
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
File: Soo5XlVsx_Garmqwav8GeUSVa0Y.mft (raw, json)
Hash identifier: F+9rArbHQk8zrQ4fPc72CcwJIrmfRJhUvzfkO9LOc6c=
Subject key identifier: 43:7D:BE:0C:52:E2:EA:04:D4:B6:5D:76:55:41:45:52:55:9C:02:D1
Authority key identifier: 4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46
Certificate issuer: /CN=A91CFD5A/serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46
Certificate serial: 019A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
Manifest number: 0194
Signing time: Mon 02 Mar 2026 12:45:11 +0000
Manifest this update: Mon 02 Mar 2026 12:45:11 +0000
Manifest next update: Mon 09 Mar 2026 12:45:11 +0000
Files and hashes: 1: Soo5XlVsx_Garmqwav8GeUSVa0Y.crl (hash: SJcZ8AFoampxn2yXTVmNRLYN/XGoHKWF9GSmJ0yfFjw=)
2: D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa (hash: wK1+Edckckm18V5hHREZQkXgnFJR1vbGMuvkctbUg7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl
rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 12:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410 (0x19a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFD5A, serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46
Validity
Not Before: Mar 2 12:45:11 2026 GMT
Not After : Mar 9 12:45:11 2026 GMT
Subject: CN=69a58657-7de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:ad:5d:37:f2:ab:ac:84:85:86:04:8b:b2:
b7:57:c9:f6:ef:5e:c8:33:40:63:55:03:8a:6b:92:
34:33:a8:ba:a3:33:72:15:92:6a:39:78:99:ad:35:
ac:e9:df:85:4b:3b:91:64:3d:77:ed:2a:48:4a:85:
6a:dd:4f:cc:4d:19:d3:27:f9:3a:04:b8:8d:8f:a3:
41:70:67:8d:00:6d:93:0c:3f:3a:d9:73:88:e3:17:
22:94:d5:2a:59:12:8f:3e:53:03:a5:e9:35:70:7c:
2f:7b:b6:3c:80:29:f3:ae:23:e3:15:e5:54:65:1f:
13:3b:93:1e:4c:d0:f9:45:7e:77:09:ca:e3:2c:b6:
5d:33:ef:44:92:5e:c6:e1:63:5d:95:e7:82:2c:31:
3d:cd:a9:99:a6:ba:f1:12:cb:5b:6c:62:87:26:37:
5e:fb:f9:21:66:f1:b9:4f:c2:eb:6b:4d:6a:55:14:
0a:de:70:91:dd:0c:9f:24:0e:03:63:0f:b5:24:5b:
ba:17:2d:63:b8:04:30:d7:f0:fd:20:ed:66:f1:d3:
d0:eb:d2:9c:5a:69:d0:07:64:15:f7:5c:8a:3c:23:
0a:4a:99:6f:9b:34:ed:5b:12:05:82:1c:33:62:88:
a9:24:9b:a4:88:a5:5d:43:3b:f0:43:38:ac:3f:6a:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7D:BE:0C:52:E2:EA:04:D4:B6:5D:76:55:41:45:52:55:9C:02:D1
X509v3 Authority Key Identifier:
keyid:4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:e9:50:a2:4e:11:2c:54:c7:c9:a0:d7:e4:99:32:81:a3:ad:
89:3b:0e:df:62:86:17:94:45:42:47:17:da:ef:22:68:7a:4d:
f7:db:5a:6a:e7:79:53:bd:fc:dd:c4:c3:0c:ba:43:68:bd:0a:
10:6f:95:a6:1b:0c:c3:2e:6f:0a:d3:a5:41:0d:b0:9c:9b:5b:
78:b6:70:16:6d:a6:3f:85:f3:8b:ad:d5:ac:c2:73:5b:63:a5:
5a:6c:72:67:05:09:ad:26:6f:96:d3:9f:38:4a:4f:c0:49:3a:
0f:3a:e8:ad:48:5a:20:73:c7:4d:b9:2b:3d:d3:a9:51:5d:79:
73:44:36:66:45:f8:71:62:a5:05:be:1e:9e:1e:93:76:4a:d7:
50:f1:5b:21:2f:7a:8b:66:77:59:61:82:a0:05:78:69:4e:5d:
dd:7b:50:93:e6:ce:6c:be:4f:16:53:0a:78:a7:f2:62:da:55:
93:20:ff:c9:4c:de:c6:c0:0c:a8:e2:3c:68:9b:00:c3:13:60:
ca:a8:4d:90:cd:5a:39:d7:92:29:d5:ff:7f:3b:e0:07:e4:7a:
b6:8b:6f:51:f0:52:03:1a:e1:55:a3:2a:20:0f:35:fc:04:7e:
f6:80:0d:28:49:37:84:44:ff:f4:05:c1:40:c0:7d:35:73:ad:
54:ab:39:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:33 2026 by rpki-client