
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
File: MOCAPeumAKyakmRMlveKjohdfFA.mft (raw, json)
Hash identifier: WD7z4iqNcfqkdpr3rMNQ2iOV/xTNpTb54XGSSHf6cq0=
Subject key identifier: B3:EB:16:68:45:8D:B1:62:15:D4:6C:45:10:D4:E9:90:07:92:6F:B6
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Certificate issuer: /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial: 05E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
Manifest number: 05C3
Signing time: Tue 24 Mar 2026 22:50:36 +0000
Manifest this update: Tue 24 Mar 2026 22:50:35 +0000
Manifest next update: Tue 31 Mar 2026 22:50:35 +0000
Files and hashes: 1: MOCAPeumAKyakmRMlveKjohdfFA.crl (hash: 7W7JpgT5x8x+ichDnGTYNhnoB1LmGtwEJCdcA8HVkSw=)
2: 04A930F6629211EE90D5AD6CC4F9AE02.roa (hash: JO9xwTDX2VEkQyhxcJmsHR0urhQbQnXAugWcM/cCSHY=)
3: 7A532A308E1D11EE9CC5535CC4F9AE02.roa (hash: tqfm8VN716zf1zv8pnoSL1lDbOKXA/4mIuo6tNqb0hg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1507 (0x5e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CEE3, serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Validity
Not Before: Mar 24 22:50:35 2026 GMT
Not After : Mar 31 22:50:35 2026 GMT
Subject: CN=69c3153c-7d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a1:b4:af:75:7e:35:d6:2a:c5:59:4c:d7:f4:
2c:ea:4d:ee:13:f5:37:95:b0:43:52:1c:08:9d:83:
85:bb:81:72:a3:9b:00:90:5e:59:f5:ab:6a:a0:30:
0e:b5:84:36:cc:ee:73:3f:5f:e7:7f:a8:e3:8c:86:
b6:a3:f0:5e:ed:77:4b:9a:75:1d:da:f4:7f:41:d1:
c0:1e:9a:ea:b3:24:c0:eb:c1:42:d3:f3:9c:be:f0:
5c:94:4b:3d:f8:24:34:36:b0:3f:64:9b:eb:e4:30:
e5:24:f8:c9:73:79:9b:8b:ef:b2:b6:7d:8c:46:c3:
35:ea:7a:8e:b6:7b:59:2b:91:bb:1a:26:74:cc:30:
e1:66:1b:30:e6:18:42:42:4f:fc:ae:e4:55:b9:0e:
d6:3e:ef:22:6e:99:9b:2b:49:67:0d:61:17:cd:34:
c8:b0:0c:5f:37:ea:89:4a:10:d2:74:86:14:e7:81:
02:f5:64:60:7f:ed:fc:1a:62:21:81:fd:de:00:ad:
9c:24:66:3f:a5:74:b3:26:fa:c6:ae:05:81:81:bc:
8e:bf:bb:93:7c:14:2c:0e:da:86:a2:d6:ee:d5:41:
c3:53:df:f5:1e:61:70:94:b6:3a:f4:0a:c6:a5:15:
94:00:2f:28:c8:f0:61:f5:f9:a5:10:e9:6b:ee:84:
ae:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EB:16:68:45:8D:B1:62:15:D4:6C:45:10:D4:E9:90:07:92:6F:B6
X509v3 Authority Key Identifier:
keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:46:00:63:b2:13:86:7d:d0:1d:52:18:d5:a7:cf:18:5f:d7:
ab:a0:1a:22:a0:b7:bd:5f:b2:b1:17:db:00:12:26:58:44:16:
d3:8a:88:04:f5:92:e8:91:c9:9b:06:85:e5:fb:a5:02:8e:2f:
d9:d9:36:a1:45:4d:73:87:f8:ec:f1:03:0a:fb:16:55:ed:87:
06:60:8a:0f:1d:1a:94:b8:89:e7:e2:e5:10:ea:f0:ad:cd:2d:
37:e6:0c:94:33:a1:c3:c4:65:03:3d:89:f8:9f:23:92:62:af:
7b:e2:42:bf:9f:47:51:6a:a1:88:7d:79:d0:c2:99:51:f5:19:
d9:dc:01:93:d7:85:0c:18:6b:6f:09:3b:4d:f2:c5:a6:09:1e:
88:b6:bb:15:15:88:8b:75:66:e6:e5:4f:b7:e1:00:1f:3b:dc:
7d:c9:91:bd:fa:4a:5f:09:be:bf:37:99:90:c7:0a:b9:29:4d:
2d:c2:10:cc:5e:93:72:09:ec:1d:9f:9e:09:57:68:62:91:18:
82:6c:38:9c:67:57:36:c1:f8:f2:3d:7e:1d:f3:32:b8:b1:84:
69:0e:e7:f5:ac:65:9e:3d:bb:e9:ce:6a:aa:73:76:a7:71:8c:
1f:ea:1e:e7:cf:8a:c4:f4:e2:f8:c1:b2:df:95:e0:a0:62:4f:
9b:4e:94:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:04:33 2026 by rpki-client