
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.mft
File: MoI4D1fWFw9Fz1IOeywaPNovyq0.mft (raw, json)
Hash identifier: r/JCG/glCz9+PGcHlZPghXt+t2K7dNCKQLYjgfouFyk=
Subject key identifier: AA:A2:95:F5:79:90:F2:94:A1:3E:DA:F3:1C:D3:1F:D2:A7:7B:B1:1A
Authority key identifier: 32:82:38:0F:57:D6:17:0F:45:CF:52:0E:7B:2C:1A:3C:DA:2F:CA:AD
Certificate issuer: /CN=A91EE1DD/serialNumber=3282380F57D6170F45CF520E7B2C1A3CDA2FCAAD
Certificate serial: 0380
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoI4D1fWFw9Fz1IOeywaPNovyq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.mft
Manifest number: 0378
Signing time: Thu 21 May 2026 00:54:51 +0000
Manifest this update: Thu 21 May 2026 00:54:51 +0000
Manifest next update: Thu 28 May 2026 00:54:51 +0000
Files and hashes: 1: MoI4D1fWFw9Fz1IOeywaPNovyq0.crl (hash: YOMExY+GiIXzYSHcep824E7d/czIK7Yh9ZM9GX9y87M=)
2: 7D857A30F11811EC86D3AD4BC4F9AE02.roa (hash: r2JG1zM2cuTIas4I/ZZlepBtJzxMAtznZE9q7NqgJnI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.crl
rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoI4D1fWFw9Fz1IOeywaPNovyq0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 00:54:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896 (0x380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE1DD, serialNumber=3282380F57D6170F45CF520E7B2C1A3CDA2FCAAD
Validity
Not Before: May 21 00:54:51 2026 GMT
Not After : May 28 00:54:51 2026 GMT
Subject: CN=6a0e57db-dbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2d:00:81:09:87:5a:3a:a5:73:0f:dc:c0:b0:
f4:ba:e6:42:df:a7:50:32:bf:7d:6d:de:32:7f:4a:
5d:87:e1:f8:03:8d:39:6f:0d:08:fb:4b:9b:a6:0c:
e8:38:61:ba:22:57:00:19:b9:37:da:a6:c1:86:77:
df:58:0f:36:9d:c0:36:d2:de:a2:57:13:d3:4b:34:
b1:74:5b:32:de:63:f0:a8:09:84:9c:8f:09:69:5e:
b1:b5:db:ce:63:cc:a5:5e:a9:18:58:72:a1:b3:41:
89:a6:12:44:ca:4e:df:99:63:a3:34:07:35:2b:64:
06:44:03:16:32:1f:75:44:25:ea:5c:46:ae:8f:a0:
58:17:46:a0:aa:46:95:42:c1:b8:9a:bc:7e:05:fa:
61:61:48:a9:49:4e:96:37:23:13:77:a2:09:05:b4:
ae:61:20:c2:3d:7d:61:70:25:76:24:0f:1d:ab:6a:
d9:f0:b7:84:59:77:28:12:64:4c:8a:64:ae:62:26:
1c:1e:d7:a5:37:08:6d:7e:94:02:d6:94:c6:d2:25:
a4:c6:49:e8:50:14:e6:54:34:bf:2c:b8:bf:4d:01:
d2:2f:db:00:24:bf:8f:7a:e9:ff:0b:41:1b:7d:b4:
24:63:6f:48:58:43:85:88:53:41:a6:bb:49:62:98:
26:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A2:95:F5:79:90:F2:94:A1:3E:DA:F3:1C:D3:1F:D2:A7:7B:B1:1A
X509v3 Authority Key Identifier:
keyid:32:82:38:0F:57:D6:17:0F:45:CF:52:0E:7B:2C:1A:3C:DA:2F:CA:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoI4D1fWFw9Fz1IOeywaPNovyq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2f:d4:4a:88:43:3b:ab:81:4a:bf:6f:2b:42:78:b9:08:2c:
c3:cb:5b:fe:30:4b:4d:1e:03:f8:52:af:6b:e9:3c:22:9a:b9:
ce:35:18:8e:5d:87:5b:a9:c7:67:18:25:98:3f:a5:40:76:56:
59:c7:51:57:b5:9e:f1:d0:26:ee:f2:db:6c:93:db:33:53:64:
68:de:8f:2d:e5:31:70:d0:b6:b7:73:c9:36:74:68:5d:72:58:
9e:6c:f6:56:8d:52:d3:43:66:f0:60:ec:f7:2f:9c:b1:d2:de:
60:8d:35:16:91:e5:42:9a:ac:b2:c5:aa:e6:53:75:eb:b0:8a:
3e:23:35:53:1f:90:7c:ad:48:df:e9:c6:78:1e:e8:ad:dd:4f:
6f:65:56:8b:62:b7:23:d1:47:ce:f7:d9:9f:e7:dc:5f:d9:38:
be:40:a1:57:b8:11:6e:b8:3c:c1:3b:25:e3:9e:ae:73:b8:a1:
7e:f8:c3:ad:bd:f1:68:5a:70:24:29:48:9d:cf:e8:31:6c:17:
3e:a4:d0:59:b4:23:ef:7e:1a:f5:88:91:bb:90:a3:f5:75:4c:
cf:72:24:15:16:4f:09:6d:7a:2e:75:d8:81:dc:a5:95:f6:5a:
4a:3e:d7:a7:cf:2b:05:ad:8a:bd:be:c2:c8:87:2a:7f:6b:83:
68:f0:4e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:27 2026 by rpki-client