
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft
File: moOQ_87kYoLKpxzdePBmlPjT1bY.mft (raw, json)
Hash identifier: BIfKSCeCIA3pNvrX3N4p+opN+As5O4kyRiFP0yn9AX0=
Subject key identifier: E1:BE:76:5E:F4:6D:0C:A9:C5:B7:84:63:A2:1C:37:3C:28:D6:D1:C7
Authority key identifier: 9A:83:90:FF:CE:E4:62:82:CA:A7:1C:DD:78:F0:66:94:F8:D3:D5:B6
Certificate issuer: /CN=A918B531/serialNumber=9A8390FFCEE46282CAA71CDD78F06694F8D3D5B6
Certificate serial: 84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/moOQ_87kYoLKpxzdePBmlPjT1bY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft
Manifest number: 81
Signing time: Sun 01 Mar 2026 09:00:46 +0000
Manifest this update: Sun 01 Mar 2026 09:00:45 +0000
Manifest next update: Sun 08 Mar 2026 09:00:45 +0000
Files and hashes: 1: moOQ_87kYoLKpxzdePBmlPjT1bY.crl (hash: cSYAWj2a+zmF4Xvy6bkxphTwwQ+ULTfxPXtBQp9MZyk=)
2: C0B3AE3056F511F0AF865C85C4F9AE02.roa (hash: RCoFguj1n8u2hp2q2pai6qJkikJctur+YF0ZJzaPOC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.crl
rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/moOQ_87kYoLKpxzdePBmlPjT1bY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B531, serialNumber=9A8390FFCEE46282CAA71CDD78F06694F8D3D5B6
Validity
Not Before: Mar 1 09:00:45 2026 GMT
Not After : Mar 8 09:00:45 2026 GMT
Subject: CN=69a4003d-8bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:ab:7c:fb:9c:9f:c7:04:99:5f:9e:9f:a6:
99:fc:d2:9f:55:aa:59:3c:18:31:d7:5d:45:56:fa:
4d:9e:17:45:bc:b1:6b:17:d7:1c:a2:dd:b0:7e:0e:
6a:84:54:9e:98:67:af:97:0a:c8:68:9f:d9:07:94:
a3:57:8c:ba:64:8f:c5:59:68:84:23:75:39:7a:de:
c3:5b:4e:08:52:46:2a:01:78:39:a9:48:59:da:77:
9d:eb:c8:0a:60:c7:f8:d7:5d:a8:66:b6:d9:0e:88:
82:c6:61:9f:6d:9a:60:e1:a0:20:8e:1f:9f:c3:02:
37:1a:c6:0b:6b:17:90:93:5e:02:98:b7:b2:70:59:
6a:05:89:bb:4c:57:58:e7:80:9a:23:85:2c:09:ae:
a0:62:78:e9:42:10:ef:3a:7d:19:20:ad:42:7a:e5:
21:70:aa:e6:61:35:f9:52:b7:86:8f:01:2d:13:20:
dd:14:73:7a:50:0e:ee:82:4a:c4:d1:52:7d:d7:6d:
a6:4e:b4:e0:3c:99:be:3d:4f:3b:59:82:94:2b:2d:
ed:80:38:cb:ec:a1:43:3c:53:dc:fa:60:0b:8d:ab:
0f:26:27:26:1d:77:d7:3b:e4:d8:25:b8:32:0e:68:
09:5b:4a:ab:ed:f9:d9:8f:18:91:5c:87:fd:05:93:
17:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BE:76:5E:F4:6D:0C:A9:C5:B7:84:63:A2:1C:37:3C:28:D6:D1:C7
X509v3 Authority Key Identifier:
keyid:9A:83:90:FF:CE:E4:62:82:CA:A7:1C:DD:78:F0:66:94:F8:D3:D5:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/moOQ_87kYoLKpxzdePBmlPjT1bY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:19:cd:0c:2e:2f:52:8b:0f:b8:59:c4:45:26:0f:e9:4b:f1:
9c:f3:d7:a9:0f:b4:f2:be:1f:39:ae:39:ec:59:1a:f9:2d:d3:
92:22:30:b3:3a:ec:f8:fa:4d:ab:5b:4c:b2:29:b7:71:54:0b:
93:c0:16:15:5b:4c:74:10:4b:ad:bb:56:3e:a1:ff:aa:3d:4f:
0d:0e:28:47:a6:21:c6:43:b2:e4:0e:0b:c0:c7:7e:2d:a5:26:
ee:95:94:32:4d:00:89:d4:2d:ad:70:d0:93:83:ec:3a:64:84:
81:25:6c:20:c4:81:cb:ef:b4:4e:5d:0b:cc:52:91:6b:6c:36:
fc:ca:da:af:84:2f:5d:d4:4f:4b:5e:4e:7e:87:40:c8:00:86:
9e:50:d8:7e:b3:ee:13:21:f5:f0:94:5c:b1:a9:c9:3b:99:00:
5f:5e:5d:2d:54:f1:ed:5b:b4:3e:fb:e4:d0:dd:1e:7d:e2:eb:
d4:2e:88:39:72:0f:0f:55:0b:31:ab:60:53:b5:a0:bb:7c:e8:
d0:36:68:86:c0:0d:f1:a6:3f:4f:3b:a0:b7:76:28:a0:e5:56:
e3:d2:2c:9c:ed:56:62:95:aa:2b:05:ad:04:41:7d:10:e5:56:
bd:4f:8a:83:45:6f:4a:76:ea:b3:07:06:da:5f:df:b4:f8:45:
cf:cf:39:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:27:23 2026 by rpki-client