
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
File: MOfescUi55FZhZK2RTCIY8oADhg.mft (raw, json)
Hash identifier: qNWnsSJMy1ErHib0rNKNxWk0veKebirNclzWdA8/2zI=
Subject key identifier: 15:BE:87:68:59:15:BE:93:7B:34:F6:06:11:D2:92:C0:F2:9C:79:57
Authority key identifier: 30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
Certificate issuer: /CN=A91E76B8/serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Certificate serial: 1527
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
Manifest number: 1508
Signing time: Tue 28 Jul 2026 16:55:19 +0000
Manifest this update: Tue 28 Jul 2026 16:55:19 +0000
Manifest next update: Tue 04 Aug 2026 16:55:19 +0000
Files and hashes: 1: MOfescUi55FZhZK2RTCIY8oADhg.crl (hash: 7fXv6ZKiOT/0MhOqR83cqY6CnSbkqqubsLnueViugWo=)
2: ECBAA694826F11ED963DD626C4F9AE02.roa (hash: hNpWfzStSxoi1fPkxcbnh4V9DqsCkVyC0AQQMNFEtXk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5415 (0x1527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E76B8, serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Validity
Not Before: Jul 28 16:55:19 2026 GMT
Not After : Aug 4 16:55:19 2026 GMT
Subject: CN=6a68def7-ba97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:9c:94:f4:8c:1c:d9:87:ba:55:14:82:02:
a5:35:7e:7c:c8:5a:f3:09:a2:45:12:7e:4a:e9:6c:
29:86:53:67:06:a5:b9:9d:ec:be:5a:41:9c:c7:95:
a3:32:4d:59:09:d2:4a:5e:3a:7a:d0:f5:10:05:4a:
29:82:24:aa:34:3c:a5:9a:62:17:41:ed:2f:6a:92:
b4:b5:4d:e4:86:e1:a3:5d:1a:14:0c:a5:63:86:b7:
41:42:a6:66:c4:9f:97:56:92:5e:f2:79:5d:58:c0:
a4:a7:5f:61:83:50:87:81:cf:17:19:df:f6:73:44:
0c:9a:5a:75:86:69:d8:45:b7:06:f4:06:cf:d8:ab:
2c:cc:a8:65:10:79:52:22:68:51:db:66:d1:68:2b:
24:22:a5:0a:fe:9c:c9:58:2e:8f:d9:e1:cd:1b:48:
8c:fd:52:13:5d:92:ef:14:b6:9a:e1:35:4a:fc:b8:
42:63:a1:14:15:b8:64:d4:90:ad:4d:5b:ee:93:d8:
4d:f5:42:55:84:0b:90:bc:d0:23:30:41:8e:6f:a4:
c1:0e:94:05:36:35:d6:66:ff:73:a0:d0:f1:7b:97:
81:87:e9:c3:e8:0a:a1:68:a2:76:00:cf:e8:25:ab:
66:22:6f:ed:a0:1d:f0:7f:fa:ac:dc:5e:f8:ea:bf:
ab:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BE:87:68:59:15:BE:93:7B:34:F6:06:11:D2:92:C0:F2:9C:79:57
X509v3 Authority Key Identifier:
keyid:30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:f0:6e:14:4e:9e:a5:47:7f:a4:c5:81:8e:7d:0b:3d:6f:7f:
14:61:45:00:57:d0:d7:b5:5a:7f:9a:49:93:2c:aa:d5:95:3b:
9e:17:b7:ef:ec:b8:88:cb:02:fb:87:e8:83:a1:27:f9:00:a8:
b8:82:6f:65:ba:78:0e:1c:45:f8:d8:87:b5:50:d0:db:81:87:
30:de:48:2c:8b:85:70:a6:c6:61:0c:58:d5:bc:d1:c6:19:3d:
02:59:85:9a:38:49:19:29:f6:4f:cf:1a:33:de:99:aa:39:cb:
e3:99:9b:e3:fa:7d:0d:83:c5:52:f7:e5:39:30:4b:c3:d8:55:
e0:2d:78:a9:1e:04:58:2e:b4:9a:9d:6c:f4:9d:f6:14:65:f1:
ac:3d:d4:fd:b6:cf:18:d2:c9:43:f5:b0:c1:e2:88:97:0a:46:
79:af:d0:2f:1a:b6:c8:e0:93:d5:cf:88:b2:62:55:80:e8:69:
e0:d5:4c:35:f8:6a:b6:39:32:ac:2c:5c:9a:b0:cd:ed:ae:7f:
f0:36:a8:ef:83:24:6f:38:28:1a:8a:7c:20:3e:79:f5:2a:b2:
67:1b:2a:65:8d:77:78:49:c8:3d:78:bd:d4:72:84:a3:9d:ad:
2d:1c:d5:31:13:9e:2c:a6:58:4c:72:30:74:04:74:f1:a1:79:
5d:ef:2c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:50:58 2026 by rpki-client