
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
File: kROhaGm30B54nuCf4m5q-jfPPkc.mft (raw, json)
Hash identifier: n0apB4GVYAu7xs27kK3b6WI4pmlQPZ96I6qkvWyLBt0=
Subject key identifier: 8B:A7:E5:0C:8E:7A:2F:8C:D0:02:B0:34:F6:9E:FA:99:D6:59:BE:38
Authority key identifier: 91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47
Certificate issuer: /CN=A91E3814/serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
Certificate serial: 0504
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
Manifest number: 04F6
Signing time: Tue 12 May 2026 23:51:28 +0000
Manifest this update: Tue 12 May 2026 23:51:27 +0000
Manifest next update: Tue 19 May 2026 23:51:27 +0000
Files and hashes: 1: kROhaGm30B54nuCf4m5q-jfPPkc.crl (hash: WEyxiH5J/cfeq6zFisOdAbhiMJJ7KdmsJvqzWGGEOgA=)
2: 8628E1BA210611F082BE7E10C4F9AE02.roa (hash: 6GOb57PaiaApAF0iXlJZz9FHSsE1JEzbnMGnVso/Dyc=)
3: 2F74D644ABC711EF9CD3CE81C4F9AE02.roa (hash: n3UNJ83TlZkHD6+TDV3hr4HHxdPAJoRzYmt6WvpCYj0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl
rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1284 (0x504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3814, serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
Validity
Not Before: May 12 23:51:27 2026 GMT
Not After : May 19 23:51:27 2026 GMT
Subject: CN=6a03bcff-6964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fe:18:21:f3:10:34:d3:94:a9:b6:8b:57:14:
df:e7:a5:81:0f:5a:19:b3:8f:6d:64:7f:c6:5d:03:
17:c0:16:1c:18:8a:27:1d:ce:20:b9:2f:ff:38:b7:
43:e8:a4:42:27:4c:73:55:38:25:86:d0:0a:71:c5:
82:eb:b6:c2:dc:69:36:8e:15:4d:89:6b:03:0a:dc:
4a:7d:f3:d8:e8:fe:ce:74:d3:05:b0:bf:9d:2b:09:
4a:15:e8:03:89:ed:45:bd:1a:af:10:a1:1e:e0:2a:
97:e2:72:f4:d9:25:0e:45:c1:a4:07:15:43:61:af:
aa:3f:0d:59:dc:8c:16:2c:6b:b6:77:90:36:4a:38:
b5:7c:18:e4:31:a6:62:8e:c6:4d:3b:33:00:cc:33:
3e:10:21:57:0e:16:55:1c:23:82:35:1b:0e:81:a5:
8a:28:d4:87:bf:c2:d5:30:99:2c:ee:0c:39:42:85:
22:95:e2:14:26:02:c1:b9:26:44:93:bf:b3:4f:60:
19:18:d8:df:82:01:db:e0:11:7c:d8:b3:e1:95:55:
e2:6b:7b:2e:01:b0:13:e6:65:35:10:e2:fe:34:b0:
42:5a:ee:35:a5:6e:7e:71:26:02:b5:0b:16:84:34:
15:c3:c0:44:63:05:69:b7:72:f7:f7:bd:55:46:53:
2e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A7:E5:0C:8E:7A:2F:8C:D0:02:B0:34:F6:9E:FA:99:D6:59:BE:38
X509v3 Authority Key Identifier:
keyid:91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:fb:0b:60:d8:8c:21:6c:f4:b7:42:ee:77:e9:82:73:8f:de:
f5:d5:0e:72:ad:b4:2b:45:ee:30:29:95:f6:90:11:e3:6e:db:
4f:b6:21:b0:ec:29:af:2c:82:cf:0d:bf:fd:61:f8:fd:8b:48:
a5:7e:aa:10:6a:28:83:37:f9:06:e5:c8:24:1f:52:8f:c5:f7:
b5:70:48:db:ef:0a:db:95:5d:30:5f:80:9d:b3:a8:71:92:7e:
5c:53:0a:2e:85:54:66:c3:29:3b:ce:da:25:5d:80:56:05:3c:
97:72:c7:3b:c8:12:ab:4b:c5:6b:54:93:d7:d2:48:63:6a:9a:
ce:4a:11:4d:42:c4:0a:b2:6b:76:52:ad:56:cf:ae:9b:f5:58:
86:b8:ec:ea:d3:58:dd:9c:50:26:90:d8:7d:a8:b7:82:83:ca:
83:b8:04:15:4f:7b:7e:d3:d8:06:c6:de:8b:b8:25:ad:e9:05:
66:1b:18:4e:0a:a7:42:0d:0e:42:a7:ec:6f:53:c7:a7:47:c4:
b4:ae:38:4f:bd:39:0e:62:50:a9:51:d6:78:7b:07:88:86:fe:
c3:2b:48:29:50:69:a2:18:b6:40:63:15:b5:ff:0d:15:8e:9a:
6e:cf:7e:61:37:48:78:ef:85:35:fb:d2:59:83:f5:6d:25:27:
cd:52:5d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:54:10 2026 by rpki-client