
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
File: mom7N8VDhtqah6ZP8AlEKKMXGkc.mft (raw, json)
Hash identifier: tYFxE8V6ztqA5cpssoNb08osqWfqPzsRFnnkKS0iMW8=
Subject key identifier: 4D:BE:CF:CC:45:AA:0B:CD:11:EF:A3:0F:1A:51:8C:A4:06:73:E2:77
Authority key identifier: 9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47
Certificate issuer: /CN=A91EF73D/serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47
Certificate serial: 01D1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
Manifest number: 01C0
Signing time: Mon 01 Jun 2026 04:48:34 +0000
Manifest this update: Mon 01 Jun 2026 04:48:34 +0000
Manifest next update: Mon 08 Jun 2026 04:48:34 +0000
Files and hashes: 1: mom7N8VDhtqah6ZP8AlEKKMXGkc.crl (hash: NVT5WCYbVYT9Jy5aXyXyJwhL11F68LgGMLGCwY7ABi0=)
2: 00E1AC30FBAA11EE9C7F3921C4F9AE02.roa (hash: Olday+AXi3Qq8gq780450bntMRq7xAhbF+H8ZFEm5II=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl
rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 04:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF73D, serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47
Validity
Not Before: Jun 1 04:48:34 2026 GMT
Not After : Jun 8 04:48:34 2026 GMT
Subject: CN=6a1d0f22-6a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:3c:9b:d6:02:24:a0:ec:bb:7f:47:f4:d2:
ef:bc:1b:5a:91:6c:6e:e1:80:79:34:77:34:d6:f6:
3f:15:d0:8c:7e:2e:17:ec:31:ff:d6:c2:b7:fc:a9:
9f:14:d3:ae:b1:82:3d:de:0e:f7:72:00:a0:d1:a7:
8e:91:30:1b:ae:c3:14:59:eb:53:e0:27:00:3d:9c:
16:c0:e7:64:1e:d0:a2:94:92:05:e2:58:e4:01:90:
80:60:64:93:b7:5c:32:ce:01:4a:25:3d:0f:dc:7f:
f6:0f:f6:11:45:66:ce:95:4a:c1:d4:54:65:5c:ba:
c3:ca:48:0a:bb:da:ed:b7:55:28:eb:06:6a:87:c5:
a0:c7:1a:35:95:3b:92:4b:95:c7:d5:4d:b8:e4:c0:
00:bb:dc:63:1b:cc:43:9d:1a:a7:2b:e8:3b:29:af:
e5:33:e9:31:50:0f:30:e8:d0:07:d5:c1:0e:ce:c4:
2d:26:64:0a:62:2b:34:2d:ca:38:99:f1:a4:0d:f0:
6c:e8:1d:86:29:f4:3b:89:15:a5:00:1c:57:ea:4a:
14:c2:e8:8a:f6:7b:38:1e:1f:8d:15:62:08:fd:cb:
dd:17:41:c4:66:b5:7a:0a:43:95:01:09:67:7f:31:
c3:ad:98:ae:9a:cf:fd:6e:0a:1f:15:75:43:3c:1d:
22:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BE:CF:CC:45:AA:0B:CD:11:EF:A3:0F:1A:51:8C:A4:06:73:E2:77
X509v3 Authority Key Identifier:
keyid:9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:73:21:54:58:af:8a:05:c6:37:36:2d:22:90:53:cc:40:a9:
88:c9:ef:af:4f:a8:51:8f:7b:42:43:ad:22:58:78:e7:c3:51:
14:3a:7f:02:e6:4c:6e:be:cf:83:ea:62:47:90:5d:b0:37:86:
1e:7f:ac:98:9c:c7:bb:38:b4:e0:45:4d:38:ae:fc:f8:d2:ed:
12:43:c4:3e:9d:5e:c9:95:c0:37:a5:65:30:22:95:68:58:01:
51:b9:56:d8:8c:4b:aa:db:f3:42:17:8d:6e:4c:62:95:34:db:
18:b5:c4:9c:85:bf:45:01:34:9b:bd:d5:62:40:42:43:7a:4d:
f5:ec:25:e2:bf:55:ba:3a:4a:c3:06:ed:b9:a1:af:9b:76:d0:
9a:f1:35:7c:a7:d9:72:2c:7a:3c:58:67:b4:cb:3c:a4:f4:c5:
78:95:ca:9d:9d:a6:af:b4:7e:bc:28:e9:e8:9f:4e:c1:81:5d:
cf:ba:ea:c5:b3:51:71:0c:d0:a7:73:a9:4f:94:8d:0f:36:38:
51:10:1d:43:65:93:ac:f7:de:dd:5d:6b:5b:bf:f1:a4:9e:45:
15:f5:30:a0:24:4a:1f:83:77:0a:a3:9a:e2:e9:cb:67:63:ff:
1b:f7:03:f3:5d:51:ba:aa:11:03:7b:4b:56:bd:72:90:87:4d:
38:1a:aa:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY3M0QxMTAvBgNVBAUTKDlBODlCQjM3QzU0Mzg2REE5QTg3QTY0RkYwMDk0NDI4
QTMxNzFBNDcwHhcNMjYwNjAxMDQ0ODM0WhcNMjYwNjA4MDQ0ODM0WjAYMRYwFAYD
VQQDEw02YTFkMGYyMi02YTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsV88m9YCJKDsu39H9NLvvBtakWxu4YB5NHc01vY/FdCMfi4X7DH/1sK3/Kmf
FNOusYI93g73cgCg0aeOkTAbrsMUWetT4CcAPZwWwOdkHtCilJIF4ljkAZCAYGST
t1wyzgFKJT0P3H/2D/YRRWbOlUrB1FRlXLrDykgKu9rtt1Uo6wZqh8Wgxxo1lTuS
S5XH1U245MAAu9xjG8xDnRqnK+g7Ka/lM+kxUA8w6NAH1cEOzsQtJmQKYis0Lco4
mfGkDfBs6B2GKfQ7iRWlABxX6koUwuiK9ns4Hh+NFWII/cvdF0HEZrV6CkOVAQln
fzHDrZiums/9bgofFXVDPB0iKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE2+z8xF
qgvNEe+jDxpRjKQGc+J3MB8GA1UdIwQYMBaAFJqJuzfFQ4bamoemT/AJRCijFxpH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczRC9DOTJCMzIzMkNF
MUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9tb203TjhWRGh0cWFoNlpQOEFsRUtLTVhH
a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21vbTdOOFZEaHRxYWg2WlA4QWxFS0tNWEdrYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjczRC9DOTJCMzIzMkNFMUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9tb203TjhWRGh0
cWFoNlpQOEFsRUtLTVhHa2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc3MhVFivigXGNzYtIpBTzECpiMnvr0+oUY97QkOtIlh458NRFDp/AuZMbr7P
g+piR5BdsDeGHn+smJzHuzi04EVNOK78+NLtEkPEPp1eyZXAN6VlMCKVaFgBUblW
2IxLqtvzQheNbkxilTTbGLXEnIW/RQE0m73VYkBCQ3pN9ewl4r9VujpKwwbtuaGv
m3bQmvE1fKfZcix6PFhntMs8pPTFeJXKnZ2mr7R+vCjp6J9OwYFdz7rqxbNRcQzQ
p3OpT5SNDzY4URAdQ2WTrPfe3V1rW7/xpJ5FFfUwoCRKH4N3CqOa4unLZ2P/G/cD
811RuqoRA3tLVr1ykIdNOBqq3g==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:53 2026 by rpki-client