
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
File: MOCAPeumAKyakmRMlveKjohdfFA.mft (raw, json)
Hash identifier: JNFw0q6cUfjOexP9lHezwEIB4ng0uxJtGijgIi5dh/w=
Subject key identifier: 52:5A:93:54:DB:8F:1B:BA:34:85:E1:9F:85:BF:37:FF:FF:26:10:D1
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Certificate issuer: /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial: 05D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
Manifest number: 05B5
Signing time: Sat 28 Feb 2026 23:45:24 +0000
Manifest this update: Sat 28 Feb 2026 23:45:23 +0000
Manifest next update: Sat 07 Mar 2026 23:45:23 +0000
Files and hashes: 1: MOCAPeumAKyakmRMlveKjohdfFA.crl (hash: QTIG1UfG0TBWYdKtqNoQ8kH8TUqvoZvoL3yUT66/K6Y=)
2: 04A930F6629211EE90D5AD6CC4F9AE02.roa (hash: Lq0Pjcb0X2iFoTuh1SlciaEnxeaDU7HVk0tgiyAZd5M=)
3: 7A532A308E1D11EE9CC5535CC4F9AE02.roa (hash: op1f0dmOmYKN53NdiioOTuPiw+z0pYxBQfbuO2UDbqE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1489 (0x5d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CEE3, serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Validity
Not Before: Feb 28 23:45:23 2026 GMT
Not After : Mar 7 23:45:23 2026 GMT
Subject: CN=69a37e13-2dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:52:c7:00:51:04:db:8a:b1:a4:6c:92:5f:9c:
92:0c:82:fe:a8:39:1e:13:9c:97:18:4f:6a:ea:8a:
bb:9c:2a:fd:c5:83:19:8c:cf:41:fa:0f:fb:df:a1:
49:00:70:ae:22:68:f4:ad:67:77:66:b4:8d:42:02:
04:23:99:51:63:19:75:db:6b:e3:b7:e8:35:bd:94:
28:6b:aa:35:50:8f:3f:6a:b8:ad:97:6a:11:ba:b5:
40:2a:85:63:b5:7a:8f:8e:fe:7c:7a:6d:ea:e8:48:
9b:ad:eb:34:9f:d8:c3:d6:a2:03:97:c2:64:8b:b1:
7f:7e:50:24:b9:e6:bb:a4:b5:bf:e0:6b:10:81:fe:
43:f2:03:2c:d8:93:b1:92:22:94:9f:94:a1:7a:6d:
4e:4e:3a:d4:fb:18:e5:e4:69:e8:e8:23:9c:37:c1:
09:c8:ac:9c:0a:97:ec:fa:23:fe:65:fb:0a:1f:d9:
17:df:13:7d:7f:d2:bf:ca:88:34:04:d7:e9:74:63:
81:b8:ef:f3:7a:ef:3d:a9:dc:22:7f:3d:e4:21:5f:
97:31:b3:ad:89:6d:c1:40:80:d6:b1:8f:7f:f8:e4:
68:df:85:fb:89:12:9b:dc:55:8a:b0:ab:77:29:2a:
01:71:34:f2:3d:d6:dd:44:5e:d3:40:da:c4:0a:56:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5A:93:54:DB:8F:1B:BA:34:85:E1:9F:85:BF:37:FF:FF:26:10:D1
X509v3 Authority Key Identifier:
keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:54:b1:47:0f:83:d2:0c:29:33:70:bf:a4:cf:2f:72:85:9d:
ed:a2:da:06:1a:17:ae:0e:09:3e:bb:42:78:15:0e:66:dd:92:
fc:d3:70:53:10:4c:ca:58:cb:06:ab:d3:ae:48:b9:56:0f:ae:
ed:b0:87:ea:b6:de:5e:97:9a:d1:17:ab:d6:eb:ae:26:99:f4:
69:be:fe:94:08:15:f5:88:88:2a:24:91:ea:5b:90:d0:04:54:
45:7d:cb:4c:fa:4d:76:b0:77:e7:5d:e9:0a:19:eb:13:4e:5a:
49:ae:f7:57:3e:90:d1:89:b6:34:e9:94:d1:3b:8e:8e:9e:48:
a4:07:e8:8b:93:2e:5c:cc:67:9b:d0:94:0b:27:f1:f2:72:52:
07:46:5b:f8:5d:6d:cc:11:1b:e5:06:78:f4:b8:39:a9:02:4e:
37:01:60:6b:5d:49:ec:44:f9:0b:bd:d5:24:af:88:96:06:4d:
2d:04:92:c5:04:c7:e5:50:f6:e2:17:88:5c:f4:cd:02:e3:a5:
2e:09:75:f5:28:9e:2d:42:39:5c:c8:b1:20:12:cb:1e:64:ac:
9b:7c:74:6f:11:d1:df:ea:74:68:5b:fc:f3:a6:12:7d:dd:fe:
75:ec:01:bd:1b:b3:85:93:87:8e:3c:f2:11:fd:f4:87:ba:8d:
b6:b7:fa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:40 2026 by rpki-client