
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
File: gpROaqVxwOs14nkbwVlvdyd6cyQ.mft (raw, json)
Hash identifier: lwgjageH+HlKEH4Yn3egSm6+mR7M/XhjaWht3bEW6Ag=
Subject key identifier: 8C:F5:5F:B4:95:BA:8C:BD:E7:CC:A3:69:9D:DE:6A:16:FC:F6:0B:6D
Authority key identifier: 82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24
Certificate issuer: /CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
Certificate serial: 02BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
Manifest number: 029A
Signing time: Thu 21 May 2026 01:41:17 +0000
Manifest this update: Thu 21 May 2026 01:41:16 +0000
Manifest next update: Thu 28 May 2026 01:41:16 +0000
Files and hashes: 1: gpROaqVxwOs14nkbwVlvdyd6cyQ.crl (hash: e7U5UtsY+0+5mCGKO+FprHnhyaK9mfyCJciHUw7cqrQ=)
2: 5DB7C89AF25E11EE9239B009C4F9AE02.roa (hash: qF8UQpduJURSSws6qaTkNhteNuCF3Xv0DEEsWe94W2k=)
3: 429AFADCF25E11EE9E1B8A09C4F9AE02.roa (hash: Av4mHmkvx3iYn7v4H7bW4jhBpHBzklQ4N3gttmKh3/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl
rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:41:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 703 (0x2bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE9CC, serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
Validity
Not Before: May 21 01:41:16 2026 GMT
Not After : May 28 01:41:16 2026 GMT
Subject: CN=6a0e62bd-2acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e3:4a:8b:75:04:6a:88:ba:8c:60:21:6b:38:
a6:f1:dd:be:9a:64:a7:cb:f9:8b:a7:5e:a2:88:91:
80:67:d3:37:40:2a:1b:19:9e:69:59:c3:9f:30:16:
f5:c7:1a:13:8a:c4:1d:b1:8c:f2:3a:37:0f:d4:ff:
3b:4c:0f:b1:46:c1:e3:68:f4:6c:81:d7:83:00:2f:
82:fe:ba:52:51:74:fb:64:cf:e5:a7:fc:62:bc:8d:
20:af:f0:b6:4b:ed:6c:c8:04:24:59:18:b2:93:67:
a4:89:45:f7:04:36:da:75:03:7d:88:74:f6:4b:7e:
0e:93:92:f9:83:24:a7:02:65:43:9f:76:54:b7:2b:
21:8d:57:a0:64:91:21:cc:94:97:44:10:44:45:ea:
4d:36:b5:a5:a6:a6:6e:da:41:1a:6c:b1:8e:ec:27:
68:9e:53:7f:e6:42:ed:2a:6d:15:46:0b:66:e1:24:
77:36:da:37:cc:40:d9:b7:7d:ee:f7:5a:a6:8d:68:
49:a8:9d:be:dd:6d:2f:4f:50:5a:0a:a5:4b:65:23:
4f:e2:17:13:8d:28:43:16:b3:9c:4f:4d:b2:40:51:
5a:80:21:e4:16:af:fc:92:e6:e0:9c:83:5b:ea:46:
96:24:f2:25:22:b4:96:74:ac:39:11:17:74:18:dd:
22:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F5:5F:B4:95:BA:8C:BD:E7:CC:A3:69:9D:DE:6A:16:FC:F6:0B:6D
X509v3 Authority Key Identifier:
keyid:82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:51:be:06:72:e6:87:41:67:eb:67:02:79:4e:e7:68:9e:2b:
13:68:6a:5b:7a:d8:70:ae:22:a9:ee:cf:c7:76:ae:22:43:5e:
3d:3d:9f:87:5d:07:41:4c:51:d9:c9:d6:50:af:20:2a:3c:ba:
16:4d:01:73:e2:92:32:c7:25:9b:b4:7c:bc:ea:40:88:5c:96:
71:46:f4:9f:58:79:4c:7c:9e:75:19:d6:dc:15:1c:a3:86:c4:
8a:b8:57:71:a6:0f:b8:5f:59:80:54:7d:58:df:dc:85:3c:e2:
65:86:e2:21:df:8d:2d:37:ae:83:0e:83:51:d1:29:6e:d4:1c:
aa:b3:31:b3:ed:92:af:28:92:b2:e6:df:10:35:fb:f7:d5:f5:
91:96:84:50:fb:06:9c:f8:8f:c5:88:8f:a3:c8:8f:10:b2:18:
2c:3b:80:a7:8c:9d:ba:43:2d:ea:7d:26:fc:fe:0f:21:f0:e0:
f8:ff:e8:41:9a:9f:5d:4f:f2:d6:1d:ab:56:82:fa:1a:6a:fb:
4b:5d:4f:a7:c3:fa:84:ed:4c:22:ff:99:bb:00:87:68:cd:88:
45:d0:6b:d7:8c:47:00:af:73:88:8f:fe:5d:15:6b:cb:31:a2:
1c:5c:e9:b6:38:04:71:07:6a:87:be:4d:f0:55:c0:42:07:88:
eb:78:6b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:27:47 2026 by rpki-client