
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
File: Soo5XlVsx_Garmqwav8GeUSVa0Y.mft (raw, json)
Hash identifier: uaCwBXahXggrDgZ81LMFUeQmbkL+HfaLV8mVmh+JZIw=
Subject key identifier: F8:35:EF:BD:2C:AF:66:55:77:4A:1F:ED:50:7E:13:87:AD:80:66:DB
Authority key identifier: 4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46
Certificate issuer: /CN=A91CFD5A/serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46
Certificate serial: 01CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
Manifest number: 01C8
Signing time: Sat 13 Jun 2026 03:51:06 +0000
Manifest this update: Sat 13 Jun 2026 03:51:06 +0000
Manifest next update: Sat 20 Jun 2026 03:51:06 +0000
Files and hashes: 1: Soo5XlVsx_Garmqwav8GeUSVa0Y.crl (hash: ja3gwySoCdrWmywAmOEdzGTksXt9fOo2uBP0DnW7MeI=)
2: D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa (hash: wK1+Edckckm18V5hHREZQkXgnFJR1vbGMuvkctbUg7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl
rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFD5A, serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46
Validity
Not Before: Jun 13 03:51:06 2026 GMT
Not After : Jun 20 03:51:06 2026 GMT
Subject: CN=6a2cd3aa-8652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:4a:8b:8f:e4:7a:a6:f6:66:c3:4d:bd:ed:
29:8d:70:1a:ce:d3:12:1a:86:aa:04:05:cb:73:af:
fa:88:e6:85:dc:d9:e2:38:ba:68:91:70:37:a4:5e:
e2:43:6f:00:2b:d7:2e:eb:6c:8a:98:c3:3e:ba:90:
e9:00:87:5c:c0:18:91:01:66:91:80:da:c5:28:03:
c4:0d:81:a4:d8:e4:3b:0c:28:d3:e9:12:c1:c2:07:
e4:12:ea:89:63:10:70:a8:b6:1e:5c:02:7a:08:3b:
a5:ac:6e:2a:c5:81:81:b3:82:0d:0a:dc:5f:8f:a9:
5c:98:58:0c:46:50:44:d3:94:6b:60:20:da:6b:5e:
6c:8d:83:24:83:43:96:7c:be:41:f9:76:70:d4:6a:
14:17:03:75:02:50:63:2d:c4:40:51:e2:6c:49:5a:
27:9c:80:cf:2d:5a:f7:03:09:05:ff:86:81:2c:3f:
f5:09:3e:4c:f4:df:1e:4c:e0:fa:9d:40:67:fe:0b:
d1:61:f8:eb:1d:03:eb:79:ce:b3:75:83:c4:26:66:
06:b2:97:7a:a2:cd:66:a0:7c:d7:e1:d4:43:6f:cc:
35:60:e0:20:2f:08:13:61:d6:96:44:bd:3e:1d:c1:
76:81:a7:65:82:70:89:5a:53:18:aa:0e:32:9f:87:
8c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:35:EF:BD:2C:AF:66:55:77:4A:1F:ED:50:7E:13:87:AD:80:66:DB
X509v3 Authority Key Identifier:
keyid:4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c2:22:df:51:bf:41:51:45:6c:9f:2b:b3:43:a0:be:4b:1f:
bb:ab:07:aa:7f:ef:a0:1e:ae:53:7d:00:6a:45:98:25:94:19:
0e:00:14:ad:f7:03:59:d9:a0:47:92:a6:7b:35:91:c5:59:34:
15:e9:70:a7:c0:90:a9:7b:91:cb:83:dc:64:be:86:fc:0f:df:
de:de:4a:bf:61:87:a6:7d:f0:65:f8:04:8e:8b:c8:97:b3:34:
5e:3d:d2:4f:73:5b:3c:73:3a:1e:b5:0f:e9:f8:58:5d:f7:50:
8b:e3:c1:0c:08:dc:34:6e:cd:80:90:25:1e:7b:3f:d6:e8:80:
24:9e:fc:6e:70:23:3f:83:9f:f4:c1:c4:19:c9:c0:bf:12:e7:
36:50:bd:cb:af:73:54:b9:0a:dc:1d:24:05:b1:88:18:48:75:
07:7c:d7:6e:14:fd:41:c4:83:82:17:91:1c:5b:ba:76:1a:de:
b6:e5:eb:bc:e5:c4:79:be:7a:5b:1b:02:29:7d:d5:dd:6d:0e:
73:cd:d3:64:ed:de:78:c5:a4:52:06:94:52:64:c0:d6:ab:fc:
2a:7b:4d:c2:98:25:68:98:6a:71:c6:7f:21:85:78:46:7a:45:
ab:e1:09:73:ba:d6:d3:ac:69:34:67:de:55:c5:5a:7a:5b:56:
ae:37:30:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:21:57 2026 by rpki-client