
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
File: gpROaqVxwOs14nkbwVlvdyd6cyQ.mft (raw, json)
Hash identifier: rWKyG7eKzMICy5YurtR1Gs9sNTukaLtEph3PYjTKMg0=
Subject key identifier: DC:AB:EA:21:B8:4D:7A:67:A9:84:11:AE:12:4F:06:9F:6E:C0:76:2D
Authority key identifier: 82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24
Certificate issuer: /CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
Certificate serial: 02A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
Manifest number: 027D
Signing time: Wed 25 Mar 2026 01:19:20 +0000
Manifest this update: Wed 25 Mar 2026 01:19:20 +0000
Manifest next update: Wed 01 Apr 2026 01:19:20 +0000
Files and hashes: 1: gpROaqVxwOs14nkbwVlvdyd6cyQ.crl (hash: t043dJKgikgdItaKNN4EIpkzU/P8yaerxWHhXZ2DDF0=)
2: 429AFADCF25E11EE9E1B8A09C4F9AE02.roa (hash: Av4mHmkvx3iYn7v4H7bW4jhBpHBzklQ4N3gttmKh3/U=)
3: 5DB7C89AF25E11EE9239B009C4F9AE02.roa (hash: qF8UQpduJURSSws6qaTkNhteNuCF3Xv0DEEsWe94W2k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl
rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 674 (0x2a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE9CC, serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
Validity
Not Before: Mar 25 01:19:20 2026 GMT
Not After : Apr 1 01:19:20 2026 GMT
Subject: CN=69c33818-9cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:9a:dc:e6:2d:10:82:65:b3:b3:82:d0:4d:
2c:9c:9c:a3:f6:e8:cd:46:f9:f7:17:b9:4e:11:33:
91:90:a1:43:96:8d:dc:44:34:eb:45:17:bb:18:a4:
0f:6d:96:49:8e:c1:05:2d:be:a8:1f:5d:9a:fc:6d:
5b:4e:d9:4e:f3:8e:24:c5:0e:12:53:b0:e2:95:b6:
6b:7e:d9:8e:75:39:cd:2c:45:ef:a3:b8:e8:8c:22:
5a:e6:00:44:5b:9d:cb:7b:2e:43:67:cd:8f:ea:fe:
74:09:6a:0d:5e:fd:c1:07:e8:17:ba:76:5a:e9:1d:
19:9b:5b:c6:af:28:f0:71:32:11:ab:7a:3b:6e:9f:
30:20:6d:c1:bd:14:5a:75:1d:b5:55:76:65:ed:dc:
bb:fc:ce:cd:11:a1:27:dd:d1:f5:b1:3d:40:a5:47:
b5:8e:da:d5:9d:d0:64:25:d2:4d:a3:72:f3:7f:25:
5b:94:ba:02:15:5b:1c:c5:d7:54:88:b4:f1:8b:87:
f7:cb:26:09:56:60:6c:80:f7:40:b1:3f:9d:30:33:
b2:04:6c:e1:c5:a3:dd:3c:d8:e7:36:8a:03:68:ad:
a8:5d:82:20:a4:92:80:93:49:51:d6:96:7e:ee:b2:
04:0e:6c:6c:ac:94:a5:29:27:10:2f:c1:c3:f3:31:
cf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AB:EA:21:B8:4D:7A:67:A9:84:11:AE:12:4F:06:9F:6E:C0:76:2D
X509v3 Authority Key Identifier:
keyid:82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:2c:77:53:d6:4f:22:1e:0d:23:4d:5f:1c:a6:70:f9:06:39:
3a:6b:cb:42:d8:d1:88:1c:50:ad:ca:67:43:50:53:ea:db:82:
69:b8:70:7e:cf:0a:70:76:a0:79:16:c2:73:56:0c:25:d1:6d:
84:22:bc:67:17:9d:ff:b7:f9:51:71:b1:ee:ac:18:80:be:43:
7e:95:1a:25:4c:3f:b3:20:33:a5:90:6f:76:b9:d7:cb:ee:5d:
7c:96:f3:58:38:6e:27:67:dd:d2:93:91:27:b3:a8:dd:7d:56:
24:42:99:98:5b:54:f2:94:6b:1e:2d:06:92:79:f5:99:88:37:
df:a8:f1:3e:3e:f7:01:aa:b1:e9:6d:1e:a5:07:d5:e8:99:68:
c4:aa:23:fc:39:75:10:e8:ea:af:8c:1b:ba:56:75:29:6e:12:
4c:20:8c:a0:22:9f:f7:6f:3f:e8:30:72:e6:9a:ba:41:b7:24:
cf:65:5b:3b:76:17:3d:86:c9:d5:5f:50:12:2d:e2:17:8e:17:
4d:c3:e6:a8:68:b6:38:1d:43:04:b1:df:7a:a1:dc:cc:17:b6:
79:d8:d4:d8:b1:2e:49:d4:57:d6:e6:b2:c0:f9:c7:1d:b4:b3:
2c:49:18:40:99:a0:ec:69:53:f3:e2:60:f9:56:f9:95:1c:a6:
50:82:8b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:51:35 2026 by rpki-client