
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
File: MOCAPeumAKyakmRMlveKjohdfFA.mft (raw, json)
Hash identifier: ptzHLZNrs6dhcGA56+34qWCnK4LsD07irwhHbDHZ+iw=
Subject key identifier: 58:FE:4C:1E:4A:D1:FC:9A:1D:68:7A:BA:52:8D:09:4F:0C:16:B6:67
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Certificate issuer: /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial: 061D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
Manifest number: 05FD
Signing time: Thu 16 Jul 2026 23:28:53 +0000
Manifest this update: Thu 16 Jul 2026 23:28:53 +0000
Manifest next update: Thu 23 Jul 2026 23:28:53 +0000
Files and hashes: 1: MOCAPeumAKyakmRMlveKjohdfFA.crl (hash: brlpQSupQSpCO1/bubL3D4JGoXLrKNUxL5tDuS/YQMI=)
2: 04A930F6629211EE90D5AD6CC4F9AE02.roa (hash: JO9xwTDX2VEkQyhxcJmsHR0urhQbQnXAugWcM/cCSHY=)
3: 7A532A308E1D11EE9CC5535CC4F9AE02.roa (hash: tqfm8VN716zf1zv8pnoSL1lDbOKXA/4mIuo6tNqb0hg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 23:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1565 (0x61d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CEE3, serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Validity
Not Before: Jul 16 23:28:53 2026 GMT
Not After : Jul 23 23:28:53 2026 GMT
Subject: CN=6a596935-998d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:95:4d:e6:b1:09:50:31:67:d7:e0:b0:96:52:
16:67:53:bd:47:7f:8c:97:70:5a:d5:bc:66:58:a6:
19:1a:a3:c1:6e:90:45:2d:17:d0:9d:f8:6c:64:6d:
5d:c3:a3:0d:73:36:81:77:a3:d2:b3:5b:f9:a4:23:
4d:5a:0d:6c:48:0d:a4:7f:e4:46:06:65:96:9c:61:
18:e9:92:0c:6a:9b:c3:3f:36:3c:24:b3:d2:1d:88:
90:1e:48:1e:ae:74:c6:9d:fc:d2:09:a9:99:c0:d9:
b2:04:8e:1b:55:d4:6f:a1:07:2f:b1:24:36:e0:09:
e0:af:67:5e:dd:1e:6d:07:52:91:92:ac:a7:26:90:
02:ca:5f:2c:a2:30:2b:1f:55:39:f4:43:33:02:29:
e8:cf:b9:af:74:44:44:fa:11:b1:56:2d:ae:36:30:
63:d4:a2:e3:13:26:b0:ba:17:06:92:ef:b3:ce:65:
b2:bb:9c:99:9f:25:b7:7d:85:b7:bb:96:e6:5d:a7:
d9:a0:5b:3d:83:9e:74:34:8b:d2:9f:2d:39:53:44:
48:0f:0e:b2:fe:f6:20:65:41:ae:bc:e5:35:d5:74:
97:6a:2e:2b:4b:ab:02:8d:aa:bb:fc:fc:76:33:bc:
e4:42:de:f9:6b:46:46:5b:e9:b8:5e:78:9e:7f:ae:
dd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FE:4C:1E:4A:D1:FC:9A:1D:68:7A:BA:52:8D:09:4F:0C:16:B6:67
X509v3 Authority Key Identifier:
keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:4a:eb:50:3a:0b:47:fd:67:cf:ba:e2:03:69:3f:cc:27:18:
74:71:79:7f:9b:6e:ef:c8:bc:97:c4:34:ae:22:1b:a9:24:fb:
94:e6:9e:8e:9c:e8:d1:74:b3:8c:ff:7a:7f:ff:6e:07:ea:10:
d2:27:e9:12:2f:c5:b8:0d:2d:2f:9f:e4:94:99:50:74:22:d5:
6d:5a:49:57:db:90:2c:46:09:8e:1f:c5:4c:64:6d:5e:af:56:
29:58:00:96:0d:b8:a9:fe:60:2d:13:8d:1b:aa:2b:58:8c:18:
05:56:51:28:5e:7a:04:e8:2a:54:d8:d4:69:30:64:ae:c8:be:
a3:41:af:ae:19:f0:79:8d:42:15:8b:4a:3c:05:16:0b:d1:92:
bc:48:5a:28:58:69:42:4b:18:f0:05:b7:06:70:02:08:31:9d:
50:7d:16:0e:86:48:44:d6:10:8e:9e:69:e5:73:e4:33:c9:ce:
84:a0:67:af:95:dc:26:81:05:81:17:cd:20:02:93:f6:a6:d7:
c5:ba:8d:b6:42:ff:da:6b:33:8c:1b:5f:a8:95:06:ad:f0:c1:
be:e9:7a:49:da:6b:57:b2:c8:70:57:ca:89:fb:1f:a7:ec:ed:
01:b6:4b:78:49:16:64:07:86:1b:a9:a4:a1:11:1c:ec:dc:1d:
3f:32:b6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:29:52 2026 by rpki-client