
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft
File: MOI2HN2l66cF86ay--vl232vEPE.mft (raw, json)
Hash identifier: ETZ6gWRr/03Z4lcvIYXcHwFgK2BWDflOVf1MXxAFR9M=
Subject key identifier: 4A:27:38:61:FE:B5:7E:7B:6E:ED:52:6B:B4:B1:0D:7A:53:00:6E:3E
Authority key identifier: 30:E2:36:1C:DD:A5:EB:A7:05:F3:A6:B2:FB:EB:E5:DB:7D:AF:10:F1
Certificate issuer: /CN=A91386E8/serialNumber=30E2361CDDA5EBA705F3A6B2FBEBE5DB7DAF10F1
Certificate serial: 071B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft
Manifest number: 070D
Signing time: Wed 30 Sep 2026 22:26:41 +0000
Manifest this update: Wed 30 Sep 2026 22:26:40 +0000
Manifest next update: Wed 07 Oct 2026 22:26:40 +0000
Files and hashes: 1: MOI2HN2l66cF86ay--vl232vEPE.crl (hash: bSZ0YFaBiiqinphlpgNVHor2fF+MEfL1q5pC8jS+utw=)
2: 65C6DD42E15211EC8EEE9668C4F9AE02.roa (hash: UOYuzO+ZfFS4K1/Mm8Vt4itIcJTcKoKeJ7BaPumjJT8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.crl
rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 22:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1819 (0x71b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91386E8, serialNumber=30E2361CDDA5EBA705F3A6B2FBEBE5DB7DAF10F1
Validity
Not Before: Sep 30 22:26:40 2026 GMT
Not After : Oct 7 22:26:40 2026 GMT
Subject: CN=6abd8ca1-4751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:55:77:55:2e:a3:24:f6:f0:a0:52:cd:ae:b7:
c0:08:cb:a3:81:38:e7:f6:c2:ce:0d:31:f1:dd:e2:
47:b3:8f:6a:8c:56:19:d0:5d:de:7b:c2:e0:a9:d9:
2f:c1:f6:d9:c1:dd:48:71:d6:f6:fd:89:65:9f:e0:
07:56:47:93:99:a4:66:5f:00:a6:97:34:ff:ff:b1:
72:f2:79:8d:90:53:07:4c:c6:c9:55:b2:2c:3c:d6:
e4:97:3f:d9:5d:ad:3e:31:0e:ea:a9:1a:1a:96:4e:
ea:2e:9d:26:a7:2a:33:76:87:df:95:b0:ec:b0:e1:
11:bc:2e:7e:aa:69:53:01:07:5c:ff:3e:dc:a3:35:
01:3f:c4:53:a1:10:d8:01:7c:53:4b:be:72:7a:ab:
02:28:3a:6b:19:cc:42:17:e4:ab:0d:9c:8f:da:17:
2f:84:48:5e:40:14:fa:b4:1f:bb:7b:b0:d1:8b:e0:
bc:5f:02:80:f4:8c:a9:65:a5:e6:57:83:90:03:94:
db:09:8a:ed:11:c0:79:01:a1:13:20:65:5b:a3:6b:
06:df:45:32:54:75:28:19:31:05:32:0f:5e:43:7d:
fe:21:5f:e2:a8:aa:14:61:26:61:63:45:ed:5b:93:
ad:02:62:c4:6a:fb:32:f2:ff:8d:b3:59:45:f3:8e:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:27:38:61:FE:B5:7E:7B:6E:ED:52:6B:B4:B1:0D:7A:53:00:6E:3E
X509v3 Authority Key Identifier:
keyid:30:E2:36:1C:DD:A5:EB:A7:05:F3:A6:B2:FB:EB:E5:DB:7D:AF:10:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:75:1c:30:b5:f2:ef:5e:1b:61:34:b5:dd:d3:e9:67:8d:7e:
55:bc:54:97:46:19:df:18:aa:a0:1f:ca:73:28:7b:cd:05:90:
23:5c:f5:cc:92:c2:02:ed:cf:cc:c1:4d:8c:d4:1a:d4:73:d0:
e0:ab:7b:d9:1c:75:c0:1d:63:51:49:dd:30:c8:65:9e:c5:09:
fc:05:1b:cd:08:18:80:00:93:5f:82:e5:5c:0f:68:57:e0:b2:
ce:45:2f:10:53:e7:4a:b3:82:cf:ea:4d:5d:cc:bc:9c:92:a4:
e9:4e:2e:76:64:bc:de:dd:5e:6e:8d:2e:65:a8:64:ba:a2:03:
72:74:c3:e3:6e:00:32:3b:73:96:7c:22:06:12:27:5e:45:0f:
ff:16:c9:52:56:84:b2:fb:f9:e2:ae:89:92:ec:12:be:b1:a9:
64:eb:ea:56:49:f6:27:01:93:ec:50:ca:d9:6e:b6:fd:84:25:
c9:a5:d1:37:c2:ad:82:68:ac:db:f6:0c:04:87:eb:64:e0:c5:
23:cc:0b:86:37:11:89:de:e0:ea:b6:9a:0c:73:e1:df:23:1f:
35:9d:05:59:91:40:23:c6:95:e5:c7:6e:76:b1:1d:87:65:0e:
bf:49:34:95:bf:3c:61:d4:6e:2c:d6:2b:84:03:66:77:b6:36:
fb:49:36:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzg2RTgxMTAvBgNVBAUTKDMwRTIzNjFDRERBNUVCQTcwNUYzQTZCMkZCRUJFNURC
N0RBRjEwRjEwHhcNMjYwOTMwMjIyNjQwWhcNMjYxMDA3MjIyNjQwWjAYMRYwFAYD
VQQDEw02YWJkOGNhMS00NzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA11V3VS6jJPbwoFLNrrfACMujgTjn9sLODTHx3eJHs49qjFYZ0F3ee8Lgqdkv
wfbZwd1Icdb2/Ylln+AHVkeTmaRmXwCmlzT//7Fy8nmNkFMHTMbJVbIsPNbklz/Z
Xa0+MQ7qqRoalk7qLp0mpyozdofflbDssOERvC5+qmlTAQdc/z7cozUBP8RToRDY
AXxTS75yeqsCKDprGcxCF+SrDZyP2hcvhEheQBT6tB+7e7DRi+C8XwKA9IypZaXm
V4OQA5TbCYrtEcB5AaETIGVbo2sG30UyVHUoGTEFMg9eQ33+IV/iqKoUYSZhY0Xt
W5OtAmLEavsy8v+Ns1lF8450dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEonOGH+
tX57bu1Sa7SxDXpTAG4+MB8GA1UdIwQYMBaAFDDiNhzdpeunBfOmsvvr5dt9rxDx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODZFOC80ODg5NTk0RUE4
MDAxMUVCOTA2NTBBMTVDNEY5QUUwMi9NT0kySE4ybDY2Y0Y4NmF5LS12bDIzMnZF
UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01PSTJITjJsNjZjRjg2YXktLXZsMjMydkVQRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODZFOC80ODg5NTk0RUE4MDAxMUVCOTA2NTBBMTVDNEY5QUUwMi9NT0kySE4ybDY2
Y0Y4NmF5LS12bDIzMnZFUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAH3UcMLXy714bYTS13dPpZ41+VbxUl0YZ3xiqoB/Kcyh7zQWQI1z1zJLCAu3P
zMFNjNQa1HPQ4Kt72Rx1wB1jUUndMMhlnsUJ/AUbzQgYgACTX4LlXA9oV+CyzkUv
EFPnSrOCz+pNXcy8nJKk6U4udmS83t1ebo0uZahkuqIDcnTD424AMjtzlnwiBhIn
XkUP/xbJUlaEsvv54q6JkuwSvrGpZOvqVkn2JwGT7FDK2W62/YQlyaXRN8Ktgmis
2/YMBIfrZODFI8wLhjcRid7g6raaDHPh3yMfNZ0FWZFAI8aV5cdudrEdh2UOv0k0
lb88YdRuLNYrhANmd7Y2+0k28Q==
-----END CERTIFICATE-----
Generated at Thu Oct 1 10:47:28 2026 by rpki-client