
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
File: MoQzhPrmr2wxduHfdOkIgdbZdZI.mft (raw, json)
Hash identifier: SjxPkAuvDLEX3GmXvLWpDnJI0KqXrdHOsRIybEH1Khw=
Subject key identifier: 0B:E4:0F:73:01:68:B7:D5:00:0B:7E:DE:EC:F1:07:EB:30:97:55:77
Authority key identifier: 32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92
Certificate issuer: /CN=A91A8666/serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
Certificate serial: 0A5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
Manifest number: 0A46
Signing time: Sat 28 Feb 2026 19:58:18 +0000
Manifest this update: Sat 28 Feb 2026 19:58:17 +0000
Manifest next update: Sat 07 Mar 2026 19:58:17 +0000
Files and hashes: 1: MoQzhPrmr2wxduHfdOkIgdbZdZI.crl (hash: sUy9OQ+5+0FBT2dD8JR4YKR+0j/XwpA9vKy5TPU3Vd0=)
2: D02785608C0911EAAFF6CD27C4F9AE02.roa (hash: Jhv7IIpmMM0oZ7iAKkds1Qiv2p8w6iMgKtc0KDhD18s=)
3: CF2E99C88C0911EAAFF6CD27C4F9AE02.roa (hash: WlJN5u1oi9WPrD229vbsWsLGL/hLS+xCYNJ5+hmxu8E=)
4: CE7DA91A8C0911EAAFF6CD27C4F9AE02.roa (hash: 9Z+s94Y5T1K7IVPTPlx/BgDTI68R9a8i/jpS5x1Nr4c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl
rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:58:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2653 (0xa5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8666, serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
Validity
Not Before: Feb 28 19:58:17 2026 GMT
Not After : Mar 7 19:58:17 2026 GMT
Subject: CN=69a348da-a93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1c:ba:5f:f9:13:d4:bf:98:87:ed:89:01:fa:
d9:15:58:48:d2:94:cb:b3:c7:a0:69:54:53:9f:a2:
af:13:29:ad:0b:c2:4d:2c:23:f5:06:d7:7e:84:a7:
6f:78:dd:27:0e:8c:b8:ce:52:d3:1a:ba:c2:be:fb:
6c:fd:6a:82:95:72:ed:78:5e:14:47:5b:00:f2:89:
5e:3b:37:ba:84:77:51:0b:da:91:8a:eb:e7:c7:71:
34:ee:5f:be:3a:f3:fb:ce:80:ae:b2:99:31:39:9a:
26:25:fa:9a:c9:47:16:94:3a:a1:60:d2:54:ae:7e:
24:b2:16:a9:4f:f0:15:1d:60:d3:fd:0e:90:5c:27:
84:01:7e:1c:dd:ee:71:f9:d4:43:34:46:2e:65:03:
6f:cc:c3:ba:5c:9a:fd:17:95:72:c0:61:d6:2b:27:
62:ce:d6:1c:68:f1:cc:67:3a:0e:b4:17:20:08:55:
e3:48:b0:0c:2a:7b:d0:5e:12:e2:c8:67:72:f5:e3:
f7:16:52:db:bb:6e:10:b5:f0:01:e1:74:64:f9:f9:
62:d5:2c:0a:53:0f:73:7d:86:81:6f:0b:66:a5:e3:
2f:36:d5:3a:df:8f:68:0c:19:a1:c4:c2:48:01:12:
ac:c2:04:db:a6:88:59:9b:12:af:60:2d:0e:6d:9d:
ee:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E4:0F:73:01:68:B7:D5:00:0B:7E:DE:EC:F1:07:EB:30:97:55:77
X509v3 Authority Key Identifier:
keyid:32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:62:c0:44:37:da:23:52:4a:e0:52:9a:e2:cd:c7:52:0d:51:
6f:ab:85:bb:3d:72:63:58:8a:15:11:e4:95:6e:eb:75:1c:08:
93:c3:86:bc:3a:eb:10:b6:4d:ab:5e:45:30:4b:13:e1:f5:f8:
a5:63:59:84:be:e2:6e:b7:60:9b:66:0f:c2:11:54:9a:9b:78:
dc:ff:ec:74:c6:61:5a:2f:dc:90:86:cb:d7:d1:08:00:a2:47:
b5:e0:09:e8:b5:a4:42:ce:0c:8c:44:e6:9f:6a:bc:e8:0c:d2:
cd:5d:ca:94:b1:2f:0a:00:2f:80:b8:9e:29:dc:2f:46:34:b4:
1a:8c:fb:a3:72:95:a2:da:e9:da:99:b8:b6:ce:72:8c:7e:0b:
6a:d7:12:7b:bc:02:1c:d0:5f:e0:f3:99:f5:16:4e:88:8f:83:
6b:e6:b6:a4:de:c7:5c:f4:20:3c:84:2c:1f:35:4c:18:99:ed:
c2:07:d1:12:0c:1c:36:60:f1:19:3b:f4:ef:f7:54:11:e6:73:
90:13:71:77:90:99:07:68:b8:c4:74:09:4a:30:45:33:6d:8e:
b2:a7:64:51:9b:74:96:ee:87:43:dd:36:b2:35:15:ca:7b:00:
e8:55:7d:9b:a3:e6:ad:c4:0e:56:79:22:ae:5a:40:5b:ae:72:
b2:7a:be:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:42 2026 by rpki-client