ/igRuOy0A8Qzo=
Subject key identifier: 68:9E:F7:85:51:99:52:BA:57:8B:93:04:B3:A3:2A:73:49:25:4D:81
Authority key identifier: 4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46
Certificate issuer: /CN=A91CFD5A/serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46
Certificate serial: 01DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
Manifest number: 01D9
Signing time: Fri 17 Jul 2026 04:38:25 +0000
Manifest this update: Fri 17 Jul 2026 04:38:24 +0000
Manifest next update: Fri 24 Jul 2026 04:38:24 +0000
Files and hashes: 1: Soo5XlVsx_Garmqwav8GeUSVa0Y.crl (hash: l5/ogN9n22d7J+LoyNQZap+I9kkkwOhi2FRU+9w1tkc=)
2: D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa (hash: wK1+Edckckm18V5hHREZQkXgnFJR1vbGMuvkctbUg7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl
rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 04:38:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFD5A, serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46
Validity
Not Before: Jul 17 04:38:24 2026 GMT
Not After : Jul 24 04:38:24 2026 GMT
Subject: CN=6a59b1c1-1b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:c5:0d:a1:c1:80:18:2f:a1:45:bf:03:70:
b0:fc:59:ac:09:68:f1:cb:a9:a4:3b:4f:f2:3d:f2:
72:93:26:6e:92:11:0e:87:1e:97:38:2a:02:9e:75:
26:f3:6c:d6:9c:f8:07:ed:ff:59:86:fe:49:a1:fa:
b8:a4:10:af:5b:a2:40:fa:1b:01:37:bc:34:be:cb:
4d:56:06:d0:20:cc:0d:e6:86:14:8f:60:3c:7a:e3:
89:c0:51:fb:e7:ec:a3:46:fe:bb:1f:ef:93:ee:62:
04:04:37:25:26:94:e6:24:79:a6:78:46:94:71:02:
2e:5e:46:b1:ad:43:3c:61:90:ed:63:97:ff:4b:fe:
a5:e3:65:d8:b1:a0:80:4f:43:5e:6f:97:87:96:ef:
f4:81:1e:69:c4:2c:f8:5b:46:88:4e:26:a0:f2:a2:
a6:a0:7e:c7:d6:a3:4b:b4:e4:c7:c7:68:3c:b7:80:
8f:2b:b6:9e:01:7a:09:74:66:f5:98:ab:a1:aa:67:
87:47:d6:4e:d5:4d:44:fe:f8:7c:58:22:12:14:dc:
e6:12:a4:11:9b:07:f2:4c:0c:51:78:b8:95:ee:a7:
cf:73:70:0e:97:93:77:0b:d5:ec:f1:78:10:f3:c1:
a5:80:94:04:02:17:b4:9f:e3:3e:39:6c:14:f8:01:
64:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9E:F7:85:51:99:52:BA:57:8B:93:04:B3:A3:2A:73:49:25:4D:81
X509v3 Authority Key Identifier:
keyid:4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:87:19:e9:ed:e0:bd:08:ea:80:ac:0c:21:57:9a:d5:2f:51:
8d:e8:f3:65:56:5b:4b:17:13:08:a3:60:4b:8e:1b:8a:f7:c8:
86:51:9b:da:d1:f0:43:bd:ea:b4:9f:b9:aa:ca:2b:07:30:27:
37:22:8e:d8:f1:8f:e8:1f:c4:e1:11:6c:95:e4:39:96:b3:d8:
de:3b:18:4c:2a:01:3c:44:5a:d3:64:52:16:dd:23:14:34:22:
d1:b0:a3:44:23:81:ce:0f:b9:ac:2a:f7:30:5b:0e:13:29:95:
4b:f6:d2:35:8d:d7:16:3d:8b:7a:4c:3a:2a:86:1c:09:79:d6:
19:38:73:a5:eb:d3:43:0a:a4:e1:ae:1d:57:26:1c:2f:38:41:
7b:0d:e2:25:e3:7a:c4:59:dc:8c:1c:86:3e:7b:54:b0:a5:8e:
0e:0f:fd:e9:d0:43:7a:84:10:6d:07:83:33:ee:14:b9:46:27:
66:bd:6f:7f:55:93:36:ed:5f:f7:3b:f4:3c:1d:34:ed:d4:73:
12:1d:15:2a:10:f7:3f:7a:40:54:5c:06:23:96:2d:db:30:25:
6d:6f:6c:1f:b8:77:76:3f:15:c9:77:8b:2b:d1:3c:b0:f3:d1:
8f:89:1d:70:5d:26:26:5c:a1:dc:64:f9:c6:37:8a:d3:f2:db:
6a:18:bf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:28:36 2026 by rpki-client