
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft
File: SokSJxJpPqAI66ehAaxiJpX67CQ.mft (raw, json)
Hash identifier: 4aZyJV7Sqfx1amCyT49EjZgWRbnKKlAawkONvP3jI9E=
Subject key identifier: 68:00:2B:EB:52:A2:74:CF:99:89:37:C9:F4:80:7D:CD:FF:CD:C1:1D
Authority key identifier: 4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24
Certificate issuer: /CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24
Certificate serial: 053B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft
Manifest number: 052D
Signing time: Fri 12 Jun 2026 23:36:24 +0000
Manifest this update: Fri 12 Jun 2026 23:36:23 +0000
Manifest next update: Fri 19 Jun 2026 23:36:23 +0000
Files and hashes: 1: SokSJxJpPqAI66ehAaxiJpX67CQ.crl (hash: TB+T1jMhnnijQzQTkLW/hN7mC+p/xScBprR+JlpqAD0=)
2: 05F05A76D07B11F08779390AC4F9AE02.roa (hash: vYbquqIITIw2ttWYVfnYgoYEL08nDVMuIyeHY1P7sck=)
3: 178FCB6AE8AC11F0B6F09D7D576F56BC.roa (hash: uo0O5iMqmXBY9eNhFbE9nAU1PqFbkE1Yki+rMiTnIkk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl
rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1339 (0x53b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEF20, serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24
Validity
Not Before: Jun 12 23:36:23 2026 GMT
Not After : Jun 19 23:36:23 2026 GMT
Subject: CN=6a2c97f7-37f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e0:92:0b:17:04:fd:1e:9a:5c:91:fb:bd:62:
0d:fb:a4:57:b5:33:5f:60:8b:16:90:01:27:73:55:
87:a2:49:16:f6:22:79:dc:bd:1e:7e:fc:38:33:b3:
53:67:4e:88:ed:65:17:ca:9c:32:62:cb:4c:5b:0c:
2a:84:d7:a3:1a:be:a1:14:38:7b:1f:6d:8a:a4:2c:
3b:98:e3:92:0a:17:a6:b3:fc:07:72:60:c5:4e:41:
79:77:a7:dd:a9:31:8c:bd:eb:f5:6f:ba:b8:9b:55:
49:4c:da:47:a6:b5:d8:bc:7c:a9:e4:e7:85:46:44:
f9:e2:9b:83:2a:45:f7:d5:7f:8a:bb:13:97:35:a4:
e5:e1:ce:ea:43:90:91:1b:4c:6c:f4:a6:c0:f6:cb:
15:3b:ba:98:5b:d7:12:98:0c:79:cb:93:97:1f:91:
e6:16:cc:fc:bb:7c:75:d3:d3:a9:f8:1d:20:f9:20:
c4:c1:80:57:a1:e4:57:49:e4:d5:4f:8a:7d:3c:bf:
43:cc:b5:35:29:44:1a:60:60:13:59:a6:1a:12:63:
35:2f:f5:4c:6b:c8:66:06:b2:e1:b6:2a:e5:18:21:
a0:13:db:f2:91:9a:98:f3:dc:c8:3a:21:29:26:e3:
c5:6b:e1:ea:34:29:45:d8:c7:e7:68:20:4a:c4:13:
c6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:00:2B:EB:52:A2:74:CF:99:89:37:C9:F4:80:7D:CD:FF:CD:C1:1D
X509v3 Authority Key Identifier:
keyid:4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:34:48:51:e8:f4:87:be:e3:c5:f9:6e:40:92:1f:ec:4b:d3:
b1:85:2f:c1:4d:a8:32:67:a7:1c:e9:b2:e5:ad:4e:95:0c:89:
a6:3a:aa:64:1d:a3:a3:f0:b1:36:9f:26:d8:25:ff:81:aa:4e:
c1:e7:77:6b:92:7e:94:5b:91:4a:9f:93:47:e3:82:32:11:f4:
fc:77:27:b4:df:af:10:f6:ff:d0:3f:bb:5f:ba:1e:59:ee:7a:
52:81:62:8c:0f:f8:59:89:74:45:47:7f:82:85:d9:b3:0d:ef:
56:28:a6:f7:21:a4:31:92:ca:a8:d2:61:32:63:7b:3b:50:f5:
9d:88:07:80:0f:04:c4:c5:12:e3:7d:78:a8:36:57:eb:b4:27:
d1:b8:f0:5a:86:dc:70:6a:f5:95:7a:b4:4a:1e:1d:a0:9e:db:
68:b0:0e:c6:19:72:4b:42:ff:e7:c4:d7:85:54:de:12:34:16:
f7:d1:30:bf:70:d0:37:36:8f:34:82:6f:bf:0e:a4:6a:05:f3:
c9:44:a8:cc:54:4e:00:3c:d5:32:29:03:b9:dd:88:51:b4:ee:
12:1d:6f:73:72:d1:66:0b:fd:05:3a:7a:fc:de:21:73:9d:8b:
55:c7:37:cd:29:99:40:76:cf:00:78:60:23:bf:3e:34:c1:b9:
df:68:d3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:56:56 2026 by rpki-client