
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
File: kROhaGm30B54nuCf4m5q-jfPPkc.mft (raw, json)
Hash identifier: hgkMfa6Nl3xIpI1hpRoMPLU9hfpn7Rs4nkjN5IAegbI=
Subject key identifier: 43:8D:0C:85:09:DF:D5:56:32:36:FC:78:EB:56:7F:2C:C9:D0:26:6C
Authority key identifier: 91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47
Certificate issuer: /CN=A91E3814/serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
Certificate serial: 055A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
Manifest number: 054C
Signing time: Wed 28 Oct 2026 23:40:52 +0000
Manifest this update: Wed 28 Oct 2026 23:40:52 +0000
Manifest next update: Wed 04 Nov 2026 23:40:52 +0000
Files and hashes: 1: kROhaGm30B54nuCf4m5q-jfPPkc.crl (hash: LxkrkhOUjUF2Ep8csPp8ML8+UZbcEQAY03Tuo/xiukE=)
2: 8628E1BA210611F082BE7E10C4F9AE02.roa (hash: 6GOb57PaiaApAF0iXlJZz9FHSsE1JEzbnMGnVso/Dyc=)
3: 2F74D644ABC711EF9CD3CE81C4F9AE02.roa (hash: n3UNJ83TlZkHD6+TDV3hr4HHxdPAJoRzYmt6WvpCYj0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl
rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 23:40:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1370 (0x55a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3814, serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
Validity
Not Before: Oct 28 23:40:52 2026 GMT
Not After : Nov 4 23:40:52 2026 GMT
Subject: CN=6ae28804-d1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:80:8f:78:f5:f5:b8:1b:56:bf:82:10:09:28:
fb:fc:2f:08:c5:a0:92:10:bd:68:7f:53:59:93:c8:
62:db:ff:a5:3b:e0:1f:5e:ad:b9:42:a5:c0:25:94:
78:6c:16:14:ac:a6:9c:c6:c8:c7:2d:7b:2a:65:d2:
f1:0e:a0:54:62:22:9f:e9:1c:48:47:bf:6b:87:09:
ce:54:fd:eb:1c:3e:4c:60:41:11:30:b8:31:bd:5e:
89:19:f5:99:e0:c0:1e:58:7f:31:32:a1:32:f5:f5:
80:b3:a1:13:b6:73:9d:84:72:d8:3d:a0:e2:d2:bd:
ce:e2:d0:f8:be:39:d6:2f:87:ea:0c:19:45:cc:0c:
e7:ce:7c:7b:c4:36:e4:d3:ab:c7:fc:01:7b:46:84:
59:04:1d:37:82:0a:df:b2:19:75:92:f9:1d:ff:e2:
64:62:55:b5:35:af:3a:b3:3e:23:19:e5:92:3a:08:
d6:2e:37:d7:26:10:92:a5:07:aa:83:8c:89:2b:31:
57:32:a5:f4:55:43:e8:2f:9d:46:8c:72:9e:06:98:
aa:8c:7d:d7:27:2d:bc:bd:c5:8e:87:02:4e:46:7f:
34:c4:1d:f1:86:7e:8f:af:8e:44:05:0a:3a:33:f2:
f9:74:3e:17:b0:85:29:5a:0c:8b:d0:af:9c:0f:08:
29:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8D:0C:85:09:DF:D5:56:32:36:FC:78:EB:56:7F:2C:C9:D0:26:6C
X509v3 Authority Key Identifier:
keyid:91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:88:bb:e8:be:7e:6a:64:5e:fb:f3:5f:35:23:88:8a:ce:a2:
35:ad:16:36:05:f7:3c:cb:d7:f1:0c:1d:81:ea:68:e3:3c:df:
39:62:e7:75:09:84:2a:2b:d9:46:b0:b3:f9:07:09:8e:40:f2:
cb:75:1a:3c:e9:8f:f9:b1:0d:8c:7e:f9:a9:27:05:77:6e:ab:
2c:d9:9a:81:05:b1:e0:0f:a8:d7:d8:73:56:4c:97:c6:32:a1:
de:5d:21:f2:c8:0d:e7:4f:65:be:d5:6e:bc:a1:52:95:8d:dd:
8f:fc:7c:a9:c3:36:a0:db:e5:4e:3c:af:b3:d0:ac:84:fc:53:
8d:03:fd:21:a2:12:52:e5:de:5d:e9:6b:c5:15:f5:70:e9:f6:
00:d2:d6:d3:8f:64:33:c2:79:77:f2:14:69:b9:70:7b:37:9f:
9e:e7:c3:b7:8e:fd:a2:04:34:3a:a8:5a:ad:c8:5c:5d:e7:64:
a4:be:d6:96:35:4c:f0:f6:61:96:fa:80:77:12:3c:44:88:76:
bf:1d:e0:8c:7f:7e:9d:fd:4e:11:fa:bd:97:a2:0d:df:aa:e1:
2b:e0:b9:b4:25:e8:a9:e5:65:a7:c1:5e:f5:c2:9d:95:1c:83:
48:e8:b5:8a:8c:99:70:0c:d9:cb:25:f9:15:cd:01:a1:58:f1:
b2:e7:d5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 08:00:00 2026 by rpki-client