
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
File: gpROaqVxwOs14nkbwVlvdyd6cyQ.mft (raw, json)
Hash identifier: YPUshLqqYLoXTT14lyTzcNtXLaLTArPJ58NqUcI2eJ0=
Subject key identifier: BB:8A:B0:41:6E:CC:26:4B:88:07:BD:96:21:B9:CC:09:B3:D5:25:1D
Authority key identifier: 82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24
Certificate issuer: /CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
Certificate serial: 02CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
Manifest number: 02A5
Signing time: Sat 13 Jun 2026 01:34:08 +0000
Manifest this update: Sat 13 Jun 2026 01:34:07 +0000
Manifest next update: Sat 20 Jun 2026 01:34:07 +0000
Files and hashes: 1: gpROaqVxwOs14nkbwVlvdyd6cyQ.crl (hash: rX9UwXYvylh+JaslERevP5HkX6xJnAb/Ror+gLghEuY=)
2: 5DB7C89AF25E11EE9239B009C4F9AE02.roa (hash: qF8UQpduJURSSws6qaTkNhteNuCF3Xv0DEEsWe94W2k=)
3: 429AFADCF25E11EE9E1B8A09C4F9AE02.roa (hash: Av4mHmkvx3iYn7v4H7bW4jhBpHBzklQ4N3gttmKh3/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl
rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 714 (0x2ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE9CC, serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
Validity
Not Before: Jun 13 01:34:07 2026 GMT
Not After : Jun 20 01:34:07 2026 GMT
Subject: CN=6a2cb38f-ba27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:9f:c4:3b:d0:05:42:8b:47:2e:61:9f:f6:
84:8b:77:aa:19:a4:55:8d:54:dd:23:15:a5:c9:6b:
66:e3:d2:3c:83:fe:9f:6b:c0:47:78:3a:bd:7d:47:
9b:4d:03:3e:db:e2:f1:59:fc:3d:40:83:7f:e1:98:
0c:74:69:6d:5e:de:ff:5a:b4:26:b7:9e:ef:7b:2f:
c4:cf:b3:9e:65:e9:86:3b:ef:e6:64:3d:13:e1:96:
9d:24:98:15:9c:b9:fe:0b:a3:ce:b8:fd:31:0e:87:
8d:cd:69:75:92:40:09:a8:3a:8a:e9:17:d3:73:d0:
f6:21:aa:67:ac:04:8f:53:f2:87:6c:74:a8:c9:47:
66:fd:e0:24:3a:b4:1b:14:c9:13:2a:f2:89:2f:f3:
ff:03:ee:a8:d2:d0:1a:93:af:f1:da:77:33:17:10:
8e:4b:90:34:04:f2:19:a0:07:ee:05:8a:cb:5f:94:
7d:51:27:da:f6:cb:a5:e9:5d:fe:30:4c:16:0f:af:
8a:6d:e2:42:72:e2:a6:0b:0d:b5:66:cf:ff:9a:67:
05:ae:01:97:2a:93:c0:71:1d:cc:11:9a:d1:0e:c1:
61:f2:a6:64:25:36:5e:5b:c6:57:82:71:aa:67:63:
ea:50:10:ac:e9:23:95:50:8b:c0:80:1c:7a:cc:8f:
35:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8A:B0:41:6E:CC:26:4B:88:07:BD:96:21:B9:CC:09:B3:D5:25:1D
X509v3 Authority Key Identifier:
keyid:82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:34:ac:80:bf:a1:1a:ae:24:db:bc:90:64:63:a8:a6:5c:08:
e8:02:52:d2:4a:64:a5:e5:c8:49:27:79:3e:b3:10:b7:01:79:
73:22:25:37:8e:6b:10:8e:0f:0c:c8:a1:e2:2f:9c:d4:39:98:
ec:60:35:65:13:ec:02:a3:5b:bd:d6:12:b1:8b:05:da:32:43:
14:6e:5e:d8:86:5d:5e:29:21:25:2e:41:ee:35:7c:7f:f7:ca:
16:d4:11:d3:08:6f:c8:35:9a:fa:8e:ca:ce:c9:2b:87:85:42:
e7:c5:ed:a6:74:4d:26:fc:65:c5:cc:43:3c:d7:c9:cf:1e:89:
13:d6:69:7c:24:ab:43:47:cc:91:47:c5:25:1c:62:09:41:c0:
60:ad:3f:25:2f:21:00:4f:c8:13:53:d8:87:fe:f9:de:29:87:
49:da:41:f6:c7:d0:3a:20:be:3c:6a:48:2f:66:d0:c9:d2:6d:
30:d5:b9:e4:8f:1b:6b:e4:a6:9d:63:e1:8e:6b:c0:92:54:43:
50:75:b4:05:d3:b0:90:a0:66:a0:dc:a5:10:97:d1:81:d5:e0:
3d:39:eb:7a:cb:cf:9c:4e:88:f3:88:4e:34:77:4c:9a:5f:5b:
6d:07:10:b3:48:bd:38:a0:63:8c:99:fd:1c:01:f2:c1:f5:f2:
3f:55:22:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:39:44 2026 by rpki-client