
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
File: gpROaqVxwOs14nkbwVlvdyd6cyQ.mft (raw, json)
Hash identifier: Xdi2F/imjQo3V9xXR/aiv1ugLaAy1d1P1iK3LtrSKrA=
Subject key identifier: 18:F4:7C:D8:51:25:A9:27:D5:F2:CE:FD:59:18:4F:6A:17:3F:11:BD
Authority key identifier: 82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24
Certificate issuer: /CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
Certificate serial: 0276
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
Manifest number: 026D
Signing time: Sun 01 Mar 2026 02:35:58 +0000
Manifest this update: Sun 01 Mar 2026 02:35:58 +0000
Manifest next update: Sun 08 Mar 2026 02:35:58 +0000
Files and hashes: 1: gpROaqVxwOs14nkbwVlvdyd6cyQ.crl (hash: IvGgo7uTifyXRIfemrAJNqlj6OkoCxMw0ECAfDDqnQ4=)
2: 5DB7C89AF25E11EE9239B009C4F9AE02.roa (hash: PGJbQnjc1bTQtRJhtYYqM6Jzz/Z0WeIug83GlsZ1DPI=)
3: 429AFADCF25E11EE9E1B8A09C4F9AE02.roa (hash: guoDsfCdlPfgkYSScjR/9hRsT4QBuvGrmx7XsTxsYOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl
rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 630 (0x276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE9CC, serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
Validity
Not Before: Mar 1 02:35:58 2026 GMT
Not After : Mar 8 02:35:58 2026 GMT
Subject: CN=69a3a60e-cb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:74:91:2e:82:72:ef:9d:a2:aa:e3:28:e0:e7:
1d:e1:fc:80:20:67:48:f1:6a:ac:1f:71:cf:bd:02:
26:75:eb:49:1f:eb:be:0e:68:03:f4:83:eb:1c:c9:
dc:d7:07:51:7b:ce:c7:64:c8:a3:d6:1b:83:f9:33:
c9:ef:86:b0:04:d7:73:5c:38:18:68:21:e8:5f:29:
ce:4d:df:66:b7:60:b2:6f:10:14:e1:36:87:e7:35:
93:46:27:09:cc:88:dd:c4:2d:35:68:c0:ac:3a:a0:
7a:8c:5e:7d:4f:d4:3d:19:24:3a:29:d5:2f:6a:04:
0f:31:e9:5b:0b:b2:ca:26:38:7b:af:21:7f:a9:f7:
88:df:ce:f9:1c:02:c3:ca:b5:40:45:cb:c3:b6:23:
30:83:d6:32:71:d3:15:55:01:cb:a7:cd:fb:c4:65:
0e:1e:5c:04:bc:75:ab:30:f6:1e:a7:1c:12:4a:8f:
4f:be:27:e9:48:ff:47:fd:4b:df:a7:29:49:81:18:
50:b3:af:7f:57:46:9c:ce:5f:de:55:2d:a1:e2:ff:
d6:8d:37:4d:13:55:68:40:55:ee:75:1c:99:24:a1:
57:4f:18:e7:56:a0:c1:b6:12:ce:98:56:23:9e:7d:
ff:c0:92:14:78:5f:bc:a9:99:18:aa:72:4b:97:0c:
96:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F4:7C:D8:51:25:A9:27:D5:F2:CE:FD:59:18:4F:6A:17:3F:11:BD
X509v3 Authority Key Identifier:
keyid:82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:a6:a9:cb:b4:c7:a9:1a:49:fc:23:c8:56:a9:6b:81:51:6c:
41:77:45:31:17:69:c3:b1:c7:a3:c8:cd:de:79:3d:de:de:55:
ea:cf:66:e8:0b:d5:82:4b:bb:ea:37:62:5f:61:05:3b:6c:68:
35:8f:2f:5a:32:dc:25:07:f2:c0:f0:dc:8f:28:4d:d4:46:00:
42:28:cb:4f:a7:09:49:be:6e:d1:91:0d:c5:83:be:a6:22:12:
7b:bd:39:c8:f9:43:63:66:ee:92:f3:b4:88:12:f5:fd:0e:c0:
c0:cb:95:00:54:3b:e8:4a:e8:ec:7e:17:ba:a1:67:95:8c:8a:
e5:72:57:82:91:a3:13:09:97:82:3d:ff:c8:5a:87:41:16:63:
ea:5d:c2:eb:e6:20:91:e0:a1:03:96:8d:7b:49:49:77:7a:03:
6c:22:2a:ba:24:81:48:62:1a:23:83:e4:ae:e6:c6:8d:b1:a0:
44:2d:cb:32:21:3e:b7:0f:72:74:33:f6:e7:e2:03:96:68:03:
7f:55:6e:32:a6:8e:6f:c3:ee:eb:21:b6:53:09:69:4b:51:2c:
c2:4a:e2:c7:d0:b9:cc:21:37:d9:44:f1:3c:fb:79:73:39:af:
f7:62:e8:c9:83:ef:2a:a8:4b:6e:89:b0:f6:ee:a4:9e:2e:f5:
6a:4a:4e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:42 2026 by rpki-client