
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
File: MOWJKI62UAJRDId7Rmq-GXU7284.mft (raw, json)
Hash identifier: 8T1rh2+ExrQ2A9PPRSBoLiJDaCMagHOmHFrO+S5cScM=
Subject key identifier: 2D:6B:05:3B:57:D1:07:9F:C5:36:06:64:A2:97:7B:63:1E:D3:AF:A6
Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE
Certificate issuer: /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
Certificate serial: 2244
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
Manifest number: 21EC
Signing time: Mon 02 Mar 2026 02:11:56 +0000
Manifest this update: Mon 02 Mar 2026 02:11:53 +0000
Manifest next update: Mon 09 Mar 2026 02:11:53 +0000
Files and hashes: 1: MOWJKI62UAJRDId7Rmq-GXU7284.crl (hash: XdDGwDOXRRYvLE41PjcMKk4gJeUe2Up+yTs4rb9Q8u8=)
2: 52644D4AA1E411E8AE269764C4F9AE02.roa (hash: AcklsjRNx+5Tl87ZCSnr+nKhs0vUfT9sBTNVYrvsdZ0=)
3: 869ED548F1E511E88BD7AA7CC4F9AE02.roa (hash: 6REJsbq1crWQe1RBVHIb3kv2oV963u4iX5SxxumAUhc=)
4: 89A9F0B436B511EEB14AD345C4F9AE02.roa (hash: u4JetaOWzMXn/9OVVoXfiQX/zpTvJHxG2pnCEY2Q6h8=)
5: 69A7319C4F7311E988A75B37C4F9AE02.roa (hash: aNgkAquiTrmAkAgx3eOEV0Kuy2J6l/EZLgSS59S6b0I=)
6: 49567968D07011F0A2852929C4F9AE02.roa (hash: 8PQXUEVhK3IEgEy9LdNTrlYJLQFMsbSKz5nwyZNxIbk=)
7: FEDAEBD8932711F0B9305C4FC4F9AE02.roa (hash: oLPGAtInmgg8LJAGqD2eTzOmv35jtP5ZiQradw61X2A=)
8: 49CAEF64D07011F08EAB2929C4F9AE02.roa (hash: 9yWXqNFWiFfzJFLfOdFyogGNA+hYJ2MkS7N+G+jaZ/Y=)
9: 96862188486111E8AA9B1B45C4F9AE02.roa (hash: qsZSEb0rwpplo93FKHewQ04M4ljPiZCm7esCnmdbdyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl
rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8772 (0x2244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
Validity
Not Before: Mar 2 02:11:53 2026 GMT
Not After : Mar 9 02:11:53 2026 GMT
Subject: CN=69a4f1ec-5da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:28:bb:d8:b4:3f:8f:42:17:33:e8:a2:d9:be:
29:1c:30:28:3c:35:e2:76:5f:5c:e5:c5:b7:ba:1c:
75:ee:d9:89:41:be:cf:bb:5e:80:9e:61:55:de:73:
55:63:66:8a:ea:bf:4d:6c:49:09:0d:e3:e5:02:fe:
06:43:1b:ae:6d:97:c1:0c:28:9a:44:46:e1:4d:bd:
91:85:e4:65:b4:f7:e4:72:d0:24:14:43:a6:c0:34:
0d:07:a5:c9:30:68:13:2d:d0:c4:6f:e8:bb:75:67:
85:fe:1a:ec:e3:5d:42:80:d9:55:3e:cb:62:98:a1:
6a:f9:50:06:42:ae:24:58:dc:c8:fe:9c:3d:43:6e:
0f:b5:8b:a3:fb:86:fc:00:41:f2:44:b6:9f:01:94:
50:89:6a:a9:62:0d:de:ee:d0:0d:5e:b5:0d:fa:da:
4d:52:d6:f6:78:e8:56:6e:f7:9c:a5:23:47:2c:8a:
2c:1e:ee:83:67:ef:2f:b5:82:f1:50:11:79:cb:4f:
3b:c8:98:ed:e7:33:60:f1:ff:98:4b:0b:ea:c6:7e:
53:80:b4:7b:6a:5f:03:62:29:bd:7a:0d:e1:be:95:
23:7d:df:3e:24:8c:3e:21:18:a4:de:ba:6e:9f:46:
15:85:5f:0c:c3:33:f8:10:d4:9d:94:9d:3c:49:22:
ef:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6B:05:3B:57:D1:07:9F:C5:36:06:64:A2:97:7B:63:1E:D3:AF:A6
X509v3 Authority Key Identifier:
keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:46:f2:2e:0a:cc:79:3d:5e:63:a0:74:32:c5:71:7a:23:c2:
0b:47:a5:1f:f3:bc:dd:2d:4a:3f:77:24:b5:c6:37:40:11:22:
f1:cc:c6:9d:5b:88:8c:ab:e9:fa:49:09:b6:a0:be:a6:4f:37:
89:e4:dc:92:aa:0a:31:17:42:7d:ec:2c:62:d4:53:42:2f:14:
7c:ce:66:77:59:28:ba:4f:1c:87:85:45:a5:c5:d2:a2:b3:f2:
cf:8e:5e:b9:be:39:13:15:d2:6e:75:de:1e:74:ba:e9:90:32:
81:20:48:7a:16:05:30:89:f6:f1:18:f1:cf:40:61:02:f2:ae:
d2:e2:58:ca:1a:fb:26:74:45:d8:87:7d:40:5f:b2:19:13:04:
4a:56:67:02:13:83:e4:16:12:72:2d:f0:6a:5f:5a:df:96:55:
5e:1c:b7:12:10:63:03:21:1b:5e:10:1e:86:66:79:d5:08:41:
81:44:fa:e5:5e:2d:4a:01:11:00:09:88:a7:62:04:9f:de:59:
53:2e:b8:8a:32:e1:ec:94:c2:aa:0c:18:38:e4:aa:ca:75:cc:
f8:b6:2e:9c:f5:70:6d:58:28:9a:24:3a:9e:89:6f:96:b3:be:
1e:94:74:fa:be:2e:66:3d:8c:ba:70:d2:7d:f8:30:f2:e2:85:
95:46:25:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:22:14 2026 by rpki-client