
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
File: MOWJKI62UAJRDId7Rmq-GXU7284.mft (raw, json)
Hash identifier: gvW/jSKYNQZLSDb0RQ6H/XstKinYtYUT44hSD6df8R4=
Subject key identifier: EB:6B:B3:27:F4:2E:35:44:51:BD:CA:C2:0E:CF:04:B0:76:6A:04:30
Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE
Certificate issuer: /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
Certificate serial: 2296
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
Manifest number: 223A
Signing time: Tue 28 Jul 2026 15:58:05 +0000
Manifest this update: Tue 28 Jul 2026 15:58:05 +0000
Manifest next update: Tue 04 Aug 2026 15:58:05 +0000
Files and hashes: 1: MOWJKI62UAJRDId7Rmq-GXU7284.crl (hash: yXHOvFsBkenCaewRqfkLDUdWrphoEmiwKZnVy0EKiS8=)
2: 49567968D07011F0A2852929C4F9AE02.roa (hash: fXw8iEy4mUz6Ydq/c5Fi1cFBZt4nFgOfj65Bh0EE5Ms=)
3: FEDAEBD8932711F0B9305C4FC4F9AE02.roa (hash: YlVAVfbeMminDExb53BOGS0tlb7LMegJLgNWwPjtYlY=)
4: 89A9F0B436B511EEB14AD345C4F9AE02.roa (hash: u4JetaOWzMXn/9OVVoXfiQX/zpTvJHxG2pnCEY2Q6h8=)
5: 49CAEF64D07011F08EAB2929C4F9AE02.roa (hash: 2uFl6WO6C7bmppWUwk7NOjHoc4OVQdxsDngD7OZe2Ko=)
6: 52644D4AA1E411E8AE269764C4F9AE02.roa (hash: AcklsjRNx+5Tl87ZCSnr+nKhs0vUfT9sBTNVYrvsdZ0=)
7: 96862188486111E8AA9B1B45C4F9AE02.roa (hash: qsZSEb0rwpplo93FKHewQ04M4ljPiZCm7esCnmdbdyk=)
8: 869ED548F1E511E88BD7AA7CC4F9AE02.roa (hash: 6REJsbq1crWQe1RBVHIb3kv2oV963u4iX5SxxumAUhc=)
9: 69A7319C4F7311E988A75B37C4F9AE02.roa (hash: aNgkAquiTrmAkAgx3eOEV0Kuy2J6l/EZLgSS59S6b0I=)
10: B643C13464D111F1AEDC7C0F6A47A888.roa (hash: 5hrXD8FvQIBDK27nv5xrgLxOE5V57p0m29HMAxji75I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl
rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:58:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8854 (0x2296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
Validity
Not Before: Jul 28 15:58:05 2026 GMT
Not After : Aug 4 15:58:05 2026 GMT
Subject: CN=6a68d18d-1b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8b:b0:0f:77:55:a5:5a:63:57:f4:32:8d:d7:
b1:b6:b9:89:95:74:7a:1f:3a:48:e7:3f:72:20:9e:
fa:3b:57:ac:e6:3f:c8:42:80:58:c7:59:a8:2c:35:
cc:30:0e:ac:53:33:5b:46:18:e7:ef:49:7b:55:0a:
2c:00:87:8c:4d:f1:a9:9b:40:52:55:73:aa:5e:07:
f3:0c:a2:cc:05:72:74:89:31:e0:d0:30:fc:2b:78:
bf:43:94:0c:28:82:d8:d1:e3:00:52:f9:3e:90:9e:
35:47:d9:12:3c:04:0d:67:8b:ea:77:f9:4d:5d:2c:
62:c2:bc:33:22:04:cc:8b:0b:90:af:a3:0b:d3:2b:
c2:fc:15:bc:0b:af:16:9a:be:ff:47:ea:f6:7c:92:
ae:c4:b7:06:f6:26:f0:c8:57:23:d0:dd:94:1e:85:
dc:94:ff:4b:23:6b:c7:7f:21:6b:b7:5f:10:6e:d6:
84:27:63:9f:b6:14:37:59:00:4f:7a:68:ac:08:52:
ee:90:6a:19:10:f1:f1:e1:6a:92:c2:db:fd:4b:89:
c7:fe:b3:a9:31:8f:7a:59:77:32:33:ef:79:a7:b0:
c7:3c:bc:d4:98:4e:f0:b2:97:55:9c:72:d0:10:ca:
45:23:3f:c4:1e:ca:5d:be:a3:3a:c3:92:5a:47:dd:
b1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6B:B3:27:F4:2E:35:44:51:BD:CA:C2:0E:CF:04:B0:76:6A:04:30
X509v3 Authority Key Identifier:
keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:80:d4:79:f5:22:ca:8d:c3:7d:e0:34:d9:c3:65:81:94:2d:
f1:41:fc:fc:50:a8:18:40:b4:56:3c:f9:71:1f:8f:47:84:b1:
2b:4c:ba:ef:15:18:65:5f:9d:3a:1e:f2:4f:cf:da:0d:95:55:
f5:24:c8:f7:bc:c1:e6:89:57:18:e7:66:2c:15:19:7f:1d:23:
69:0e:8f:7c:9d:e3:6a:0b:f4:9a:1f:4f:5b:a4:c1:59:c0:77:
df:e5:cb:d6:53:56:47:73:4d:09:49:38:d0:68:15:93:39:c6:
03:e7:a4:d1:8e:0e:63:84:4f:7d:f8:a7:fa:66:5a:1e:de:9a:
5d:92:2c:d1:8b:42:a6:c2:c5:64:a5:d2:26:a7:7f:be:d4:54:
29:64:93:02:53:78:09:94:a8:fc:11:9a:7d:d4:8e:a9:43:2b:
b3:7c:56:79:8e:59:ff:15:cf:5b:cd:e9:88:d7:55:f8:c5:99:
09:d1:43:20:da:fe:29:69:5f:4a:de:48:26:a7:66:69:32:55:
97:13:3b:c8:6e:82:41:d3:52:27:8d:49:fa:21:a1:9d:ed:2e:
0f:85:bd:26:4f:d3:57:05:27:c5:85:78:c1:e3:8b:5c:d4:70:
b1:a0:e5:5d:f8:2b:f4:38:6a:b4:b7:09:26:86:b5:76:04:cc:
07:a8:ab:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:37:26 2026 by rpki-client