
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
File: MoQzhPrmr2wxduHfdOkIgdbZdZI.mft (raw, json)
Hash identifier: 9rysg8F7Z6KtrL+XWOFHCGGNrIl90mRHSyoe4+kjdOs=
Subject key identifier: DB:31:D9:BD:8C:E1:5F:86:B5:62:82:93:87:7D:48:98:73:33:E2:3C
Authority key identifier: 32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92
Certificate issuer: /CN=A91A8666/serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
Certificate serial: 0A8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
Manifest number: 0A6D
Signing time: Tue 12 May 2026 19:41:48 +0000
Manifest this update: Tue 12 May 2026 19:41:47 +0000
Manifest next update: Tue 19 May 2026 19:41:47 +0000
Files and hashes: 1: MoQzhPrmr2wxduHfdOkIgdbZdZI.crl (hash: A5xF5zEwP48Rmsrwu6R231P1mxhvSFAWQ1NDFzkMRlg=)
2: CF2E99C88C0911EAAFF6CD27C4F9AE02.roa (hash: 8uX/hlFjGe/V8LokTmcu8tEggMYCwiDilR7VyuWjQ5g=)
3: CE7DA91A8C0911EAAFF6CD27C4F9AE02.roa (hash: tAcZwWZwhXU4QpEPlt2t2XMLszlvvkM98qyIqRR6Ejk=)
4: D02785608C0911EAAFF6CD27C4F9AE02.roa (hash: nPdlPveaGEn/o0RAhqipdNtydGVDIBxlaIUin+YvoPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl
rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2698 (0xa8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8666, serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
Validity
Not Before: May 12 19:41:47 2026 GMT
Not After : May 19 19:41:47 2026 GMT
Subject: CN=6a03827c-b2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:08:ae:02:b0:51:e5:cb:5d:27:1e:dc:14:a8:
35:ee:be:14:2b:f2:1e:ac:db:89:ca:ba:23:f1:84:
06:89:eb:13:f0:a1:56:5a:63:f4:4d:a1:40:03:d2:
35:40:bd:0d:c4:f2:d1:a5:62:09:95:38:30:49:d0:
f5:d0:d3:2c:a2:22:50:fe:54:7a:1d:dd:00:99:8d:
79:3c:9c:c5:14:3a:81:59:71:c8:9b:2f:0a:83:1e:
9c:3f:84:39:bb:2b:07:5a:66:97:16:bc:49:5e:7b:
5d:7c:0c:8d:4e:3a:d0:6b:7b:52:af:ae:b0:77:ac:
04:68:57:da:4f:a3:cf:08:53:da:d1:ba:31:a0:49:
70:13:bf:c0:57:75:06:7e:0b:3e:54:23:7c:24:05:
c6:ca:7a:a0:d0:b4:d7:96:bb:26:26:ed:33:1d:ac:
e0:72:37:96:94:d8:80:d9:ac:6b:3d:ca:78:c7:d3:
d9:21:f3:ec:a3:1c:fb:e1:79:cb:31:83:e6:a4:c7:
e7:46:73:63:f0:b9:a1:5e:c3:b2:04:69:de:ce:e8:
eb:c5:fd:07:9e:13:10:ac:6a:ca:d9:da:4c:93:c7:
31:0a:61:bd:87:25:76:b0:35:54:23:92:5f:ac:dd:
b2:63:20:0f:e0:00:6f:21:72:69:dc:f1:2c:98:4b:
09:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:31:D9:BD:8C:E1:5F:86:B5:62:82:93:87:7D:48:98:73:33:E2:3C
X509v3 Authority Key Identifier:
keyid:32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:d1:80:b8:4c:7b:9f:1b:d4:cc:a4:14:eb:0e:c7:75:34:05:
e7:46:0c:90:57:62:8c:fa:e0:d0:9d:de:40:eb:22:e2:6c:88:
d7:5c:f1:23:e5:92:db:31:7c:bf:ad:bb:29:14:d9:5c:30:19:
e8:4a:68:9d:bb:5b:63:76:45:e1:6d:12:ee:dd:db:33:18:8d:
52:c0:9a:64:8e:cf:02:0d:ca:a1:0d:da:39:47:08:c6:79:31:
df:47:15:e0:ab:1e:21:11:95:90:ab:5f:f7:25:c4:92:0f:3f:
0e:63:05:9b:29:5c:a7:e6:b3:b6:6e:b8:73:c4:e1:36:65:07:
3a:0b:e6:7b:e2:e4:5d:88:d4:0d:16:4d:d1:87:20:a9:5d:77:
ff:fe:87:9b:40:82:e7:a8:67:b6:cb:6d:3e:08:d0:3c:a4:39:
0b:79:e0:b7:0d:39:32:5a:27:1d:13:5b:6b:0c:ef:17:32:69:
a4:c9:76:70:ae:d8:38:b6:9d:2f:ac:f4:db:c3:ff:6e:43:ce:
77:f3:33:b9:b9:0c:e2:5d:d1:e3:51:30:1b:3e:e7:6c:7f:4a:
8a:c9:cf:fa:77:44:c6:be:fb:a7:28:57:85:95:bc:ba:81:6a:
04:91:cd:eb:9e:be:8a:8f:d1:99:a4:51:15:73:59:87:30:f6:
50:7d:9c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:19 2026 by rpki-client