
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
File: MOCAPeumAKyakmRMlveKjohdfFA.mft (raw, json)
Hash identifier: U2suOZcATjhetWyokPqoPkM4Y5hLuwPEWg/6Qft5oLM=
Subject key identifier: C9:DD:B4:1E:D6:EA:3B:4B:C5:54:1B:4E:69:23:FA:69:A2:1C:D6:D0
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Certificate issuer: /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial: 0641
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
Manifest number: 0621
Signing time: Thu 24 Sep 2026 22:44:40 +0000
Manifest this update: Thu 24 Sep 2026 22:44:40 +0000
Manifest next update: Thu 01 Oct 2026 22:44:40 +0000
Files and hashes: 1: MOCAPeumAKyakmRMlveKjohdfFA.crl (hash: sJZoyTGuAS+mnTA/XePp3feogmr0pnXv1fgbwWm6imQ=)
2: 7A532A308E1D11EE9CC5535CC4F9AE02.roa (hash: tqfm8VN716zf1zv8pnoSL1lDbOKXA/4mIuo6tNqb0hg=)
3: 04A930F6629211EE90D5AD6CC4F9AE02.roa (hash: JO9xwTDX2VEkQyhxcJmsHR0urhQbQnXAugWcM/cCSHY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 22:44:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1601 (0x641)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CEE3, serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Validity
Not Before: Sep 24 22:44:40 2026 GMT
Not After : Oct 1 22:44:40 2026 GMT
Subject: CN=6ab5a7d8-40cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:bc:aa:4f:cd:aa:05:c4:12:16:12:2c:92:
f9:5a:f9:54:7b:73:61:99:e6:11:ed:37:4e:8d:45:
bb:90:c0:3f:41:59:93:07:31:48:57:76:74:68:e7:
54:4d:86:a9:2b:eb:4a:37:b2:2d:f0:cd:94:1e:01:
07:fc:fc:da:55:24:eb:1f:33:bc:e4:8a:af:63:7c:
10:27:e2:08:bb:5d:37:e0:18:84:22:36:68:8d:52:
72:ea:d0:c7:14:21:45:5f:ff:06:89:f1:d6:26:d5:
67:5f:e1:33:f2:aa:e9:98:7b:4e:3f:82:1c:37:93:
d0:9b:44:36:b5:4b:fe:92:c5:b5:18:1b:da:fe:ca:
2f:5a:f9:c1:98:a2:56:28:a0:c0:db:1f:0b:67:96:
cc:2f:e4:e7:18:7a:96:28:05:2c:ed:d5:e0:37:76:
0f:0a:b6:6b:a4:29:96:cb:bf:a0:c4:f5:c6:ee:d6:
ed:62:e4:57:04:02:10:ff:38:a2:e0:11:f2:ba:2d:
5b:10:da:c0:22:51:8e:3b:9e:59:2e:ae:12:31:2f:
f0:b6:fa:8b:87:2a:32:a0:7b:dc:d7:1c:cb:3c:ed:
19:05:44:c4:bb:b0:2a:89:26:97:f6:70:a5:6c:43:
e7:be:78:79:da:44:48:2a:79:47:49:a7:78:aa:5b:
ad:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DD:B4:1E:D6:EA:3B:4B:C5:54:1B:4E:69:23:FA:69:A2:1C:D6:D0
X509v3 Authority Key Identifier:
keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:04:92:32:c6:8d:21:36:df:1c:37:7d:c7:56:df:62:db:21:
d3:7e:90:77:b4:3c:19:39:8d:74:36:d7:10:f9:1e:a2:5e:d9:
c8:12:9e:f6:2b:ee:78:ae:e5:1f:d3:54:38:6d:a0:08:72:46:
5f:6c:4d:8e:23:75:31:c7:9c:41:2a:2d:ec:e1:79:ce:f2:83:
54:42:96:e4:cf:f1:69:c9:12:76:9f:ea:a5:52:7d:0d:e4:e8:
cb:5b:ae:15:da:da:b4:37:47:c8:31:66:18:0b:fc:a4:23:07:
68:82:f0:1f:23:70:5c:ea:be:7a:06:2c:bc:a2:f4:66:e7:2c:
ad:5b:05:9a:81:97:15:3c:0d:d9:62:8b:83:99:2a:1e:f6:a8:
e3:a5:89:05:ac:f7:85:bf:e0:cf:98:73:d5:13:29:04:85:0f:
3a:3d:7a:ca:b2:b2:4e:86:64:13:5a:b4:0f:d4:dc:ad:e9:d1:
c4:b8:c1:f2:66:eb:30:73:45:c8:d4:d9:41:a3:c3:5f:b8:e9:
46:cf:2c:fa:a8:75:fc:15:f0:d0:50:b5:c0:42:98:7b:b8:79:
c9:c3:4a:d2:7a:73:5f:9d:72:4a:29:ca:50:2d:a8:42:09:bd:
93:95:f3:be:7e:0c:5d:19:8e:6a:06:df:b5:e1:94:13:42:b4:
e4:32:4f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:02:45 2026 by rpki-client