
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
File: mom7N8VDhtqah6ZP8AlEKKMXGkc.mft (raw, json)
Hash identifier: 4Bv+NtZe87Io9K7vrdmC+Uef85fPTO6a9+oKfDiD1ZA=
Subject key identifier: E4:E6:2A:FB:73:84:D7:1A:EE:42:22:B1:BC:7E:EC:38:63:1D:95:0E
Authority key identifier: 9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47
Certificate issuer: /CN=A91EF73D/serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47
Certificate serial: 01B4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
Manifest number: 01A3
Signing time: Sun 05 Apr 2026 03:51:05 +0000
Manifest this update: Sun 05 Apr 2026 03:51:04 +0000
Manifest next update: Sun 12 Apr 2026 03:51:04 +0000
Files and hashes: 1: mom7N8VDhtqah6ZP8AlEKKMXGkc.crl (hash: YHf+sngjIeVZb7QEtl8xI6NJ74DpwY/M/dCqV8yp59A=)
2: 00E1AC30FBAA11EE9C7F3921C4F9AE02.roa (hash: Olday+AXi3Qq8gq780450bntMRq7xAhbF+H8ZFEm5II=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl
rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF73D, serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47
Validity
Not Before: Apr 5 03:51:04 2026 GMT
Not After : Apr 12 03:51:04 2026 GMT
Subject: CN=69d1dc29-ac39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:de:90:ca:90:7e:83:cb:25:6b:a9:16:be:18:
05:df:78:e6:85:45:2e:78:1d:6d:97:33:30:82:61:
a1:2a:21:8f:2d:3d:14:22:07:45:42:73:9e:2c:15:
2b:68:a9:b5:1f:e3:45:50:20:13:d3:37:59:ea:a7:
8f:d2:35:10:6e:a3:33:15:b1:49:c4:ba:74:49:01:
51:af:be:d8:81:16:20:9f:96:78:14:0e:bc:a2:56:
ee:69:56:30:4b:56:e3:d2:77:4e:3b:f1:f0:bb:0e:
67:ae:8e:c7:fb:d3:e3:74:e4:ea:6d:34:2e:30:66:
6d:dc:bf:cd:bf:a9:8d:30:75:06:42:15:fc:da:87:
d5:43:c8:17:13:9e:e5:dc:52:d4:87:b3:68:d2:9e:
28:8e:79:7b:95:b9:63:99:72:c7:1c:ad:16:b1:70:
38:16:b3:7c:4a:50:37:b0:f3:8c:11:18:b0:1c:08:
0f:6e:74:5e:c3:1e:31:4e:2c:ae:1e:18:8d:eb:57:
38:1b:9d:96:35:6b:1c:2d:5c:76:22:a7:3e:ef:4c:
b2:1b:17:31:e3:80:68:44:a4:76:b0:e2:1b:18:86:
e9:a1:4b:6c:c2:e0:3d:31:62:c2:82:87:8e:1f:e7:
10:18:87:62:57:cd:f6:2f:65:10:47:f2:87:9e:ed:
f5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E6:2A:FB:73:84:D7:1A:EE:42:22:B1:BC:7E:EC:38:63:1D:95:0E
X509v3 Authority Key Identifier:
keyid:9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ea:23:72:82:49:53:ef:48:a0:24:cd:6a:ff:16:16:81:35:
27:a5:d5:43:6f:dc:ce:1a:51:89:e4:74:f9:64:f5:33:17:23:
ac:ff:2c:73:e4:dc:05:a3:5b:cb:14:17:5b:e6:32:fd:e7:54:
4b:6c:22:7f:1c:0c:03:6c:67:14:22:8a:df:9b:45:61:65:8f:
79:38:2f:19:38:9f:47:2a:ba:b6:29:36:33:ed:51:89:c8:52:
98:3c:af:f4:17:75:bd:65:e2:bc:65:f8:47:9d:a5:c4:be:f9:
8e:71:cb:6c:4e:7d:9a:29:da:13:80:99:79:d1:1e:a1:d2:06:
db:e6:b3:30:a4:1d:26:6a:1d:5a:27:77:71:a5:b1:07:66:d2:
64:7c:c5:fd:b1:0b:3c:24:68:08:9c:d0:dd:5d:70:58:29:85:
31:41:23:73:da:ce:81:ff:52:7a:14:ad:21:c6:b5:10:a8:45:
7d:d3:18:24:03:09:b4:9e:f4:87:15:6e:1b:e1:05:08:b3:ce:
99:ff:95:59:b0:83:af:8f:a1:ab:b5:7f:53:9f:04:a3:09:1f:
0d:38:ca:ac:dc:28:07:70:06:2e:14:95:b7:31:6e:05:95:e2:
07:08:0d:06:11:d9:f1:ec:69:55:27:98:d5:70:7e:4e:b1:6a:
bb:10:5c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:57:59 2026 by rpki-client