
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
File: gpROaqVxwOs14nkbwVlvdyd6cyQ.mft (raw, json)
Hash identifier: ZyjnhkeP4O+xOCpSvvTeKufW7SUZYnKXJUnl7ZjPg84=
Subject key identifier: 2D:2E:69:2B:C5:89:66:D1:80:D4:31:BA:5E:5D:53:71:EC:C1:03:E6
Authority key identifier: 82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24
Certificate issuer: /CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
Certificate serial: 030F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
Manifest number: 02EA
Signing time: Tue 27 Oct 2026 01:08:19 +0000
Manifest this update: Tue 27 Oct 2026 01:08:19 +0000
Manifest next update: Tue 03 Nov 2026 01:08:19 +0000
Files and hashes: 1: gpROaqVxwOs14nkbwVlvdyd6cyQ.crl (hash: 5IuTQ5Bba6XzyYPtm0yc2H6+t6nNvZK+NVNr62ayV/g=)
2: 429AFADCF25E11EE9E1B8A09C4F9AE02.roa (hash: Av4mHmkvx3iYn7v4H7bW4jhBpHBzklQ4N3gttmKh3/U=)
3: 5DB7C89AF25E11EE9239B009C4F9AE02.roa (hash: qF8UQpduJURSSws6qaTkNhteNuCF3Xv0DEEsWe94W2k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl
rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 01:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 783 (0x30f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE9CC, serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
Validity
Not Before: Oct 27 01:08:19 2026 GMT
Not After : Nov 3 01:08:19 2026 GMT
Subject: CN=6adff983-2d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d3:e3:76:a2:bd:ed:3d:25:65:56:68:93:5b:
ab:42:3a:db:f8:12:43:a5:bd:f8:a8:9f:cc:c3:fb:
a9:9d:00:dd:56:60:44:62:14:48:86:2d:8f:4b:11:
4a:24:4c:33:fc:8c:1c:d1:ce:df:7b:87:f4:f6:a1:
4e:84:be:f2:6f:94:b4:1c:d1:6f:c0:de:ec:06:27:
0b:ac:29:fd:4c:ec:ce:ed:6a:d3:6f:f3:3c:dd:5b:
c7:5a:be:95:f8:48:86:02:b1:e7:38:13:c5:50:16:
49:c5:ea:53:75:a7:62:aa:ae:86:36:aa:8e:60:9b:
f9:a9:16:1f:e3:f1:82:f9:52:a6:2f:51:15:d6:8b:
8c:13:dd:5e:1a:81:8b:26:79:7a:86:dd:44:af:ff:
24:3d:24:13:39:b8:bc:1d:5c:d0:80:71:7d:20:33:
fc:5b:8c:8c:9f:a9:b0:05:66:3e:ad:9b:49:b0:0d:
7f:eb:2f:eb:ed:90:32:d2:ee:c0:f7:1a:79:4d:23:
8c:80:5d:82:8c:5e:4b:86:6a:66:a0:68:09:45:e9:
4a:5d:19:e2:80:0a:c5:ea:ff:c8:dc:65:de:63:ab:
88:42:fc:f1:e6:b7:29:c6:82:a4:8d:6e:07:c0:52:
b7:b5:34:d1:45:40:97:16:1f:4d:c1:59:f7:8b:e0:
57:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2E:69:2B:C5:89:66:D1:80:D4:31:BA:5E:5D:53:71:EC:C1:03:E6
X509v3 Authority Key Identifier:
keyid:82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:19:7a:5e:19:92:18:a9:43:01:76:ab:e0:d7:07:96:f7:26:
67:96:08:9d:48:4b:c6:88:3e:96:3e:4c:a4:46:a1:cb:9a:c3:
95:de:9f:56:9e:f7:46:18:9c:70:7b:bb:25:0c:1d:60:9e:4c:
15:56:4c:39:c1:6c:81:ce:63:82:67:b9:4c:05:98:34:43:11:
94:a2:41:c7:21:ed:fd:4e:3f:1e:0a:8d:d7:90:9d:9d:55:66:
dc:d9:92:8b:aa:9a:7d:cc:06:e2:1f:4c:94:8a:34:74:4c:40:
83:cd:45:3a:56:18:35:8c:e5:9b:61:d9:4e:5b:ba:e7:61:45:
df:72:6b:ce:68:96:0a:b5:2f:96:0a:09:f0:25:b1:92:f2:66:
de:a3:ca:e9:cb:f2:cf:c0:02:d5:b0:82:e3:07:a7:d4:50:0d:
06:90:7f:c6:37:35:7d:2d:9b:ce:60:b9:87:e1:a3:16:84:89:
a6:bf:4e:cb:01:f7:62:f1:7c:a9:ba:69:40:95:81:ae:ab:56:
c7:16:05:48:d1:6d:16:3f:e8:4c:a6:60:c6:b9:61:42:54:1b:
84:e1:f8:a9:34:97:86:7e:2d:56:2d:92:78:eb:a5:89:ac:74:
37:c2:15:00:f9:1f:b5:f0:57:9f:d2:92:27:63:f3:a1:ee:58:
1c:05:6f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:42:23 2026 by rpki-client