
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
File: MoQzhPrmr2wxduHfdOkIgdbZdZI.mft (raw, json)
Hash identifier: GwagsTZRrcJJUuxxRelE5oGOWzVK9d4r42ykMVNyapg=
Subject key identifier: FA:BB:87:32:E8:92:E4:89:11:BE:39:EE:03:DA:A5:8F:6A:BE:0C:5E
Authority key identifier: 32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92
Certificate issuer: /CN=A91A8666/serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
Certificate serial: 0AD5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
Manifest number: 0AB8
Signing time: Tue 06 Oct 2026 19:37:13 +0000
Manifest this update: Tue 06 Oct 2026 19:37:13 +0000
Manifest next update: Tue 13 Oct 2026 19:37:13 +0000
Files and hashes: 1: MoQzhPrmr2wxduHfdOkIgdbZdZI.crl (hash: UHrPdHNNHMK/lRiWJfvWUGl7Pb9xULq4QuhWYuFDvfo=)
2: CE7DA91A8C0911EAAFF6CD27C4F9AE02.roa (hash: tAcZwWZwhXU4QpEPlt2t2XMLszlvvkM98qyIqRR6Ejk=)
3: CF2E99C88C0911EAAFF6CD27C4F9AE02.roa (hash: 8uX/hlFjGe/V8LokTmcu8tEggMYCwiDilR7VyuWjQ5g=)
4: D02785608C0911EAAFF6CD27C4F9AE02.roa (hash: nPdlPveaGEn/o0RAhqipdNtydGVDIBxlaIUin+YvoPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl
rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2773 (0xad5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8666, serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
Validity
Not Before: Oct 6 19:37:13 2026 GMT
Not After : Oct 13 19:37:13 2026 GMT
Subject: CN=6ac54de9-25b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:63:46:b6:00:ee:42:62:a3:21:1d:95:85:78:
db:63:9a:c3:ce:d3:f3:c9:7e:aa:a8:3c:d6:dd:3c:
fb:41:90:bc:67:17:d8:da:2f:ec:5e:df:9f:7d:6f:
06:9a:52:4f:31:1c:30:3b:ae:e5:61:17:43:4c:5f:
2a:48:57:c6:9f:4e:d1:21:4b:b4:43:47:3d:ce:7d:
e1:63:55:05:75:b9:6a:2d:1b:9f:25:c9:56:1b:9b:
5a:bf:91:54:29:0d:a5:2f:53:e8:f0:52:45:7f:1c:
4e:64:62:f9:0d:c1:af:8b:a5:bf:44:59:fe:ab:e4:
52:2f:41:b1:c3:6b:a1:3b:3d:54:75:b0:c3:81:a1:
99:09:f4:d1:71:fd:0d:d9:d4:f3:18:3e:a6:94:63:
85:cb:15:6b:65:4c:fc:1f:7a:c5:66:fa:41:68:a9:
c7:f5:e1:23:3d:75:27:2e:9d:bf:b8:03:50:f0:d1:
71:2c:3a:25:7a:45:71:0a:91:2c:29:31:7e:2c:e6:
57:b3:27:02:3f:3d:ba:d5:b0:cd:87:91:77:46:93:
09:06:17:5a:2b:9e:3f:da:ed:f2:eb:16:ff:f5:40:
61:3a:52:28:a6:67:9e:03:b9:45:e0:fd:c8:42:d3:
c7:f3:06:ea:f0:76:48:73:41:f0:f9:0a:29:b5:38:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BB:87:32:E8:92:E4:89:11:BE:39:EE:03:DA:A5:8F:6A:BE:0C:5E
X509v3 Authority Key Identifier:
keyid:32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1f:78:57:39:dd:c8:92:7b:7e:6d:84:a8:47:b8:da:f8:1b:
eb:71:e9:e8:a3:d5:93:22:d6:e1:e1:cc:7a:48:67:d0:d6:13:
6c:c1:9e:9c:c0:93:68:f9:1c:54:47:ca:86:25:5b:5a:99:1c:
73:d7:2b:56:89:9b:2b:f8:dc:2a:03:d5:b0:0b:86:e6:ea:f1:
18:9d:6b:73:70:bd:23:b6:f5:c4:a5:03:91:6b:a4:92:ec:61:
f5:1f:ae:2b:04:6c:cb:01:d3:19:72:d2:14:a6:0d:3d:f6:ab:
3a:b1:ab:2d:60:7d:1f:82:ad:1f:de:b6:59:a5:e2:7e:07:e3:
0d:77:ea:d6:b4:84:93:02:81:18:ae:fd:3e:4b:6d:b5:93:5a:
d4:aa:10:ff:8e:c4:9c:7e:e5:35:de:53:82:50:7c:6a:7f:ad:
18:2f:02:44:e6:4a:75:47:9a:e3:22:e0:fa:96:6e:3a:7d:8f:
e1:d7:69:b8:fb:bb:e3:90:38:b2:58:2e:0a:40:1b:b8:13:66:
dd:5d:15:fe:4d:a6:94:80:1f:98:10:b8:cd:e8:5c:6d:51:d1:
d6:1f:38:d7:be:24:f8:f0:36:2f:e3:68:d7:a0:5d:d3:4f:14:
39:aa:9f:af:9b:a6:85:0a:bb:e8:29:d9:f6:0c:04:77:8b:b5:
ef:8d:68:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:53:37 2026 by rpki-client