
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
File: rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft (raw, json)
Hash identifier: +V+6HWoitjK6y6uYhhPcWNZUn9M2Nxh47izv7qlF3mc=
Subject key identifier: 93:B1:AC:65:38:70:4E:35:3C:A7:67:DF:65:02:89:2C:8E:19:18:F8
Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
Certificate issuer: /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Certificate serial: 0578
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
Manifest number: 0555
Signing time: Tue 24 Mar 2026 23:06:27 +0000
Manifest this update: Tue 24 Mar 2026 23:06:27 +0000
Manifest next update: Tue 31 Mar 2026 23:06:27 +0000
Files and hashes: 1: rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl (hash: 0voNHZ3raYhayf6q6ikyCKp4hdvH6YjnKJCTOgWDRDo=)
2: B016290E2CE211EC8664D47EC4F9AE02.roa (hash: iPlR9XSPR98xGGjjpYDVt+BN1ba76Ec0RZ0BPLrHZc0=)
3: 8C2F1C96367F11EEB689C243C4F9AE02.roa (hash: Iwa49PUpt2IaXfB65d55eo1rSTd0Z2R7AB96bUVn1x4=)
4: AEFA3DD02CE211EC8664D47EC4F9AE02.roa (hash: YN95xNIiCMWNGdl4rk75ApRqVC/9aQWMU1hl+gidJAM=)
5: AF91ADB42CE211EC8664D47EC4F9AE02.roa (hash: 5IBjur6W7h11nvSC9C3ig6x1AZlsiyawRHY054gkkvk=)
6: 14172F4C264311EEB0342B45C4F9AE02.roa (hash: G7J4NmvkxVUmCKOieqCt0qhLZaViU/M0n2XmU2IN4yw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1400 (0x578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A85A8, serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Validity
Not Before: Mar 24 23:06:27 2026 GMT
Not After : Mar 31 23:06:27 2026 GMT
Subject: CN=69c318f3-d8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:e4:1b:f1:be:7a:38:75:0b:e4:8c:15:26:
0e:bf:cc:a6:0d:65:69:8a:bb:88:ba:10:84:fd:2c:
68:e1:b6:32:c5:dc:76:0d:57:40:43:0c:c6:a3:32:
e2:8a:fd:7e:67:ca:6c:50:67:9a:19:8f:02:f4:96:
bb:ee:87:1c:4b:00:f2:51:bf:73:0a:03:9d:47:46:
89:7c:20:5a:5a:1c:3f:c0:fc:72:bd:aa:17:2b:b9:
4d:bd:ac:b9:58:1b:39:f1:7f:45:9e:fb:2d:f8:26:
99:71:fc:ea:92:16:e6:c8:0f:9a:8d:94:6a:43:09:
0e:a2:e0:04:f7:91:78:26:e3:50:4e:1d:0f:29:f3:
af:01:f0:cf:4c:d0:82:01:55:07:88:1f:c0:f4:98:
66:00:33:0b:28:ff:b5:bb:2d:72:d1:8d:8e:6e:23:
61:8c:1b:4e:fe:e8:7c:0e:be:62:85:f0:da:65:7e:
8f:9d:9a:53:30:8d:31:66:09:81:98:7b:46:a4:d7:
ca:c9:62:88:c9:8d:53:20:ee:35:ed:e9:a9:4d:0e:
6d:d8:5b:44:e4:23:f0:56:d9:69:eb:7a:6f:bc:85:
4a:20:e5:12:aa:33:14:6f:71:90:98:c4:77:cf:4c:
50:00:c1:f1:73:5e:cc:da:c3:ff:6a:82:0a:ca:70:
86:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B1:AC:65:38:70:4E:35:3C:A7:67:DF:65:02:89:2C:8E:19:18:F8
X509v3 Authority Key Identifier:
keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:5e:fd:c0:97:dd:9a:15:b5:c5:07:0a:8f:ce:5a:a6:6e:b5:
19:0e:01:70:58:d2:80:6c:7a:c5:14:86:60:59:b4:14:e5:cc:
f7:be:3f:a1:61:be:d1:29:84:d4:59:21:af:34:e9:84:b8:38:
94:36:be:08:2c:fd:6d:0d:c9:24:db:65:7f:b7:53:fe:e6:5f:
64:19:be:39:aa:e8:31:24:f3:37:55:52:a2:a9:fa:8d:85:8d:
e2:9e:20:98:12:57:f1:be:29:02:15:cb:91:96:2e:4a:90:5f:
80:99:56:1e:f7:40:93:c2:76:dd:89:21:c3:b8:38:12:51:db:
32:32:af:08:a9:d5:4b:9b:4b:f7:0d:06:34:fc:00:83:ff:34:
da:bb:d5:e8:b6:88:be:8e:a6:5e:30:0c:99:7c:36:34:8b:d1:
88:12:70:fe:1e:ad:1c:52:5c:19:eb:63:ed:ef:91:59:f8:f1:
13:b5:7c:c6:a0:13:e9:c7:ad:f9:cf:aa:8b:d3:c0:ea:78:d0:
e0:12:64:2f:eb:5a:05:58:c3:4d:3c:3e:37:27:5d:9a:ca:09:
67:5f:87:54:ae:2d:7d:8f:7a:4d:00:ff:38:87:8b:26:3e:e5:
2b:1e:75:d8:65:2e:dd:3e:89:28:d5:53:2d:23:e0:7d:2d:e1:
c9:a9:e3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:27 2026 by rpki-client