
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
File: Soo5XlVsx_Garmqwav8GeUSVa0Y.mft (raw, json)
Hash identifier: jXfGIgVtUCHrohtordOw5bnrxYcIqvednuN/vDYrhxE=
Subject key identifier: AD:BE:9C:35:3A:AE:20:D7:21:B0:42:D0:DE:FF:86:30:50:3F:3A:8F
Authority key identifier: 4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46
Certificate issuer: /CN=A91CFD5A/serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46
Certificate serial: 0206
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
Manifest number: 0200
Signing time: Thu 01 Oct 2026 04:08:04 +0000
Manifest this update: Thu 01 Oct 2026 04:08:04 +0000
Manifest next update: Thu 08 Oct 2026 04:08:04 +0000
Files and hashes: 1: Soo5XlVsx_Garmqwav8GeUSVa0Y.crl (hash: lnG2iLQcyrAHex/6MHxUAARYJ4taeEz4cJY5rdn+W/o=)
2: D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa (hash: wK1+Edckckm18V5hHREZQkXgnFJR1vbGMuvkctbUg7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl
rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 04:08:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 518 (0x206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFD5A, serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46
Validity
Not Before: Oct 1 04:08:04 2026 GMT
Not After : Oct 8 04:08:04 2026 GMT
Subject: CN=6abddca4-90ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dd:87:57:cf:03:f8:ba:d6:97:6c:cb:59:f7:
11:84:30:fd:13:ae:cf:18:5f:e6:4c:b6:72:d7:69:
92:67:9e:2b:55:e1:97:7b:df:05:aa:a6:e9:42:66:
bb:e4:b9:75:f3:9f:be:cb:46:95:80:25:63:14:33:
8b:bb:26:b2:37:52:a0:42:03:a1:e6:91:bd:14:b1:
8f:a8:99:11:67:38:62:0f:d2:16:1c:cf:0d:f0:3b:
6a:3a:9a:a6:13:eb:24:c6:02:6c:a1:44:bc:38:8f:
82:84:05:87:e4:48:8b:ee:29:d6:de:8e:d2:3b:71:
cc:5d:c9:6d:63:02:5f:89:b5:e9:02:92:d4:98:f2:
3a:e8:de:7b:e1:e4:46:fb:c1:90:54:fe:75:1a:69:
a1:45:ea:db:bf:bb:2b:08:0d:7f:68:b0:71:a6:ba:
7c:2f:48:9c:36:64:e4:46:94:6a:91:58:f7:59:d4:
f2:d7:31:7f:58:63:ae:dc:ff:a1:9c:c8:7b:4c:5a:
d1:24:52:0d:cd:f5:1e:6b:ae:1b:e1:77:3c:45:4b:
5f:1f:8f:a0:52:30:f0:d6:58:a6:9a:2d:06:ac:fe:
5c:21:1d:dd:13:90:85:7b:a4:90:10:eb:ce:cb:a0:
80:a2:75:93:50:cf:3d:3c:04:45:33:3c:25:1d:87:
eb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BE:9C:35:3A:AE:20:D7:21:B0:42:D0:DE:FF:86:30:50:3F:3A:8F
X509v3 Authority Key Identifier:
keyid:4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:81:90:17:8a:de:58:80:83:f2:9e:70:eb:f7:be:5f:01:4f:
c6:7e:59:6f:07:4c:49:c3:f2:9f:ce:78:7e:fe:be:9d:9f:72:
d6:1d:e6:2e:ed:27:7b:38:03:85:61:dd:8b:23:52:ad:8d:5f:
94:fe:88:56:3d:77:8e:f6:b7:c0:a7:cd:a9:40:73:8c:36:3e:
b5:15:21:d5:14:49:b8:75:f1:24:51:7d:f0:8f:9c:6e:f5:e3:
b7:76:83:38:22:fe:e2:02:30:2d:92:7c:5a:22:7c:5f:b5:79:
b7:e0:4a:8a:62:b3:00:93:ab:ae:ce:19:11:08:02:2a:48:4b:
d4:38:ed:60:90:29:98:06:e0:0f:a0:23:5a:50:49:1c:7f:16:
9d:72:4b:5f:af:d9:0d:15:3a:f2:43:78:17:b5:57:fe:d3:11:
d2:80:27:3c:d4:a5:3b:fd:22:ad:c0:5b:b7:86:b0:80:9e:57:
61:bb:22:92:a8:bf:3c:af:76:d3:50:3f:0b:ac:01:91:3b:80:
29:14:6a:e1:63:7c:04:e7:c5:56:a5:c8:a5:00:08:33:d0:30:
ce:d2:44:4b:02:33:b8:95:d8:ae:ee:9c:18:67:ad:99:34:df:
ce:1c:2a:a3:63:62:b0:7b:82:f4:79:e0:cb:34:9a:3a:51:c4:
88:7c:52:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 12:43:41 2026 by rpki-client