
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
File: rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft (raw, json)
Hash identifier: juE2wI301Dsz59oeGIsD2U4pzin44JNKK0i6O0+FR5s=
Subject key identifier: 45:C4:DB:13:17:4F:51:54:E3:30:21:E8:87:0E:D5:2C:AF:D1:8C:A3
Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
Certificate issuer: /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Certificate serial: 057E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
Manifest number: 055B
Signing time: Sat 04 Apr 2026 23:11:13 +0000
Manifest this update: Sat 04 Apr 2026 23:11:13 +0000
Manifest next update: Sat 11 Apr 2026 23:11:13 +0000
Files and hashes: 1: rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl (hash: aHW1tgxLTacLdmQeAcgDtbK5fn4arle00/xJvGrvDcE=)
2: B016290E2CE211EC8664D47EC4F9AE02.roa (hash: iPlR9XSPR98xGGjjpYDVt+BN1ba76Ec0RZ0BPLrHZc0=)
3: 14172F4C264311EEB0342B45C4F9AE02.roa (hash: G7J4NmvkxVUmCKOieqCt0qhLZaViU/M0n2XmU2IN4yw=)
4: AF91ADB42CE211EC8664D47EC4F9AE02.roa (hash: 5IBjur6W7h11nvSC9C3ig6x1AZlsiyawRHY054gkkvk=)
5: AEFA3DD02CE211EC8664D47EC4F9AE02.roa (hash: YN95xNIiCMWNGdl4rk75ApRqVC/9aQWMU1hl+gidJAM=)
6: 8C2F1C96367F11EEB689C243C4F9AE02.roa (hash: Iwa49PUpt2IaXfB65d55eo1rSTd0Z2R7AB96bUVn1x4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:11:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1406 (0x57e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A85A8, serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Validity
Not Before: Apr 4 23:11:13 2026 GMT
Not After : Apr 11 23:11:13 2026 GMT
Subject: CN=69d19a91-b84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:16:eb:31:95:68:1a:81:81:e8:e6:18:6b:
34:bf:1b:84:e2:ed:ce:e6:44:9f:2d:eb:ee:26:82:
d4:4f:36:f5:8e:67:f7:bf:c9:30:1d:29:d9:bc:ed:
1a:7a:f2:d0:5c:3f:a7:19:25:f1:46:f6:bc:30:2a:
f0:1c:ac:48:72:c7:b4:3b:a2:2b:06:00:3b:f4:b6:
08:be:b4:be:48:e0:20:4b:18:46:b2:4a:b7:6c:d9:
8e:24:92:42:5d:66:81:cf:c3:ff:c8:76:1d:76:27:
24:53:e7:9a:c4:b9:1e:6a:f1:cf:68:18:4d:7e:ea:
57:9d:32:65:ef:5e:74:18:6e:e3:29:6a:09:94:82:
16:5b:7c:35:59:6c:a2:49:62:ae:21:8b:fb:36:fc:
2c:ea:d8:f3:2f:41:58:69:ed:7c:71:3e:0b:34:b0:
b4:37:b7:aa:9a:e9:9b:58:34:23:93:3f:9d:75:49:
66:7a:b6:a2:69:68:a8:fb:50:56:ed:da:88:35:11:
96:8b:d8:81:32:61:02:0b:fe:1e:77:b0:f4:40:77:
0c:28:04:1e:eb:59:b7:72:7d:d1:a5:2c:19:35:97:
19:aa:e0:64:a9:69:ab:50:4f:a1:ec:f3:1e:96:36:
f0:88:b5:6e:a0:01:56:1d:6d:5b:77:f7:26:54:a4:
d8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C4:DB:13:17:4F:51:54:E3:30:21:E8:87:0E:D5:2C:AF:D1:8C:A3
X509v3 Authority Key Identifier:
keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:76:92:06:ec:4c:97:87:c6:f1:3b:9e:59:12:26:08:4f:3f:
f2:b5:3b:f7:2f:66:b6:88:36:a4:e5:d8:28:36:f1:f5:ab:85:
a8:31:84:da:92:44:c1:db:10:e5:05:c1:0d:ca:3c:12:83:09:
79:7f:a0:be:36:d4:d5:73:c8:e4:22:33:d3:c3:cb:95:eb:3e:
c7:1f:82:f7:d5:6d:81:b4:46:fd:f4:82:5c:a6:79:54:0a:97:
e4:2a:aa:ec:f6:88:bf:c4:99:0f:c0:15:9f:85:87:c2:d4:3a:
f3:2c:d4:77:cd:c7:2d:d4:82:9a:5c:91:32:b4:ec:ef:43:48:
02:c6:85:a3:22:1e:53:1c:6e:be:98:5c:78:d7:11:55:ff:ca:
c6:0d:f1:9e:26:69:ef:f2:41:6a:af:51:78:61:7f:35:3e:cb:
ff:c4:8d:27:99:cf:8e:69:96:90:9b:50:01:e5:c0:a3:27:7a:
cd:32:9f:e2:2b:d7:22:20:90:65:71:d3:73:d9:0b:9d:d5:e2:
16:7b:81:b1:81:74:d8:6e:ed:0e:f7:c6:86:03:ef:38:a5:80:
13:d9:5e:8c:0d:ea:91:9c:53:36:5f:4c:4e:7a:47:31:b4:b0:
11:16:09:63:a9:44:67:5e:e9:17:bb:fd:41:28:6d:de:ba:df:
fb:35:db:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 22:25:23 2026 by rpki-client