
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
File: MoQzhPrmr2wxduHfdOkIgdbZdZI.mft (raw, json)
Hash identifier: G1y+8HRpW8rejh3ieD4gJvGScPzGQ4Yks3gjT3L2FBc=
Subject key identifier: EB:F5:94:45:A4:B5:B9:A9:5F:0F:AE:2C:CD:0A:F7:30:D3:32:A0:FA
Authority key identifier: 32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92
Certificate issuer: /CN=A91A8666/serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
Certificate serial: 0ABD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
Manifest number: 0AA0
Signing time: Thu 20 Aug 2026 19:29:19 +0000
Manifest this update: Thu 20 Aug 2026 19:29:18 +0000
Manifest next update: Thu 27 Aug 2026 19:29:18 +0000
Files and hashes: 1: MoQzhPrmr2wxduHfdOkIgdbZdZI.crl (hash: G+XVEJA6z+A8n1bfED0cwlzweSn8PQe7W6HayrDX4vg=)
2: CE7DA91A8C0911EAAFF6CD27C4F9AE02.roa (hash: tAcZwWZwhXU4QpEPlt2t2XMLszlvvkM98qyIqRR6Ejk=)
3: CF2E99C88C0911EAAFF6CD27C4F9AE02.roa (hash: 8uX/hlFjGe/V8LokTmcu8tEggMYCwiDilR7VyuWjQ5g=)
4: D02785608C0911EAAFF6CD27C4F9AE02.roa (hash: nPdlPveaGEn/o0RAhqipdNtydGVDIBxlaIUin+YvoPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl
rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2749 (0xabd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8666, serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
Validity
Not Before: Aug 20 19:29:18 2026 GMT
Not After : Aug 27 19:29:18 2026 GMT
Subject: CN=6a87558e-5ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:a1:d7:8e:f3:e3:a2:7f:64:bd:d1:87:3d:
e4:f2:53:8c:d6:12:2c:70:07:77:21:d0:64:a8:cd:
59:e2:05:4c:74:b1:c6:f5:f0:7b:36:2b:45:57:2e:
14:56:5c:35:bc:ed:52:bd:86:2c:69:57:75:15:c0:
64:fe:53:c5:f7:97:42:07:90:05:17:3c:b4:03:bd:
82:ca:c8:fa:e9:32:b2:de:e5:46:df:da:22:06:23:
77:cd:b3:ea:f1:ba:34:62:6a:9f:ae:14:84:c2:c3:
87:51:9c:d5:8c:71:80:c1:2f:11:f8:a2:83:53:35:
38:f1:03:db:5e:2f:27:f8:d9:c3:c4:f2:75:2a:d4:
48:91:ce:1f:a9:c7:ca:f8:38:3e:51:41:4e:75:3f:
25:10:46:79:a9:cf:28:fb:63:49:ca:29:9e:c4:3a:
25:49:bb:0e:ea:d9:e7:df:0c:58:5c:37:39:d7:57:
df:bd:62:3d:ca:fe:97:8f:c4:d5:b9:71:41:f7:f8:
45:d6:a2:6d:80:23:c6:67:90:6f:3c:98:63:6d:3b:
bd:c1:3d:c7:35:3a:e4:86:62:e8:30:4f:49:cf:92:
bf:4f:38:d9:7e:9a:a8:4b:65:ec:54:ac:31:88:7c:
7f:b5:56:84:3a:76:a9:23:f1:1f:b9:b0:44:44:9e:
e9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F5:94:45:A4:B5:B9:A9:5F:0F:AE:2C:CD:0A:F7:30:D3:32:A0:FA
X509v3 Authority Key Identifier:
keyid:32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:59:14:24:cf:0d:b3:e7:af:38:7c:cc:30:7e:01:27:8b:a9:
82:6c:2a:25:81:56:8c:7e:ae:08:25:3a:c3:ec:33:9b:ba:90:
38:a2:af:ac:f5:2c:42:9e:b9:84:e5:e6:e8:05:93:27:e5:e4:
ec:80:e2:ec:79:27:93:e3:27:b7:fe:48:b6:e9:64:35:fd:3f:
08:c4:8e:98:7c:ec:35:71:56:ad:40:dc:50:d1:1c:03:c2:0b:
b7:3b:4a:31:a0:5c:05:1a:aa:4e:b5:cf:be:e0:ef:81:f0:e7:
7b:58:8b:8d:b8:6a:eb:1d:ee:b9:25:ee:14:c3:59:2b:20:8d:
eb:fc:9b:e9:27:d8:d3:0e:0d:56:c5:38:8f:cd:ba:3d:31:89:
7b:e1:c5:d4:9d:c9:f7:24:30:3c:fb:68:c9:d3:25:6e:16:fb:
1a:61:1e:e3:70:2d:61:4c:7f:70:f8:ac:bb:5a:55:b6:36:87:
48:c8:d3:dd:47:71:65:9c:a0:7e:b1:21:ac:30:3c:60:a1:cc:
a4:12:25:87:20:16:e6:65:33:53:67:03:27:ee:be:84:34:dd:
41:63:bf:8a:d0:a8:c6:35:52:39:30:9a:4b:2d:52:1b:f2:12:
c8:53:c1:2b:ad:e2:b1:f5:32:70:27:b1:95:3a:27:b1:ee:16:
06:b2:7e:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg2NjYxMTAvBgNVBAUTKDMyODQzMzg0RkFFNkFGNkMzMTc2RTFERjc0RTkwODgx
RDZEOTc1OTIwHhcNMjYwODIwMTkyOTE4WhcNMjYwODI3MTkyOTE4WjAYMRYwFAYD
VQQDEw02YTg3NTU4ZS01YWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyPmh147z46J/ZL3Rhz3k8lOM1hIscAd3IdBkqM1Z4gVMdLHG9fB7NitFVy4U
Vlw1vO1SvYYsaVd1FcBk/lPF95dCB5AFFzy0A72Cysj66TKy3uVG39oiBiN3zbPq
8bo0YmqfrhSEwsOHUZzVjHGAwS8R+KKDUzU48QPbXi8n+NnDxPJ1KtRIkc4fqcfK
+Dg+UUFOdT8lEEZ5qc8o+2NJyimexDolSbsO6tnn3wxYXDc511ffvWI9yv6Xj8TV
uXFB9/hF1qJtgCPGZ5BvPJhjbTu9wT3HNTrkhmLoME9Jz5K/TzjZfpqoS2XsVKwx
iHx/tVaEOnapI/EfubBERJ7pSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOv1lEWk
tbmpXw+uLM0K9zDTMqD6MB8GA1UdIwQYMBaAFDKEM4T65q9sMXbh33TpCIHW2XWS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY2Ni82MjNDRDZFNDg0
RjMxMUVBQjFGQkJCMThDNEY5QUUwMi9Nb1F6aFBybXIyd3hkdUhmZE9rSWdkYlpk
WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01vUXpoUHJtcjJ3eGR1SGZkT2tJZ2RiWmRaSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODY2Ni82MjNDRDZFNDg0RjMxMUVBQjFGQkJCMThDNEY5QUUwMi9Nb1F6aFBybXIy
d3hkdUhmZE9rSWdkYlpkWkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASVkUJM8Ns+evOHzMMH4BJ4upgmwqJYFWjH6uCCU6w+wzm7qQOKKvrPUsQp65
hOXm6AWTJ+Xk7IDi7Hknk+Mnt/5ItulkNf0/CMSOmHzsNXFWrUDcUNEcA8ILtztK
MaBcBRqqTrXPvuDvgfDne1iLjbhq6x3uuSXuFMNZKyCN6/yb6SfY0w4NVsU4j826
PTGJe+HF1J3J9yQwPPtoydMlbhb7GmEe43AtYUx/cPisu1pVtjaHSMjT3UdxZZyg
frEhrDA8YKHMpBIlhyAW5mUzU2cDJ+6+hDTdQWO/itCoxjVSOTCaSy1SG/ISyFPB
K63isfUycCexlTonse4WBrJ+rQ==
-----END CERTIFICATE-----
Generated at Fri Aug 21 03:31:44 2026 by rpki-client