
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft
File: moOQ_87kYoLKpxzdePBmlPjT1bY.mft (raw, json)
Hash identifier: nXIm1WMMnQ0Zc8JU6vpr5a/B198bkrEkErGFdx7N42I=
Subject key identifier: F2:2F:4E:48:14:C2:2A:D9:6F:8D:41:6A:DD:D0:52:11:8F:18:84:55
Authority key identifier: 9A:83:90:FF:CE:E4:62:82:CA:A7:1C:DD:78:F0:66:94:F8:D3:D5:B6
Certificate issuer: /CN=A918B531/serialNumber=9A8390FFCEE46282CAA71CDD78F06694F8D3D5B6
Certificate serial: EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/moOQ_87kYoLKpxzdePBmlPjT1bY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft
Manifest number: EA
Signing time: Mon 21 Sep 2026 06:26:42 +0000
Manifest this update: Mon 21 Sep 2026 06:26:42 +0000
Manifest next update: Mon 28 Sep 2026 06:26:42 +0000
Files and hashes: 1: moOQ_87kYoLKpxzdePBmlPjT1bY.crl (hash: QPsH0mMT6l+wiycuJJclG3NdsnSq7yIXTh4SKjyyN0c=)
2: C0B3AE3056F511F0AF865C85C4F9AE02.roa (hash: soQNMOK7SzLj3ICqswnaXGnnM7wkX3rumUTfdSAnLgA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.crl
rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/moOQ_87kYoLKpxzdePBmlPjT1bY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B531, serialNumber=9A8390FFCEE46282CAA71CDD78F06694F8D3D5B6
Validity
Not Before: Sep 21 06:26:42 2026 GMT
Not After : Sep 28 06:26:42 2026 GMT
Subject: CN=6ab0ce22-5656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2a:71:7e:21:aa:43:b1:63:2a:78:b6:9f:43:
51:4a:6e:82:e9:0d:bc:33:db:82:8c:05:26:38:07:
22:b5:7f:db:5a:fc:f3:19:76:a7:fc:8a:91:43:35:
35:d1:46:70:1c:9f:42:fb:69:a1:5c:8b:c4:fc:64:
ee:43:8c:61:4f:65:bb:0e:d7:6f:7b:11:f2:d6:ac:
29:75:02:88:e0:31:f1:6a:ce:5d:ac:fe:c9:3e:92:
5d:bc:6c:c7:28:5d:bf:29:48:ac:84:43:44:c1:56:
93:91:c8:9a:bf:29:4c:70:b4:3d:34:9d:97:03:f3:
03:a9:c3:55:f1:5f:30:db:d4:3a:f7:4e:db:9f:71:
57:0c:5c:06:7d:e3:5b:b5:55:17:7f:bd:e3:91:98:
0d:a9:cf:bc:cb:4c:96:ba:7d:d4:b3:32:f7:b3:be:
5b:a1:ab:e8:1c:f9:45:14:65:41:18:7e:04:55:28:
f4:a3:9f:b7:d3:ad:fc:a7:63:53:f4:63:19:d7:bc:
d7:12:df:93:a1:ab:ce:70:ce:f5:bb:9a:b3:5c:1b:
75:74:81:fd:4d:39:33:3d:6c:1c:d9:3d:9f:4c:71:
8f:87:26:89:40:11:7f:23:22:e9:a4:2c:76:8b:91:
a4:3e:11:c1:6d:92:19:0f:0f:90:d4:50:65:3b:60:
b3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2F:4E:48:14:C2:2A:D9:6F:8D:41:6A:DD:D0:52:11:8F:18:84:55
X509v3 Authority Key Identifier:
keyid:9A:83:90:FF:CE:E4:62:82:CA:A7:1C:DD:78:F0:66:94:F8:D3:D5:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/moOQ_87kYoLKpxzdePBmlPjT1bY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:9d:6d:cd:66:33:3c:a5:8e:0d:a5:20:58:c6:7b:ae:da:bb:
8a:bc:fd:3e:a6:0b:5b:6a:a9:e1:75:38:66:06:f0:4b:5b:f0:
6e:ca:1b:9c:f0:25:4d:9c:0a:40:cf:02:88:55:78:40:16:93:
98:81:d1:ab:73:ee:ce:e0:ea:e9:6e:85:b4:de:ec:61:2e:8f:
48:c0:13:24:4e:34:16:7c:d0:d8:fa:30:1c:d9:dc:f6:98:d3:
bf:eb:69:e4:6c:bb:3e:75:50:c8:b3:25:fb:71:aa:8e:35:cb:
17:50:f1:93:a5:ae:de:35:22:cd:15:db:65:72:d0:1b:eb:88:
e4:24:8e:b8:f9:85:fb:bc:c7:1c:d0:02:a7:85:d7:ca:68:14:
7f:75:97:0f:29:2c:2e:46:c1:9d:c4:0a:7b:bc:52:25:20:f3:
d5:a2:a1:4f:ba:87:8d:a8:67:51:0c:d6:bf:4d:06:a1:20:a6:
4d:1e:0f:2b:95:8e:6b:d6:82:09:6f:56:5d:fc:df:cc:18:07:
88:08:2e:fb:ba:8c:83:e8:ac:1b:fd:6d:1c:51:70:21:39:34:
04:6c:16:a4:37:ee:10:f5:a8:b9:b8:42:1f:6f:04:03:ae:fa:
4d:6f:54:7f:55:65:4f:ac:cb:af:63:cb:be:ca:53:c5:25:45:
ec:51:c8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:10:15 2026 by rpki-client