
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
File: kROhaGm30B54nuCf4m5q-jfPPkc.mft (raw, json)
Hash identifier: 758QDINndN/uycDKZNKUbeA9ye6IHfOxk1jqaeDO5KA=
Subject key identifier: 4E:B4:46:CD:1F:7C:DD:2A:1E:23:CC:47:1F:70:0F:50:40:C7:C4:71
Authority key identifier: 91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47
Certificate issuer: /CN=A91E3814/serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
Certificate serial: 0513
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
Manifest number: 0505
Signing time: Thu 11 Jun 2026 01:49:47 +0000
Manifest this update: Thu 11 Jun 2026 01:49:47 +0000
Manifest next update: Thu 18 Jun 2026 01:49:47 +0000
Files and hashes: 1: kROhaGm30B54nuCf4m5q-jfPPkc.crl (hash: MgMawH5DgDf3syRKS4wM8ADJhp9OlKzuJMyzJOYu87c=)
2: 8628E1BA210611F082BE7E10C4F9AE02.roa (hash: 6GOb57PaiaApAF0iXlJZz9FHSsE1JEzbnMGnVso/Dyc=)
3: 2F74D644ABC711EF9CD3CE81C4F9AE02.roa (hash: n3UNJ83TlZkHD6+TDV3hr4HHxdPAJoRzYmt6WvpCYj0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl
rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 01:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1299 (0x513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3814, serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
Validity
Not Before: Jun 11 01:49:47 2026 GMT
Not After : Jun 18 01:49:47 2026 GMT
Subject: CN=6a2a143b-5db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:b5:99:24:c0:20:94:0f:c2:ec:b0:4d:46:
5c:be:05:9c:39:ad:94:b5:72:06:09:bd:9a:e9:b1:
82:7c:1c:97:c5:8c:7d:10:6f:09:32:54:20:95:7f:
98:1d:52:a6:4a:2a:51:14:7a:45:67:1c:72:1f:06:
dd:d7:9d:fa:19:27:d8:54:11:e5:f3:61:40:8a:af:
34:12:85:a2:cb:09:67:b1:36:9a:6f:1d:2b:bd:2c:
41:c3:75:fc:1c:05:45:df:8d:b0:31:31:fa:fe:0e:
b9:60:61:21:7e:5e:da:ec:49:07:c2:f9:55:2f:42:
80:1a:db:03:38:6a:fc:4b:9c:77:f6:c8:2c:0b:cb:
f5:0b:00:ac:34:04:c3:62:19:5c:88:7c:2f:c3:0f:
da:91:d4:02:d1:28:7d:19:fd:f6:5d:2d:9f:78:f4:
1b:02:1b:62:95:b5:d8:76:36:44:5c:de:47:14:71:
ab:9e:d9:64:66:8d:18:d6:2c:20:4c:7d:f4:6b:c7:
8c:4d:4b:4a:26:ed:1b:d5:db:18:ef:b0:7d:51:ff:
d1:31:20:9c:4c:1f:e2:f2:b7:03:51:27:0f:15:fb:
eb:fe:41:87:24:44:fd:2d:59:fe:1a:5d:91:b9:f5:
33:52:59:1e:a7:72:93:1c:93:75:19:4e:00:95:ce:
03:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B4:46:CD:1F:7C:DD:2A:1E:23:CC:47:1F:70:0F:50:40:C7:C4:71
X509v3 Authority Key Identifier:
keyid:91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:35:c7:d5:23:ce:9c:80:24:d7:18:e2:26:70:d8:4f:dc:0f:
50:4b:d7:35:a1:11:d5:ed:96:b3:85:35:ab:44:99:1f:94:2f:
22:14:62:cd:cf:7a:e5:c6:f4:31:59:49:ba:3a:6e:7e:d2:77:
8f:47:8f:cc:da:36:f5:58:8c:69:39:88:fa:e9:d6:f1:f8:e0:
d2:d6:34:46:4a:63:12:02:ce:b4:48:1b:c8:a1:03:15:da:69:
37:62:51:c8:8c:27:31:2c:2a:64:f6:11:7c:ce:81:16:c5:76:
56:30:6f:76:9f:7d:33:d5:25:c3:84:26:6d:f6:75:42:45:c3:
8c:ce:56:3d:be:aa:94:24:6d:5c:9e:72:a3:9c:75:b7:a6:5e:
2d:90:75:ea:f4:17:d2:2a:38:aa:a0:99:a9:9f:51:22:1a:0d:
1a:e4:4c:b9:7b:9c:ef:5c:52:8c:97:f7:2f:f1:69:32:8b:a0:
bb:b7:bc:10:18:63:d4:2a:b5:f2:3c:51:26:ec:23:49:53:9d:
76:d5:d3:2b:3f:d5:56:42:2b:4a:2e:d8:1a:a3:fa:7b:e6:fb:
6e:b7:85:e2:fa:b9:94:68:bd:1b:55:35:55:c8:9c:16:a0:9f:
75:68:f8:82:5e:99:35:e3:0a:87:2c:b9:c5:53:c2:31:81:ef:
92:fb:30:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 21:34:51 2026 by rpki-client