
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft
File: 8MOq6RfojmgUGpayJuBGAJqBlIM.mft (raw, json)
Hash identifier: UI56ETy/HHBqg902oNEx1VsjZ70uCRIMqUXmnYdwXfk=
Subject key identifier: ED:95:88:83:21:D6:C9:73:46:8C:F1:7C:5D:61:21:B8:38:7F:68:0B
Authority key identifier: F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83
Certificate issuer: /CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483
Certificate serial: 0209
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft
Manifest number: 0204
Signing time: Fri 17 Apr 2026 02:47:19 +0000
Manifest this update: Fri 17 Apr 2026 02:47:19 +0000
Manifest next update: Fri 24 Apr 2026 02:47:19 +0000
Files and hashes: 1: 8MOq6RfojmgUGpayJuBGAJqBlIM.crl (hash: BImurtrfiK+KC9eRLn0PSBXNKXOrHr42PXl/5A3s1go=)
2: 0366729A251511EEACA5881FC4F9AE02.roa (hash: 6JYWs3SxDEa6jpD0UwDNymCzd5Uc53y36eSD/5q1wxs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl
rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:47:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 521 (0x209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F48F3, serialNumber=F0C3AAE917E88E68141A96B226E046009A819483
Validity
Not Before: Apr 17 02:47:19 2026 GMT
Not After : Apr 24 02:47:19 2026 GMT
Subject: CN=69e19f37-f1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:68:c2:c9:d6:b7:8e:b7:4c:a7:18:7d:6e:0c:
1f:c1:58:8d:fc:48:1d:a5:15:0e:8f:18:0e:75:49:
ba:b2:96:1e:06:78:d1:28:d9:14:5d:a4:cf:3c:47:
90:1a:5f:69:6c:d5:3c:fc:fe:b5:08:25:61:e6:18:
1e:99:28:f8:0b:5a:b6:a4:3e:e3:dd:58:fe:9e:61:
ee:44:18:df:83:bb:e0:96:e0:f1:95:de:21:26:0c:
af:ea:3e:ad:4d:d2:2f:ad:c8:3b:f7:8a:e1:29:5a:
fe:db:76:29:15:96:ee:d8:2f:0c:2f:c9:7a:d2:3a:
f8:19:28:e8:9c:56:97:fc:78:84:c1:50:f0:e4:0a:
a6:c6:fd:19:3a:52:8a:07:4a:4f:94:0e:7e:4a:5a:
8d:39:c5:40:26:e4:7d:cf:6b:a5:92:16:02:a4:71:
8f:b1:6e:87:03:77:f6:72:dc:44:d9:68:a7:f2:22:
f7:30:0f:6f:36:a6:69:c4:8e:36:37:64:32:9b:c6:
d7:ed:40:1c:76:69:b5:dc:f4:e8:ab:28:1b:e5:4a:
55:02:8b:35:bb:a0:dc:88:3f:7b:82:42:c9:2b:28:
a2:1a:86:af:e1:a9:c2:39:a3:25:14:07:3b:f9:7d:
7b:84:20:44:04:43:d2:ad:8e:84:7c:5d:b3:3b:30:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:95:88:83:21:D6:C9:73:46:8C:F1:7C:5D:61:21:B8:38:7F:68:0B
X509v3 Authority Key Identifier:
keyid:F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5c:b3:ba:ad:9a:95:bf:ef:6d:03:a1:23:4b:5f:e1:0d:18:
04:45:29:e0:8a:a1:f9:b5:40:f4:9f:14:96:80:eb:4f:54:a4:
3b:a7:f9:d4:5c:45:8b:8c:b0:86:51:d8:d2:ea:e3:3e:16:69:
50:20:96:c8:fa:aa:b6:2e:da:2e:87:09:ed:e1:73:f2:07:6f:
e7:00:80:8b:17:3e:54:00:fb:05:4c:65:31:13:e7:ce:a7:23:
18:64:70:3c:85:80:9b:cb:dc:12:39:99:3a:f6:62:29:15:3d:
d1:14:90:d8:37:ea:89:f4:4c:a3:8e:d2:90:8e:d5:21:6f:62:
c0:0c:ae:1b:d4:51:ca:fc:5e:18:a8:76:f3:ac:36:79:c3:eb:
a9:a6:75:b8:22:56:11:fa:c3:fb:af:a9:93:58:a9:8c:72:65:
38:3b:48:92:09:04:ef:fe:04:7f:ec:3a:dc:3b:08:5b:cc:9a:
cb:1b:81:48:5c:c0:00:01:5e:a4:c5:06:48:69:cf:e0:ae:72:
b8:4d:8c:ed:12:99:5a:02:68:9c:5c:7f:8b:77:a8:61:e7:37:
b3:eb:13:9e:3a:3f:63:18:a6:f6:c6:3d:60:90:0d:ee:c9:d6:
c3:1f:4f:14:8c:14:d1:19:5d:1f:f4:8f:97:0d:06:da:1d:44:
82:25:18:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:36 2026 by rpki-client