
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
File: MoQzhPrmr2wxduHfdOkIgdbZdZI.mft (raw, json)
Hash identifier: dEQwjB5F00ojfU7C8+w5O5da/V53UVMgTgh2kc36HLQ=
Subject key identifier: 32:4F:26:FB:EA:00:D2:EC:83:A0:2E:4D:96:EC:B9:FC:33:13:77:2A
Authority key identifier: 32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92
Certificate issuer: /CN=A91A8666/serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
Certificate serial: 0A9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
Manifest number: 0A7D
Signing time: Fri 12 Jun 2026 19:38:14 +0000
Manifest this update: Fri 12 Jun 2026 19:38:14 +0000
Manifest next update: Fri 19 Jun 2026 19:38:14 +0000
Files and hashes: 1: MoQzhPrmr2wxduHfdOkIgdbZdZI.crl (hash: gyNGkHfxvTMSfhQJw7/2CwJqC809LxgMzVke5WAChGY=)
2: CF2E99C88C0911EAAFF6CD27C4F9AE02.roa (hash: 8uX/hlFjGe/V8LokTmcu8tEggMYCwiDilR7VyuWjQ5g=)
3: D02785608C0911EAAFF6CD27C4F9AE02.roa (hash: nPdlPveaGEn/o0RAhqipdNtydGVDIBxlaIUin+YvoPY=)
4: CE7DA91A8C0911EAAFF6CD27C4F9AE02.roa (hash: tAcZwWZwhXU4QpEPlt2t2XMLszlvvkM98qyIqRR6Ejk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl
rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:38:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2714 (0xa9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8666, serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
Validity
Not Before: Jun 12 19:38:14 2026 GMT
Not After : Jun 19 19:38:14 2026 GMT
Subject: CN=6a2c6026-fb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:71:fc:b9:21:d8:b2:d2:fc:c4:0c:78:7c:fa:
3c:30:10:2c:6d:af:38:e7:07:d6:1b:7e:5b:6e:b0:
4e:0f:dd:6c:04:c9:7f:02:45:cb:43:0a:d5:3a:35:
fe:9a:91:d3:4e:a8:68:35:0e:0d:30:36:3a:03:4e:
d9:6c:a5:72:b2:3d:47:c5:61:46:b2:0f:ff:9c:b0:
39:05:f7:37:d1:18:0c:bd:f1:e5:97:f3:11:30:4f:
cc:f4:30:29:1c:33:5f:f1:bb:99:3e:38:49:04:cf:
23:a2:9c:c8:f1:53:d3:ed:64:cc:2c:3c:d3:68:05:
3d:f6:64:86:f9:41:87:fd:94:ce:68:67:5a:2e:9e:
8b:09:d4:98:d4:da:f2:94:14:8d:9e:55:6b:23:c2:
0b:e5:4f:e4:58:5f:23:a4:0c:e3:63:33:0a:05:51:
23:8d:f2:a7:ce:b4:cf:cc:36:4c:5e:3c:ed:bc:95:
cc:2c:c5:e6:7d:21:0c:0a:94:97:16:38:4b:a9:7b:
e1:4d:7e:e9:13:55:e6:23:13:86:37:93:d9:f0:81:
1b:01:91:c6:c4:5e:36:59:3a:70:81:eb:26:a0:17:
fa:a9:53:c3:b4:bf:53:07:bd:87:fd:55:36:ff:f1:
e1:f8:e5:9b:66:99:17:9a:64:76:3b:f7:02:67:50:
53:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4F:26:FB:EA:00:D2:EC:83:A0:2E:4D:96:EC:B9:FC:33:13:77:2A
X509v3 Authority Key Identifier:
keyid:32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:37:54:53:0a:b4:b7:35:88:fc:c1:a1:56:71:2d:f6:ab:6c:
c9:a1:76:80:95:3b:56:fb:01:36:1c:35:4e:f1:e7:99:f0:e4:
41:ff:b9:34:96:22:f8:f8:eb:6e:1c:35:32:2a:f9:8f:0f:d6:
27:60:b8:c3:25:54:8a:c9:4e:52:48:36:1a:19:95:9b:6e:fa:
d8:6a:ad:f0:ce:a6:15:3c:c7:cd:14:6a:ee:8b:de:f5:04:a8:
b9:f3:45:cb:b9:58:32:82:27:2b:c2:c5:ce:00:ed:d0:62:62:
e5:9d:84:7e:fc:5c:d5:4f:db:ef:1b:8e:b1:a9:fd:67:0c:9e:
d5:11:cc:1f:6c:a6:4a:4d:c2:1e:22:d0:97:a0:77:fc:b7:29:
ba:b0:88:1d:ed:a1:21:d2:e7:51:24:a1:4b:b4:e2:66:40:f4:
d8:6c:f1:de:e4:c0:b1:e4:15:5f:06:4b:61:c2:91:77:fd:1a:
ef:c0:19:32:83:63:03:aa:fe:75:d0:54:56:6b:41:66:de:5f:
6b:70:c4:cf:9c:f6:d3:bd:0d:c4:c8:eb:fe:ed:54:4a:09:ca:
48:0d:d5:d8:e3:76:25:92:f0:4b:b2:4c:59:4c:bb:0c:2d:cc:
3a:95:6a:52:12:df:11:d0:63:db:4e:35:b2:be:e6:cb:0a:c1:
02:3b:84:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg2NjYxMTAvBgNVBAUTKDMyODQzMzg0RkFFNkFGNkMzMTc2RTFERjc0RTkwODgx
RDZEOTc1OTIwHhcNMjYwNjEyMTkzODE0WhcNMjYwNjE5MTkzODE0WjAYMRYwFAYD
VQQDEw02YTJjNjAyNi1mYjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4HH8uSHYstL8xAx4fPo8MBAsba845wfWG35bbrBOD91sBMl/AkXLQwrVOjX+
mpHTTqhoNQ4NMDY6A07ZbKVysj1HxWFGsg//nLA5Bfc30RgMvfHll/MRME/M9DAp
HDNf8buZPjhJBM8jopzI8VPT7WTMLDzTaAU99mSG+UGH/ZTOaGdaLp6LCdSY1Nry
lBSNnlVrI8IL5U/kWF8jpAzjYzMKBVEjjfKnzrTPzDZMXjztvJXMLMXmfSEMCpSX
FjhLqXvhTX7pE1XmIxOGN5PZ8IEbAZHGxF42WTpwgesmoBf6qVPDtL9TB72H/VU2
//Hh+OWbZpkXmmR2O/cCZ1BTxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDJPJvvq
ANLsg6AuTZbsufwzE3cqMB8GA1UdIwQYMBaAFDKEM4T65q9sMXbh33TpCIHW2XWS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY2Ni82MjNDRDZFNDg0
RjMxMUVBQjFGQkJCMThDNEY5QUUwMi9Nb1F6aFBybXIyd3hkdUhmZE9rSWdkYlpk
WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01vUXpoUHJtcjJ3eGR1SGZkT2tJZ2RiWmRaSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODY2Ni82MjNDRDZFNDg0RjMxMUVBQjFGQkJCMThDNEY5QUUwMi9Nb1F6aFBybXIy
d3hkdUhmZE9rSWdkYlpkWkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPzdUUwq0tzWI/MGhVnEt9qtsyaF2gJU7VvsBNhw1TvHnmfDkQf+5NJYi+Pjr
bhw1Mir5jw/WJ2C4wyVUislOUkg2GhmVm2762Gqt8M6mFTzHzRRq7ove9QSoufNF
y7lYMoInK8LFzgDt0GJi5Z2Efvxc1U/b7xuOsan9Zwye1RHMH2ymSk3CHiLQl6B3
/LcpurCIHe2hIdLnUSShS7TiZkD02Gzx3uTAseQVXwZLYcKRd/0a78AZMoNjA6r+
ddBUVmtBZt5fa3DEz5z2070NxMjr/u1USgnKSA3V2ON2JZLwS7JMWUy7DC3MOpVq
UhLfEdBj2041sr7mywrBAjuESQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:53:21 2026 by rpki-client