
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
File: rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft (raw, json)
Hash identifier: H1N+PEEpl0Cc6Awesbn6ntF9vZpmsbppNMOjYTktA3g=
Subject key identifier: 5E:F5:DA:1F:73:93:1F:DA:BC:E0:B6:F4:1F:B5:6B:C1:73:51:39:B2
Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
Certificate issuer: /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Certificate serial: 05E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
Manifest number: 05BA
Signing time: Sun 04 Oct 2026 23:08:46 +0000
Manifest this update: Sun 04 Oct 2026 23:08:45 +0000
Manifest next update: Sun 11 Oct 2026 23:08:45 +0000
Files and hashes: 1: rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl (hash: lFUeC8VQjNu04+H1An6YhAIrFwEj4IrnjRHh4QZc4mo=)
2: B016290E2CE211EC8664D47EC4F9AE02.roa (hash: iLVpCVYt7sy9tIx2+b5M7I5TqO86ZWOETbgy8F8EJfQ=)
3: AEFA3DD02CE211EC8664D47EC4F9AE02.roa (hash: JNyT3x6YheDgHZgSUgnImzYieLl4IVAjDWgWqSgPfwM=)
4: 14172F4C264311EEB0342B45C4F9AE02.roa (hash: sXfr6MK5s8L5tnlWz2X8bnmUDGi52YnjjkGY/998Hzg=)
5: AF91ADB42CE211EC8664D47EC4F9AE02.roa (hash: iu4wDFeMIY7/bQ9J/tfUOATlPlHEokNa5kKy6FcUF3g=)
6: 8C2F1C96367F11EEB689C243C4F9AE02.roa (hash: iD4z83gv4V1v8hV/7hEKQMfQDnDofzsm6hDRN35kLlk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 23:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1506 (0x5e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A85A8, serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Validity
Not Before: Oct 4 23:08:45 2026 GMT
Not After : Oct 11 23:08:45 2026 GMT
Subject: CN=6ac2dc7e-477e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ff:a9:a3:2a:1e:b1:16:77:54:6b:84:c3:ff:
9e:9f:37:de:9b:70:51:81:4f:b1:04:59:30:88:2f:
4f:9d:8d:a7:46:2b:77:46:11:d9:40:ae:b6:4a:7c:
f6:2c:0f:5e:26:d9:3e:f1:c4:88:36:91:4e:ef:96:
a6:5d:eb:ff:e8:d7:b7:4a:bd:0c:3b:41:d3:53:b1:
07:a4:70:97:fc:1d:3d:a0:b1:b6:df:7a:2a:e2:0d:
fa:7b:32:ac:40:d7:d4:7a:d5:38:c6:62:20:45:66:
8c:0f:92:5f:a7:1b:0a:f6:26:4c:5c:e0:58:66:1e:
21:47:a2:3d:af:81:b8:7f:eb:45:07:91:2f:97:8a:
0f:ce:e3:f4:69:b1:9c:a4:08:7c:02:28:6b:a0:1c:
d9:e7:d2:e3:31:11:7c:d5:5b:54:22:f7:f0:20:15:
2e:2c:04:87:99:42:c6:c0:b6:64:b8:a9:6b:21:f7:
de:5f:d0:c6:c8:db:9f:96:cc:f7:6c:37:e5:2c:0b:
2f:1f:0e:51:b2:b1:e2:e7:7e:02:c9:f5:46:59:68:
fd:84:9d:8f:91:89:22:68:f9:23:88:19:b1:be:16:
0e:3b:68:58:05:95:09:97:3f:e7:14:94:4a:e8:67:
8a:a5:0d:f4:a9:c8:16:ac:15:77:b4:a7:7b:cd:83:
f3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F5:DA:1F:73:93:1F:DA:BC:E0:B6:F4:1F:B5:6B:C1:73:51:39:B2
X509v3 Authority Key Identifier:
keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:6c:53:f7:1d:4f:ac:0a:da:91:b5:42:43:7c:2f:5b:3d:32:
3e:64:6e:b6:e7:d3:47:73:b7:aa:7d:fd:5b:08:69:d4:5e:52:
24:20:ed:93:9e:bc:1d:44:30:1c:b1:d6:48:21:44:b2:6c:d2:
08:6e:20:64:78:6b:4e:bc:49:be:95:17:24:02:86:c0:3b:5f:
bb:ae:c4:5e:2f:3f:fa:7c:98:00:48:84:1b:ca:cc:ae:2e:f3:
dd:16:59:3f:04:3c:c6:5d:60:6c:82:33:4b:13:82:14:4c:04:
a9:07:3f:01:03:8a:3a:14:da:3a:68:0d:70:80:27:ba:d7:40:
46:af:4a:f4:50:25:16:e9:ab:01:9c:0c:e4:cb:2e:5c:e0:5d:
c7:bc:b7:06:44:e8:02:7b:00:d5:3c:a7:8f:70:62:ec:c7:29:
80:08:5f:7c:a5:23:9d:85:ea:77:b4:2e:c6:d5:60:98:e1:35:
61:3f:eb:08:a3:ff:39:eb:ad:52:09:8b:e9:84:f2:e1:e3:c8:
c0:4c:38:39:11:2d:fe:8a:df:ba:94:63:94:c0:52:fa:22:1d:
74:b7:04:ae:71:5e:a5:8c:c2:92:a0:5b:34:60:7f:2f:a9:6a:
62:c1:5b:8b:b9:ad:75:51:57:ba:38:46:ae:82:a8:ca:4a:df:
4b:68:01:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:11:05 2026 by rpki-client