
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
File: MOfescUi55FZhZK2RTCIY8oADhg.mft (raw, json)
Hash identifier: ezKIuDWAUNE+E3SIGgci5bUVn4FYdd/846SREkoWKM4=
Subject key identifier: 32:5D:FF:E5:CF:91:AC:4C:A8:DE:E1:09:75:FD:53:68:86:23:31:10
Authority key identifier: 30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
Certificate issuer: /CN=A91E76B8/serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Certificate serial: 14EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
Manifest number: 14CC
Signing time: Sat 04 Apr 2026 16:45:33 +0000
Manifest this update: Sat 04 Apr 2026 16:45:33 +0000
Manifest next update: Sat 11 Apr 2026 16:45:33 +0000
Files and hashes: 1: MOfescUi55FZhZK2RTCIY8oADhg.crl (hash: 5Nh39aqWrAHozYCi+SLUhPCtEEg8u2DQLlTbvlc3KU8=)
2: ECBAA694826F11ED963DD626C4F9AE02.roa (hash: ri400EEfSt1Zr4saG3aAHE5et+UN5EhiVulgcbMnm8c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:45:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5354 (0x14ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E76B8, serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Validity
Not Before: Apr 4 16:45:33 2026 GMT
Not After : Apr 11 16:45:33 2026 GMT
Subject: CN=69d1402d-29e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:91:c5:1f:b8:32:3f:06:20:8f:b7:80:26:50:
0f:7e:2d:75:5b:7f:0f:24:37:f8:2c:84:d2:92:0a:
44:bf:42:82:42:8d:99:39:5f:ab:5f:1f:f5:60:86:
bc:ff:19:a1:c3:19:1b:fa:b5:68:c2:fa:4a:38:20:
2d:85:91:31:77:c6:76:54:e5:a7:97:6e:3b:f2:33:
2b:dd:cb:84:ec:92:12:96:7e:3c:2c:06:c0:b7:29:
8d:64:7e:5e:b2:46:07:f2:f8:5b:32:a8:09:63:80:
7e:2f:69:85:1d:c3:55:07:c4:54:e1:37:46:c9:59:
8e:7d:73:b1:5a:53:47:22:a0:23:50:61:dd:fb:8a:
fb:2e:af:b0:62:8e:3c:53:38:62:34:59:12:0e:e4:
48:90:29:5c:97:2f:0b:e4:1a:99:c2:71:ee:99:d9:
a8:ef:c5:fc:f0:b6:3a:bd:1c:9e:fc:e1:1c:0a:64:
09:27:5b:06:be:1b:f6:5d:87:84:cd:f5:22:ef:1f:
ce:bc:4e:12:53:e7:0a:c8:51:22:8f:86:34:67:17:
3e:99:ac:7c:1a:6c:fb:d6:55:20:1d:e7:47:17:b5:
33:89:02:91:15:84:51:02:29:ff:4a:bf:50:0b:b0:
f1:86:fb:f7:cc:46:a1:50:5d:2a:58:b8:f3:aa:ca:
97:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5D:FF:E5:CF:91:AC:4C:A8:DE:E1:09:75:FD:53:68:86:23:31:10
X509v3 Authority Key Identifier:
keyid:30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:a1:45:a5:9e:65:29:fa:6d:4d:30:c9:e0:8f:14:85:12:1a:
bc:2f:a0:16:22:f5:20:02:bd:0b:4b:a4:1c:13:ec:ea:97:37:
52:6e:3e:f9:1b:52:0d:fe:44:ad:9e:e4:4a:4e:2f:db:81:23:
f1:1d:ff:38:0f:31:60:3a:e4:8d:78:29:81:e2:b5:5c:53:99:
37:70:a3:72:04:87:c7:69:c5:db:20:7f:ed:5c:82:43:e9:30:
c4:64:a2:f0:7b:55:98:1e:46:fe:cf:21:48:24:f5:95:a0:28:
d3:7c:18:98:43:f4:22:44:54:2b:b8:f0:b1:84:07:6f:87:52:
1d:ed:bd:4d:1b:19:a0:bd:d4:7b:95:38:4a:f0:22:4e:36:ce:
08:d3:ae:3b:bf:a6:6d:3c:08:27:a4:ad:60:7e:5d:c2:f4:9c:
c4:5d:69:c9:49:b0:3f:13:0d:cf:36:e0:47:9b:df:48:b4:9c:
d7:f5:3c:82:3e:24:d7:19:f2:28:60:77:5b:07:81:59:0e:8e:
39:8d:c5:6e:8f:29:04:92:b9:14:d6:95:08:4e:be:90:9b:6e:
96:fb:b2:d5:62:4f:f0:0e:ce:0d:32:41:3e:f9:82:0d:f6:43:
a3:df:90:ee:0c:30:02:41:67:a4:e0:3e:2e:5b:58:e3:1e:26:
73:c8:49:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:36 2026 by rpki-client