
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.mft
File: MoI4D1fWFw9Fz1IOeywaPNovyq0.mft (raw, json)
Hash identifier: 5nw+/l8cPZ4fkX9XG3ydS5eNbc1JoEYb8W+R0q648og=
Subject key identifier: CA:35:79:0F:E5:13:BF:DB:19:93:2C:4E:64:49:78:45:90:6D:34:84
Authority key identifier: 32:82:38:0F:57:D6:17:0F:45:CF:52:0E:7B:2C:1A:3C:DA:2F:CA:AD
Certificate issuer: /CN=A91EE1DD/serialNumber=3282380F57D6170F45CF520E7B2C1A3CDA2FCAAD
Certificate serial: 03A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoI4D1fWFw9Fz1IOeywaPNovyq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.mft
Manifest number: 039B
Signing time: Wed 29 Jul 2026 01:28:42 +0000
Manifest this update: Wed 29 Jul 2026 01:28:42 +0000
Manifest next update: Wed 05 Aug 2026 01:28:42 +0000
Files and hashes: 1: MoI4D1fWFw9Fz1IOeywaPNovyq0.crl (hash: eatgGaVcdUgm/9Cms/ezNyB51PAa+dhlCErI+arNeQw=)
2: 7D857A30F11811EC86D3AD4BC4F9AE02.roa (hash: r2JG1zM2cuTIas4I/ZZlepBtJzxMAtznZE9q7NqgJnI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.crl
rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoI4D1fWFw9Fz1IOeywaPNovyq0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 01:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 931 (0x3a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE1DD, serialNumber=3282380F57D6170F45CF520E7B2C1A3CDA2FCAAD
Validity
Not Before: Jul 29 01:28:42 2026 GMT
Not After : Aug 5 01:28:42 2026 GMT
Subject: CN=6a69574a-d1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:af:ce:d0:f9:01:74:ea:e4:13:76:1b:fe:79:
9c:b8:89:a0:13:f6:f9:65:22:d3:8e:72:93:8f:0a:
30:fb:7e:4b:d0:72:26:f6:71:30:ef:94:7f:e6:52:
86:54:0a:e8:8b:f3:c3:27:b8:27:63:2d:cd:65:d7:
40:33:a5:70:f4:93:70:bf:18:60:da:fc:cd:92:c4:
7b:c8:34:0b:89:5b:ec:74:d0:a1:64:7d:57:85:fc:
bd:bb:95:7a:db:5c:34:80:49:ee:d7:2f:28:0c:1c:
3d:03:29:d8:38:90:53:c0:2c:7d:b8:bb:f6:14:9c:
11:ad:a6:29:01:ab:92:62:8c:07:a8:fa:35:0f:70:
72:dc:f6:67:3f:98:a0:76:70:cc:f1:e5:63:e5:c5:
97:07:2d:94:47:68:d6:00:75:ae:95:e7:4c:b9:f8:
90:af:10:97:a2:fd:47:33:dc:7f:cc:c3:1c:48:d8:
4f:b0:db:61:62:15:e5:b5:99:c6:fe:be:8e:ab:f0:
a0:80:7e:95:d1:39:33:db:89:9f:4b:51:66:47:4e:
49:88:bf:d1:2b:db:6d:10:10:c8:3b:02:4d:27:23:
f5:fa:74:12:44:83:f8:81:74:c1:a2:4e:4c:51:fb:
56:bc:8a:08:ce:72:90:ca:30:80:44:1a:0d:54:ba:
4e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:35:79:0F:E5:13:BF:DB:19:93:2C:4E:64:49:78:45:90:6D:34:84
X509v3 Authority Key Identifier:
keyid:32:82:38:0F:57:D6:17:0F:45:CF:52:0E:7B:2C:1A:3C:DA:2F:CA:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoI4D1fWFw9Fz1IOeywaPNovyq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:c7:84:a8:79:e6:d1:55:bc:bb:c2:65:f3:26:ec:40:23:97:
07:3f:79:a9:48:5c:75:9d:ca:30:e6:01:c1:ca:61:34:20:ad:
83:c0:f9:4c:3c:76:aa:af:27:21:a1:e8:c0:09:b3:d0:22:00:
fd:27:d3:34:2a:61:22:ca:6b:7f:2f:c8:51:7d:7c:8b:90:07:
69:66:42:12:93:80:0f:c4:d6:92:a8:2e:8a:40:b5:0b:ad:bb:
e1:a3:71:f0:2d:52:85:64:44:d0:24:b0:75:9f:7d:1a:39:c2:
cc:37:0a:2d:c5:8b:12:c2:5d:b2:d6:cc:69:0a:ca:e4:3c:49:
6f:4d:47:4b:c4:10:6b:a8:e9:85:9e:ac:26:b8:42:84:cc:e7:
6c:37:e9:82:cb:17:c2:5c:00:75:5f:fa:75:6f:ee:75:37:31:
82:6c:78:53:ee:ed:46:25:f1:cf:9c:0c:eb:d6:e9:a8:2d:f2:
49:0b:65:87:3e:f3:46:e8:67:84:1d:20:61:0f:67:6e:61:84:
24:33:fa:13:82:e9:25:7b:ba:fb:18:fd:93:22:d8:e6:5e:ff:
b6:dd:f8:67:7b:5d:c2:0c:78:33:67:b7:98:fc:77:4b:31:40:
a8:1a:0f:43:fd:56:99:3f:cd:df:c6:3d:9a:a5:13:b5:ba:ae:
f2:6a:2d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:50 2026 by rpki-client