
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
File: MOIGH3wgvYQ77lNywTIcNfux0-8.mft (raw, json)
Hash identifier: m+ch23qzJ5z/z/0IGLjGGwRhQrjl29a+43nJzehUS6c=
Subject key identifier: 36:8D:39:3D:F6:ED:C3:76:3C:75:48:4F:6F:E8:74:68:8E:CA:AD:73
Authority key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
Certificate issuer: /CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Certificate serial: 03C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
Manifest number: 039B
Signing time: Mon 03 Nov 2025 00:52:14 +0000
Manifest this update: Mon 03 Nov 2025 00:52:14 +0000
Manifest next update: Mon 10 Nov 2025 00:52:14 +0000
Files and hashes: 1: MOIGH3wgvYQ77lNywTIcNfux0-8.crl (hash: 7YVCo3g2mgF6J013A/GAbfDzAttjMU3/buNoly8xAfU=)
2: 96A539C2278211EF902D8D85C4F9AE02.roa (hash: rYHOV+63ySve2lLbeG71M0SUbKfF20oOi9uas6YcF+A=)
3: 80F23C7E1BC011EFB7916B7DC4F9AE02.roa (hash: uCCq9Jdh0+tPxus1xQJGSoE4R/e4MPlh9WCF8V7YB1Q=)
4: DAAECE38C77711EDA89BE25DC4F9AE02.roa (hash: Qa66QzBziJdm9L3gqGzaylVuTVRVatV8AuZ/B+L6zpk=)
5: BC17B1DCB96311EDA3070C82C4F9AE02.roa (hash: 83Wv2JxvwigdbCeSHljXaATCprN0duFOpBL+VJFLFxQ=)
6: 9B8A0A56F56F11EF84317935C4F9AE02.roa (hash: hUEi5Mxm1d2fdxW2k3TL0lrkSD9s1MOK7bqcVMZxr0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 00:52:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 969 (0x3c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC269, serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Validity
Not Before: Nov 3 00:52:14 2025 GMT
Not After : Nov 10 00:52:14 2025 GMT
Subject: CN=6907fcbe-638b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:00:5a:3f:68:96:2d:0b:8b:70:ef:60:4f:
9c:ac:5a:59:f4:ab:95:c7:99:d1:90:4e:f6:b2:63:
1a:3d:f6:52:fa:c2:fe:0a:b2:48:8a:1a:91:e8:13:
8b:df:64:05:34:18:72:87:42:da:40:ef:dc:d0:8b:
f1:a1:7c:ee:58:a3:4d:57:e8:f9:b5:1f:9b:a2:76:
21:c3:cc:e1:75:b0:c9:17:c6:e4:c9:07:11:6d:30:
72:52:c3:cf:18:8d:22:09:7b:f8:e8:99:f7:23:76:
53:ab:f3:da:0b:f2:cc:4b:28:1a:df:be:8b:5a:25:
8d:34:74:d9:04:2c:f1:32:5c:50:12:27:6d:bb:25:
b8:ee:0b:4b:aa:20:59:58:99:45:96:d6:8b:10:5a:
7e:e0:8e:f7:86:48:6c:e5:a9:b8:9f:12:8e:bf:b5:
a1:5d:f3:2f:6b:7f:15:95:46:05:a0:74:2c:50:76:
45:ea:9d:b0:25:a2:8e:e4:79:1d:94:66:7a:28:61:
2a:8c:2c:b4:a4:41:e2:15:3c:a7:ec:d3:19:fc:af:
7b:d1:ab:22:de:94:f5:c9:41:9d:4b:97:6c:04:0e:
67:cb:5e:27:46:da:02:d8:dd:94:05:1d:4d:ca:92:
7d:9e:d9:f5:f6:46:dc:77:be:46:9a:a3:25:1a:2d:
d6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8D:39:3D:F6:ED:C3:76:3C:75:48:4F:6F:E8:74:68:8E:CA:AD:73
X509v3 Authority Key Identifier:
keyid:30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:57:43:11:91:70:8c:da:b7:08:2e:28:93:a9:e4:21:75:df:
81:a1:5e:2d:ab:56:69:f0:9b:89:b0:f7:4e:af:c2:c0:86:9c:
e7:3c:c8:17:a1:d8:4d:df:e7:7b:b2:0f:8e:3b:ae:10:65:e5:
e3:4b:46:f2:c8:74:39:b1:58:d5:0c:8a:16:3f:33:40:09:8d:
c2:7a:eb:9d:a7:23:5d:29:00:cf:75:9c:87:db:35:91:73:17:
fe:27:c1:b8:32:a1:02:4a:c8:6f:9c:a1:f6:d3:bd:62:8c:98:
90:46:fe:33:5f:49:a0:2c:b1:3c:d9:6d:e4:e9:76:58:62:27:
21:2f:fe:82:5c:3d:a3:16:92:56:fa:09:3c:03:a5:1f:48:1d:
db:f0:14:7f:f5:7a:c0:75:41:b7:dd:fd:53:af:5d:3a:0a:b2:
7b:cc:88:6b:04:25:bc:13:b4:f9:d6:17:ba:61:43:a9:73:c2:
9b:f9:90:4b:83:5e:a7:25:5d:49:83:fe:0a:22:5a:27:fe:3e:
53:5e:02:e7:c4:b3:90:56:3c:2b:b9:42:f6:41:da:bb:72:f6:
fd:8c:dc:21:98:9c:c2:d5:3f:ec:ff:52:e8:ec:97:10:3a:54:
1e:25:bc:7b:1f:2b:f3:6b:25:7c:26:73:a3:4d:c1:0d:f5:e5:
5d:dd:f0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:16:56 2025 by rpki-client