
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft
File: -soSQJs8JskJ3Pqy874emPzo2oA.mft (raw, json)
Hash identifier: Q8AVt6B0BQuB5pllR5Z+m1Oc7LOdO7rfc5uIrvTax2w=
Subject key identifier: DC:D1:62:D7:38:1A:B1:99:A5:1A:C3:05:7C:FB:F1:0E:5F:D1:31:78
Authority key identifier: FA:CA:12:40:9B:3C:26:C9:09:DC:FA:B2:F3:BE:1E:98:FC:E8:DA:80
Certificate issuer: /CN=A91EE8EF/serialNumber=FACA12409B3C26C909DCFAB2F3BE1E98FCE8DA80
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-soSQJs8JskJ3Pqy874emPzo2oA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft
Manifest number: 10
Signing time: Wed 13 May 2026 09:12:08 +0000
Manifest this update: Wed 13 May 2026 09:12:08 +0000
Manifest next update: Wed 20 May 2026 09:12:08 +0000
Files and hashes: 1: -soSQJs8JskJ3Pqy874emPzo2oA.crl (hash: gx+0uCum2Y8SqFijhBWdMQqmJyJ05BUIRwZ4rNBg27I=)
2: 4663706238A311F1973C08FAC9833773.roa (hash: 2BdIoOt9gZwRjlU6kS+v6A4uOHq7Kcw5jXOmSBzzOg0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.crl
rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-soSQJs8JskJ3Pqy874emPzo2oA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE8EF, serialNumber=FACA12409B3C26C909DCFAB2F3BE1E98FCE8DA80
Validity
Not Before: May 13 09:12:08 2026 GMT
Not After : May 20 09:12:08 2026 GMT
Subject: CN=6a044068-76a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3b:f7:b6:ae:14:1d:8b:74:41:40:f0:15:2b:
86:58:88:51:5f:16:d5:99:76:32:a4:b3:08:e3:bf:
27:9a:0b:e2:c8:76:58:57:25:b0:97:a9:86:4e:52:
6d:16:16:ee:4e:c9:44:c4:54:98:d1:a7:e6:f7:00:
3d:b8:67:c9:96:c5:03:a5:81:4c:97:ca:3f:95:8e:
f1:d2:e8:78:0d:17:8e:6b:b5:08:c1:d7:29:d4:95:
af:0e:4f:3d:2f:81:b7:27:29:8f:06:7e:5a:43:c2:
0d:1f:31:19:81:16:2c:29:4d:32:4a:ad:ed:c4:78:
18:01:46:b5:73:61:c8:08:31:c5:19:1e:83:68:72:
02:ef:e9:b9:e0:df:c4:bf:6a:92:96:91:26:d0:12:
5e:0a:e4:6f:27:1a:4b:97:29:e4:5b:91:fc:a9:56:
f9:dd:8a:87:ae:5a:6e:05:7c:fa:66:cc:0a:56:4d:
a8:3c:56:d2:41:24:1b:b1:a4:71:93:35:46:b8:07:
42:42:ba:05:58:11:54:ea:2d:63:15:55:8e:60:dd:
7d:95:e9:54:39:91:52:b1:33:96:ef:21:b2:38:4b:
f7:5b:88:7d:17:ee:55:01:ff:0b:a5:14:07:61:d4:
5e:94:7d:f6:d9:71:55:ee:60:ba:18:07:c1:1f:95:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D1:62:D7:38:1A:B1:99:A5:1A:C3:05:7C:FB:F1:0E:5F:D1:31:78
X509v3 Authority Key Identifier:
keyid:FA:CA:12:40:9B:3C:26:C9:09:DC:FA:B2:F3:BE:1E:98:FC:E8:DA:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-soSQJs8JskJ3Pqy874emPzo2oA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:4a:3a:a8:d1:27:6a:91:5d:4e:cc:48:84:06:2f:18:80:eb:
de:2f:8f:d3:cc:3a:f6:cb:d5:d2:b7:0b:df:c0:3a:fb:c8:be:
7d:77:04:3c:d8:22:aa:88:ef:42:83:83:02:ab:b8:09:77:3a:
ee:c9:b9:87:c3:5b:5a:88:61:82:93:17:0d:88:e9:de:31:09:
8b:72:f2:8c:9a:26:21:c3:6d:81:48:a4:4c:84:06:4f:5f:ef:
4e:af:a0:b3:11:47:6a:ac:91:0f:9c:bb:e5:94:39:5c:2a:5f:
de:d4:fc:17:fb:fe:4d:9c:e3:22:28:11:ef:23:0e:f1:1f:31:
e9:b9:e6:d2:17:41:f0:e8:e9:08:e5:dd:46:b9:a0:4f:60:6e:
99:68:4e:c5:af:7a:4e:bf:af:00:08:e2:70:ef:6f:b5:a4:38:
25:14:cd:d9:5b:57:7d:70:c4:a8:95:9c:26:97:8b:10:23:95:
7e:2d:41:1d:87:ec:5f:5d:9a:d4:4b:52:a0:20:2e:9a:bf:c2:
67:93:80:f7:76:76:e2:4b:b4:ca:69:f7:b2:db:19:1f:f8:57:
b4:3b:37:73:82:70:f1:f6:9e:ae:2b:82:b0:b1:23:0d:af:c9:
13:a0:1b:fc:ab:d2:a8:f1:c1:d8:f2:c0:e7:9d:d1:af:07:55:
d5:3b:b9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:22 2026 by rpki-client