
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
File: gpROaqVxwOs14nkbwVlvdyd6cyQ.mft (raw, json)
Hash identifier: RKXisw9kGMEeCwgbRH/nzxubS+dt+7iAF8UPcK5JGaE=
Subject key identifier: 86:22:4D:B0:90:8A:2C:39:34:1F:B3:D0:F4:93:A0:BF:DC:2C:9A:41
Authority key identifier: 82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24
Certificate issuer: /CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
Certificate serial: 0300
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
Manifest number: 02DB
Signing time: Sun 27 Sep 2026 01:23:05 +0000
Manifest this update: Sun 27 Sep 2026 01:23:04 +0000
Manifest next update: Sun 04 Oct 2026 01:23:04 +0000
Files and hashes: 1: gpROaqVxwOs14nkbwVlvdyd6cyQ.crl (hash: FxEjVL75HaJoD2ZyYN2UCt486XCldTPHlpEfWHjHUL0=)
2: 429AFADCF25E11EE9E1B8A09C4F9AE02.roa (hash: Av4mHmkvx3iYn7v4H7bW4jhBpHBzklQ4N3gttmKh3/U=)
3: 5DB7C89AF25E11EE9239B009C4F9AE02.roa (hash: qF8UQpduJURSSws6qaTkNhteNuCF3Xv0DEEsWe94W2k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl
rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 01:23:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 768 (0x300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE9CC, serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
Validity
Not Before: Sep 27 01:23:04 2026 GMT
Not After : Oct 4 01:23:04 2026 GMT
Subject: CN=6ab86ff9-49a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:fe:dd:f5:4c:a9:d2:9f:0c:2c:ce:08:3c:
15:cd:67:cc:5c:e7:be:49:19:45:7c:d4:28:af:7e:
34:0c:1a:fd:0c:54:b2:36:e7:f9:c9:c6:2d:67:7f:
0d:10:ff:48:9e:93:90:83:3c:ba:ea:61:dd:fd:09:
d5:25:9d:01:95:71:be:d5:b6:70:ba:f7:7c:74:09:
3a:30:7e:f5:03:c0:d0:7c:d1:eb:d0:9c:56:ca:40:
8a:28:c5:28:e2:84:7c:ff:b1:84:70:c9:00:46:4c:
f1:26:5a:a9:52:09:c3:3a:4c:b6:ba:ad:92:29:6f:
82:11:a1:3e:05:4b:3a:f1:96:ed:54:52:07:12:13:
7b:c8:c4:0d:4d:f2:61:16:4e:b0:d4:e4:fa:d3:1a:
cb:f4:10:de:22:9a:a9:a0:c7:3e:4a:7a:ea:98:84:
9e:33:a2:2e:b3:6e:5e:e0:43:56:31:07:ee:cf:1b:
be:c6:05:0f:24:d0:b4:59:c6:03:8f:85:f5:c0:52:
93:e5:1f:2d:2d:81:74:40:29:bc:1a:8e:ce:a8:45:
28:ba:65:f8:e0:6d:d5:51:b9:ef:8a:9f:4c:11:42:
85:8a:9a:5c:13:33:6f:20:c1:71:70:3d:8d:00:18:
68:3d:19:f7:a7:cd:0e:cc:b7:4f:cf:cf:67:4a:c5:
ea:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:22:4D:B0:90:8A:2C:39:34:1F:B3:D0:F4:93:A0:BF:DC:2C:9A:41
X509v3 Authority Key Identifier:
keyid:82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2f:f0:de:19:5a:2c:85:63:58:4b:ad:f1:b1:26:53:75:b8:
b7:d7:64:7e:45:f2:ec:92:3a:a2:89:17:b3:fc:5e:57:77:6e:
67:b2:96:de:48:76:29:7c:a4:be:84:0b:53:d2:df:aa:f5:a0:
dc:30:4c:a5:d2:a4:7c:28:39:0e:67:b4:cc:b3:4b:b3:f4:13:
9a:a4:40:aa:f2:4d:8e:be:ff:40:7d:22:70:e4:79:ad:56:78:
34:34:bb:35:bd:f4:0e:e6:c9:c9:41:9c:14:ad:5c:03:1a:56:
3c:85:ad:72:78:31:3e:63:19:db:6c:49:ce:a6:5b:10:56:df:
92:52:2b:44:89:96:f3:38:2c:be:f0:ae:61:ac:e3:72:dd:0c:
3e:73:88:b6:27:77:1a:e2:7a:b8:6f:2b:3b:28:29:eb:81:b5:
b8:9e:74:14:e9:e8:5e:6b:b2:4e:6c:49:66:eb:38:9d:b8:9b:
f3:a8:db:07:17:cd:db:be:26:78:47:da:46:37:3e:01:22:db:
b1:30:28:c1:b4:2b:9c:a4:ec:96:32:1a:26:d2:81:03:ff:13:
fa:89:e9:6f:83:6e:13:60:58:27:70:61:17:38:79:66:78:1e:
f0:01:d4:9d:47:06:5a:36:e8:6d:b7:38:5c:a7:b9:4b:ee:35:
1a:78:53:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:34:50 2026 by rpki-client