
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
File: MOCAPeumAKyakmRMlveKjohdfFA.mft (raw, json)
Hash identifier: 7AuDbK2pefqABi9QPcd0IPlZcI/YVHHRw4wF3lkK7II=
Subject key identifier: 44:FB:BC:3F:42:14:C1:93:36:42:EB:D9:46:8A:38:52:5F:17:53:12
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Certificate issuer: /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial: 0620
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
Manifest number: 0600
Signing time: Wed 22 Jul 2026 23:42:56 +0000
Manifest this update: Wed 22 Jul 2026 23:42:55 +0000
Manifest next update: Wed 29 Jul 2026 23:42:55 +0000
Files and hashes: 1: MOCAPeumAKyakmRMlveKjohdfFA.crl (hash: 6FfdtV+/wjT6A4jQ9Ym0eXKG/DtW7TF8HTDcnTXsa70=)
2: 7A532A308E1D11EE9CC5535CC4F9AE02.roa (hash: tqfm8VN716zf1zv8pnoSL1lDbOKXA/4mIuo6tNqb0hg=)
3: 04A930F6629211EE90D5AD6CC4F9AE02.roa (hash: JO9xwTDX2VEkQyhxcJmsHR0urhQbQnXAugWcM/cCSHY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:42:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1568 (0x620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CEE3, serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Validity
Not Before: Jul 22 23:42:55 2026 GMT
Not After : Jul 29 23:42:55 2026 GMT
Subject: CN=6a615580-65d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:6b:a1:fa:48:ae:e9:0d:22:8d:bd:f4:81:
da:ef:db:51:3a:83:0c:2c:08:fa:15:35:3d:d6:6e:
fd:f9:92:6e:0b:5d:e6:47:f0:12:93:26:71:6d:63:
7e:c6:8f:09:68:b0:31:44:e9:6c:e7:35:c3:f0:ef:
eb:72:be:f4:fc:44:48:92:7b:c4:f6:72:ca:e1:fa:
7c:8e:00:53:7e:77:9c:c0:62:a7:d1:bf:cc:e1:ee:
dd:71:ce:3b:75:b7:93:84:1a:0d:56:c3:e5:99:8f:
13:a7:68:51:bc:3d:19:48:b1:47:64:1f:e8:68:3e:
2c:51:85:a0:e0:bd:6e:c5:c6:7c:6c:63:c4:4e:71:
1f:4f:42:a7:6e:dc:d6:eb:90:aa:f3:d5:8b:76:0e:
f2:46:34:9b:bd:0b:04:5f:49:23:9a:f9:d3:05:03:
ad:8f:cd:ec:db:a2:fe:67:dc:b8:4b:44:1b:da:2d:
0e:3b:6c:3e:99:3e:55:a6:7f:3d:d9:46:77:ba:d5:
12:aa:18:3c:55:b9:15:05:e3:3e:b8:61:a3:ae:34:
e7:23:67:57:ad:10:41:48:c6:6b:84:6e:7e:47:e7:
32:ca:00:6a:a9:84:a8:e4:14:d5:30:08:f6:15:db:
61:29:fa:89:4f:9c:7d:1e:d8:21:e3:09:2a:62:76:
b8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FB:BC:3F:42:14:C1:93:36:42:EB:D9:46:8A:38:52:5F:17:53:12
X509v3 Authority Key Identifier:
keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a5:1c:ce:2b:b1:0e:4c:07:2d:08:45:9d:82:3c:05:d8:8b:
5d:9c:a9:d7:1a:6f:02:aa:e3:74:f7:f4:d6:43:05:0f:a2:26:
dd:af:72:b3:ee:e4:5a:e0:f7:aa:70:b6:09:dc:3c:5f:ed:1c:
10:c3:cb:8b:ae:e7:23:56:d0:a6:58:eb:81:7b:31:61:8f:07:
68:67:1c:eb:7a:fa:42:6f:39:1b:1e:a4:a9:f8:18:0d:f6:e5:
a4:da:f6:23:01:ed:30:da:04:17:55:ac:eb:fa:f6:68:c3:06:
bc:68:6a:5d:f0:e9:32:8a:a5:29:a4:93:fe:07:3b:12:11:07:
66:ef:27:a1:e7:d3:30:e2:26:d8:10:4a:f9:dd:61:33:94:be:
34:a5:be:e4:e7:9c:5b:4a:c2:72:d9:4b:e6:ce:06:43:c3:6b:
69:94:09:11:51:59:f5:c0:05:11:de:e1:da:a2:4b:c1:dc:33:
6d:78:43:0a:0b:b2:48:2d:81:6a:55:7d:fb:06:81:a2:3d:a9:
1e:5b:60:06:69:31:08:13:1a:47:4e:c4:fa:e3:fd:3f:f8:18:
2b:31:49:d2:4e:96:ba:b2:e1:01:06:0c:18:00:18:15:e7:c4:
b3:57:34:0d:58:76:05:b2:be:24:06:55:5a:bd:da:96:5d:6f:
0a:a1:1f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:48 2026 by rpki-client