
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
File: MOWJKI62UAJRDId7Rmq-GXU7284.mft (raw, json)
Hash identifier: RKkMtGPauf4yCys1CTZAkVVYHSaGtXeWqFvZ8AmGT+w=
Subject key identifier: 9C:CD:26:6B:D2:B7:54:26:1B:AE:A1:E7:BF:55:9A:96:14:E2:C4:47
Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE
Certificate issuer: /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
Certificate serial: 224E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
Manifest number: 21F6
Signing time: Fri 20 Mar 2026 15:47:55 +0000
Manifest this update: Fri 20 Mar 2026 15:47:54 +0000
Manifest next update: Fri 27 Mar 2026 15:47:54 +0000
Files and hashes: 1: MOWJKI62UAJRDId7Rmq-GXU7284.crl (hash: veawCWBzjkoXvT/xUDIab8YzbHoKieqaNb4nTUN2YSA=)
2: 49567968D07011F0A2852929C4F9AE02.roa (hash: 8PQXUEVhK3IEgEy9LdNTrlYJLQFMsbSKz5nwyZNxIbk=)
3: 96862188486111E8AA9B1B45C4F9AE02.roa (hash: qsZSEb0rwpplo93FKHewQ04M4ljPiZCm7esCnmdbdyk=)
4: 69A7319C4F7311E988A75B37C4F9AE02.roa (hash: aNgkAquiTrmAkAgx3eOEV0Kuy2J6l/EZLgSS59S6b0I=)
5: 89A9F0B436B511EEB14AD345C4F9AE02.roa (hash: u4JetaOWzMXn/9OVVoXfiQX/zpTvJHxG2pnCEY2Q6h8=)
6: 869ED548F1E511E88BD7AA7CC4F9AE02.roa (hash: 6REJsbq1crWQe1RBVHIb3kv2oV963u4iX5SxxumAUhc=)
7: 49CAEF64D07011F08EAB2929C4F9AE02.roa (hash: 9yWXqNFWiFfzJFLfOdFyogGNA+hYJ2MkS7N+G+jaZ/Y=)
8: 52644D4AA1E411E8AE269764C4F9AE02.roa (hash: AcklsjRNx+5Tl87ZCSnr+nKhs0vUfT9sBTNVYrvsdZ0=)
9: FEDAEBD8932711F0B9305C4FC4F9AE02.roa (hash: oLPGAtInmgg8LJAGqD2eTzOmv35jtP5ZiQradw61X2A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl
rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 15:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8782 (0x224e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
Validity
Not Before: Mar 20 15:47:54 2026 GMT
Not After : Mar 27 15:47:54 2026 GMT
Subject: CN=69bd6c2a-efc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cd:5f:06:1a:97:ba:dd:81:7a:dd:49:12:d4:
91:c7:3f:88:95:8f:5d:29:40:90:30:1c:9f:42:c1:
01:89:fe:a4:f3:ea:ee:9e:3f:f1:24:4f:2a:c5:94:
ac:c2:f3:d9:3a:47:36:73:7b:4f:b8:f1:b1:3a:0b:
6f:e7:45:62:ff:d4:44:79:83:fd:b0:21:4e:4c:b9:
4a:89:0e:f6:53:f9:7a:1e:f9:b4:fa:58:44:4e:a4:
41:12:f4:4c:08:7e:11:14:62:20:4c:2e:3a:ec:f2:
f9:ee:8a:0b:ea:e6:ea:d1:1a:59:77:59:b7:a1:49:
11:b5:67:67:4c:94:4a:65:fa:fd:aa:90:68:50:2f:
69:84:6b:f8:5d:5c:7c:50:b4:ea:a1:4d:2c:4b:9c:
3b:d0:22:fa:28:18:d2:26:da:20:bb:f9:63:4b:68:
20:69:6a:d0:c1:17:4b:f1:b8:84:65:c0:16:64:c6:
1f:6a:fb:51:b4:cd:8a:9b:0e:dd:ce:b4:b6:f0:0d:
cf:95:27:67:16:41:b4:7f:18:cc:29:52:87:13:81:
8f:35:0e:73:08:2e:8c:cc:25:c3:6c:f6:e0:54:6f:
0b:d7:ae:a4:50:67:71:58:49:a7:c6:6c:17:3c:9e:
b0:f4:38:6d:38:4f:60:ca:85:d8:d2:4c:be:59:4a:
59:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CD:26:6B:D2:B7:54:26:1B:AE:A1:E7:BF:55:9A:96:14:E2:C4:47
X509v3 Authority Key Identifier:
keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:1c:e4:de:23:ee:63:c5:0c:ac:b2:2e:bd:71:f6:33:4d:40:
6a:97:80:b0:ea:0e:3f:27:02:f4:00:73:e1:54:8f:93:24:ff:
15:c3:d6:8c:a4:61:85:67:56:e0:f7:01:a6:87:de:89:33:f0:
31:7e:66:26:c5:83:f1:5f:40:4a:ae:ce:bb:bf:73:c2:19:17:
96:15:1b:2c:19:b5:42:ce:a6:7b:3b:91:23:2e:27:e6:8a:bc:
5a:f4:fe:c6:59:2d:f5:d5:45:0f:93:75:fc:78:fa:8d:a9:eb:
cc:57:07:77:f2:4f:ee:97:fc:51:23:81:37:2e:2d:03:e0:53:
56:e6:cc:02:c2:45:ee:a5:91:19:2d:7b:69:9d:a1:c6:0e:c2:
78:51:a9:75:36:46:e4:99:ca:30:48:f3:73:18:11:13:84:7d:
ee:97:80:4f:e4:62:c7:f0:41:ae:c7:51:26:fd:b8:a0:90:e7:
73:dd:c7:28:ef:ee:11:3a:65:ca:98:31:04:95:ef:4f:b3:cc:
11:91:97:c6:be:6a:82:7f:3e:32:a9:d5:6b:b6:d4:43:01:9c:
9d:26:ce:ee:54:07:bd:a1:63:19:99:9c:b0:ed:6d:7e:4c:b7:
fe:ce:bd:f8:62:4b:78:55:3e:3c:83:c6:10:90:fd:ea:9e:17:
8a:d7:26:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 13:36:18 2026 by rpki-client