
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
File: MOIGH3wgvYQ77lNywTIcNfux0-8.mft (raw, json)
Hash identifier: dkaWESDnPqyESq/7UgUjMIOIiI+lrxOeX5rT7mtnnOQ=
Subject key identifier: 1D:16:B9:BE:BD:5A:5E:F4:4C:F1:3A:F9:25:49:57:D1:FD:B5:D2:98
Authority key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
Certificate issuer: /CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Certificate serial: 03CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
Manifest number: 039C
Signing time: Wed 05 Nov 2025 00:59:52 +0000
Manifest this update: Wed 05 Nov 2025 00:59:51 +0000
Manifest next update: Wed 12 Nov 2025 00:59:51 +0000
Files and hashes: 1: MOIGH3wgvYQ77lNywTIcNfux0-8.crl (hash: ggtJf1VO2hrnBTHYkAwvsYq8JXQxKl0vBdxHdLDJyMc=)
2: 96A539C2278211EF902D8D85C4F9AE02.roa (hash: rYHOV+63ySve2lLbeG71M0SUbKfF20oOi9uas6YcF+A=)
3: 80F23C7E1BC011EFB7916B7DC4F9AE02.roa (hash: uCCq9Jdh0+tPxus1xQJGSoE4R/e4MPlh9WCF8V7YB1Q=)
4: DAAECE38C77711EDA89BE25DC4F9AE02.roa (hash: Qa66QzBziJdm9L3gqGzaylVuTVRVatV8AuZ/B+L6zpk=)
5: BC17B1DCB96311EDA3070C82C4F9AE02.roa (hash: 83Wv2JxvwigdbCeSHljXaATCprN0duFOpBL+VJFLFxQ=)
6: 9B8A0A56F56F11EF84317935C4F9AE02.roa (hash: hUEi5Mxm1d2fdxW2k3TL0lrkSD9s1MOK7bqcVMZxr0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:59:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 970 (0x3ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC269, serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Validity
Not Before: Nov 5 00:59:51 2025 GMT
Not After : Nov 12 00:59:51 2025 GMT
Subject: CN=690aa187-3ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fc:1a:87:c5:cd:47:3b:13:09:6d:f7:25:37:
bc:6f:de:e5:35:aa:ac:20:27:e5:19:d7:ec:29:6e:
57:25:39:f0:cd:aa:57:83:1f:6a:8c:21:a5:2b:20:
19:fe:37:23:14:5d:48:a3:d7:d7:27:cd:ea:ea:63:
b9:07:39:3e:6f:8a:b6:00:4f:4b:4e:19:88:42:ca:
1b:bc:06:2a:66:30:a0:b0:fa:8e:c5:5b:2a:5e:69:
6f:6f:77:0d:c5:36:6d:fe:7d:06:5e:b1:e1:ec:44:
2b:43:ee:89:3d:5f:5d:79:c5:1f:51:48:a9:cf:2b:
5d:73:56:0e:cf:e8:e5:3b:67:79:22:5e:f4:dd:5b:
d2:2b:a8:8b:d9:14:28:27:cc:ca:8b:94:54:81:d4:
18:7b:c7:10:23:b3:f7:3a:7d:62:76:a3:34:8d:3b:
15:1e:8a:ee:27:e7:a8:e2:00:c4:f0:28:65:95:21:
a7:c4:33:7a:51:81:9b:16:8c:7f:89:b3:e6:f6:94:
49:c7:56:06:75:04:7a:3a:0d:af:4b:61:de:52:6f:
1a:d0:81:b7:95:eb:c1:66:f8:ac:43:d0:2c:64:cb:
d3:59:e4:ff:67:0e:f5:c5:95:d6:18:bf:63:cc:bf:
31:c7:61:59:49:c9:ac:a6:23:e4:73:31:d4:98:f0:
72:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:16:B9:BE:BD:5A:5E:F4:4C:F1:3A:F9:25:49:57:D1:FD:B5:D2:98
X509v3 Authority Key Identifier:
keyid:30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:29:c5:ff:92:14:c6:89:35:ba:83:71:47:1e:db:81:a0:d2:
b4:96:5d:b1:e1:59:8f:37:fe:50:ed:ed:a2:c9:2e:67:f2:f0:
82:a7:70:a5:0d:a4:1b:d3:39:f8:08:5c:eb:08:eb:d8:fc:5f:
d2:9e:6b:be:1b:16:74:38:9b:5f:b6:cd:9c:ae:d4:d6:34:b8:
fe:5f:45:52:dd:6d:3d:4e:4f:08:cf:19:bf:58:75:85:17:d3:
37:ef:74:d5:fc:f3:1e:d2:ec:e3:a8:87:df:5f:b7:fd:88:bd:
09:90:7b:42:c6:6e:87:e6:c3:9b:8b:07:db:c7:4d:2c:ad:53:
68:e8:02:59:2c:4d:26:47:11:b3:35:b0:2d:87:fc:fa:f9:ec:
8d:81:16:dc:ff:60:a1:ae:cd:c4:e9:22:85:16:8f:5f:b0:8b:
c6:8b:a2:51:6f:da:2a:7f:40:d9:99:f8:3a:5c:91:b8:04:cd:
a5:f6:5b:84:f9:fb:89:64:67:de:9a:82:d9:fd:71:3a:82:38:
a0:2f:bd:cf:3b:a3:90:a6:9f:57:8a:c2:47:90:a0:eb:2f:88:
b4:a4:89:66:b0:69:00:3c:05:0c:bd:9f:60:eb:1f:2a:da:dd:
3d:cc:af:8f:a3:83:90:ae:bc:cf:16:29:6b:9f:60:ed:c3:0d:
9b:c1:46:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:41:03 2025 by rpki-client