
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft
File: moOQ_87kYoLKpxzdePBmlPjT1bY.mft (raw, json)
Hash identifier: VZLwdWAGYImUI2CkOqdX13EOyPH5lzCbtMOO4ULtVp0=
Subject key identifier: 5F:26:4D:A1:AC:7B:6E:5B:A9:41:89:B8:DF:57:A2:EC:94:99:95:FD
Authority key identifier: 9A:83:90:FF:CE:E4:62:82:CA:A7:1C:DD:78:F0:66:94:F8:D3:D5:B6
Certificate issuer: /CN=A918B531/serialNumber=9A8390FFCEE46282CAA71CDD78F06694F8D3D5B6
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/moOQ_87kYoLKpxzdePBmlPjT1bY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft
Manifest number: 8E
Signing time: Fri 27 Mar 2026 07:05:06 +0000
Manifest this update: Fri 27 Mar 2026 07:05:06 +0000
Manifest next update: Fri 03 Apr 2026 07:05:06 +0000
Files and hashes: 1: moOQ_87kYoLKpxzdePBmlPjT1bY.crl (hash: hJrM7lB8/q7fTaXEogwS6Z8lvfyc9eyiULv1UZC0Wds=)
2: C0B3AE3056F511F0AF865C85C4F9AE02.roa (hash: RCoFguj1n8u2hp2q2pai6qJkikJctur+YF0ZJzaPOC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.crl
rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/moOQ_87kYoLKpxzdePBmlPjT1bY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 07:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B531, serialNumber=9A8390FFCEE46282CAA71CDD78F06694F8D3D5B6
Validity
Not Before: Mar 27 07:05:06 2026 GMT
Not After : Apr 3 07:05:06 2026 GMT
Subject: CN=69c62c22-6502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4e:f7:69:51:81:fa:a1:bb:81:bb:27:f1:44:
b7:15:c9:7d:79:a1:c1:91:df:15:ad:2e:ed:5f:d2:
2b:dd:66:06:26:ce:94:ea:50:88:f2:1c:da:74:20:
31:0f:92:f9:0e:80:ef:15:36:37:92:a1:67:38:2b:
f2:13:46:d8:b8:ab:87:05:43:a1:13:f1:a5:a7:d8:
b3:2a:d1:33:95:eb:db:e3:f8:87:66:a7:7b:2a:4f:
45:44:ca:d7:25:6e:ee:2a:0d:1c:af:59:ed:c8:b7:
72:62:44:b8:fc:4d:19:f5:7d:88:25:98:1e:7a:9d:
19:5d:70:53:a3:37:bc:38:6d:cf:12:dc:b1:01:b2:
c1:55:89:9c:d1:26:7a:71:81:2a:b6:e6:ab:f6:44:
15:7f:7c:10:e4:25:a4:2f:90:04:d7:e8:fe:75:fa:
5f:e8:ee:d9:76:6c:06:80:be:b9:3d:73:de:1d:50:
6e:20:12:7c:19:f6:eb:ca:ce:4d:9a:27:4e:96:4d:
b5:1d:5c:f2:06:12:ec:57:fd:9c:91:06:0f:92:4e:
54:0c:e1:09:cc:b3:0f:d7:60:6f:e6:1a:5e:45:4b:
91:29:f6:4d:e3:3d:d8:e2:c9:0c:d0:ae:84:43:d9:
b4:ca:3e:7a:97:71:0c:bd:76:ae:5f:56:81:43:81:
70:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:26:4D:A1:AC:7B:6E:5B:A9:41:89:B8:DF:57:A2:EC:94:99:95:FD
X509v3 Authority Key Identifier:
keyid:9A:83:90:FF:CE:E4:62:82:CA:A7:1C:DD:78:F0:66:94:F8:D3:D5:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/moOQ_87kYoLKpxzdePBmlPjT1bY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:fa:ed:33:6b:62:b0:28:28:41:68:2d:1f:97:9e:5c:03:74:
86:53:72:7f:68:6c:77:9c:d6:b9:c0:de:95:a0:e9:3e:d6:47:
ff:69:9e:ec:39:4d:65:f8:43:45:bf:12:03:c7:31:0c:1f:01:
e7:38:80:a0:51:b2:25:b4:43:f9:77:71:5c:1c:4f:82:3d:0b:
89:05:26:b9:74:50:d5:a9:33:04:8a:b1:76:67:3d:05:c3:6b:
20:80:1f:93:4b:3a:89:a6:e2:e3:1a:c6:00:32:d9:42:fa:0c:
6d:b6:ce:6f:7c:fa:02:c3:04:1b:db:5c:20:b7:11:0f:58:9b:
cd:77:80:3c:72:cc:39:d0:02:c4:3c:34:69:a5:a1:fb:55:0b:
97:6c:de:0d:5a:a5:f8:ab:11:5b:cf:31:30:ea:aa:a0:7c:4c:
21:4c:48:54:36:3c:c4:5f:3c:76:f2:36:8b:1f:b3:bf:5e:8b:
11:82:20:60:c3:b9:e1:c7:10:89:2c:4c:1d:3a:ac:0d:d8:df:
01:4d:27:08:7f:31:8f:97:2c:e2:b6:fb:22:83:06:84:b2:5d:
16:43:45:28:0a:73:1a:d8:73:05:4b:35:ce:1b:87:65:9d:9f:
46:9e:4f:ce:06:76:d7:1f:a8:43:d2:2d:7a:ef:18:c6:1f:ef:
88:91:2b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:03 2026 by rpki-client