
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
File: MOIGH3wgvYQ77lNywTIcNfux0-8.mft (raw, json)
Hash identifier: N1YDt+wDENS158UbmYodbB6YVsU/GrT/eXrc+46/cMs=
Subject key identifier: 99:D2:2A:ED:D8:D7:A0:9A:4B:39:67:DC:6F:C9:75:3B:0F:F5:0C:2C
Authority key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
Certificate issuer: /CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Certificate serial: 041D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
Manifest number: 03E5
Signing time: Wed 25 Mar 2026 00:20:26 +0000
Manifest this update: Wed 25 Mar 2026 00:20:26 +0000
Manifest next update: Wed 01 Apr 2026 00:20:26 +0000
Files and hashes: 1: MOIGH3wgvYQ77lNywTIcNfux0-8.crl (hash: SqwG8WBQ+lhRtY/J2r29bPV4x7ay+ny+Z2/j2zRSlRc=)
2: 9B8A0A56F56F11EF84317935C4F9AE02.roa (hash: sjpSFEfJfHB83JHegW9f77CP43Jk4MjH6G+ONPOjQR4=)
3: 96A539C2278211EF902D8D85C4F9AE02.roa (hash: zRt+bc55ZEJWia3T4UZGB0Xb9CQvFixH45VBiBP4lDs=)
4: DAAECE38C77711EDA89BE25DC4F9AE02.roa (hash: OfnYKuQhDrInznQzuFPB413oqI3j0lvfN0e0b1WjdCQ=)
5: BC17B1DCB96311EDA3070C82C4F9AE02.roa (hash: yx99PM/doynK6amMJCx4RnGFExv3AhkFjaVK6BVMsi8=)
6: 80F23C7E1BC011EFB7916B7DC4F9AE02.roa (hash: drWKWXcfieuwG7SjP+7RkCnFgsaCs32hkx5iXKT+hFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:20:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1053 (0x41d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC269, serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Validity
Not Before: Mar 25 00:20:26 2026 GMT
Not After : Apr 1 00:20:26 2026 GMT
Subject: CN=69c32a4a-ab88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:08:48:80:df:73:08:d0:2f:f9:2e:3f:15:
60:a3:11:43:8c:77:86:d5:d9:74:70:90:75:f8:3d:
2c:20:9c:d1:42:6b:4e:4b:09:ad:03:19:9b:9e:d5:
cd:55:47:8a:22:75:86:d0:6d:9e:5d:76:6c:7c:bb:
b8:4b:be:a5:8c:f6:11:03:84:8e:a9:9e:dd:b2:d5:
07:15:fd:a1:ef:be:b7:8c:ab:46:bd:58:49:ee:8d:
0f:b9:ae:cf:14:b7:fa:87:60:63:12:97:c9:db:df:
af:80:55:7e:55:1b:e6:e8:e9:1b:28:6d:5d:d3:2d:
69:01:f4:5f:d3:4d:fe:d9:d0:b1:ab:ae:9a:0f:42:
b3:d0:11:b7:f0:f0:c1:33:fd:23:c1:d2:49:bd:55:
78:fe:dc:c8:c9:40:52:71:b3:0d:82:a6:2d:1a:62:
0c:fd:d3:a5:d0:89:30:a8:72:1f:7d:db:8b:59:63:
06:d5:a8:8b:84:c5:79:22:b9:7b:36:1b:af:76:0d:
1f:1d:d2:b5:ea:24:3b:80:ae:5e:34:37:6d:0e:10:
82:d0:1f:5a:80:57:e8:b8:2b:9c:ce:80:1c:b7:fd:
3f:e0:19:cd:09:24:5f:42:79:90:ca:86:cd:2c:bf:
b9:7b:94:6d:2b:5e:6f:14:6b:6a:52:bb:65:bc:31:
a5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D2:2A:ED:D8:D7:A0:9A:4B:39:67:DC:6F:C9:75:3B:0F:F5:0C:2C
X509v3 Authority Key Identifier:
keyid:30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:4b:4c:63:21:bd:9a:b6:34:73:f3:e6:ff:fd:11:5e:73:a3:
d1:19:1e:73:81:ae:71:5e:4e:e4:0d:a0:ad:e1:08:6e:9e:0f:
4c:78:45:ae:5d:82:a7:03:48:ce:f5:e8:bf:84:42:98:71:b0:
02:0d:83:c6:a8:5c:81:62:ea:07:fa:07:3e:ab:de:9b:13:58:
32:08:68:22:2b:16:ff:c3:1e:d7:cd:ae:40:ec:7b:95:eb:3c:
8a:7d:e7:8d:70:d7:74:0d:42:cd:19:48:ff:f3:13:2c:0c:4d:
35:58:22:7a:b2:83:c5:32:9f:81:43:3d:63:e1:cb:f3:6a:72:
9f:6b:09:43:80:ef:27:6a:ed:77:45:14:36:ad:89:24:4f:f3:
a1:51:7a:a2:11:09:fd:9c:9d:37:0f:35:9b:9d:5d:a5:c8:3d:
55:c5:aa:9e:e5:31:ad:bd:f1:c0:bb:cf:c5:a1:20:aa:e8:1b:
c3:35:f2:a5:e2:fc:70:24:70:c0:98:96:e1:c4:b8:4f:9d:6a:
5c:d4:8f:40:81:a3:47:4f:da:83:1a:de:40:43:fc:cb:61:f3:
e8:b0:5a:89:1f:9f:56:ed:73:c7:e1:26:0e:d6:da:85:c6:05:
1f:96:98:53:db:29:92:e5:e8:ac:2f:b7:f1:bf:4c:ca:f4:fd:
49:75:43:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkMyNjkxMTAvBgNVBAUTKDMwRTIwNjFGN0MyMEJEODQzQkVFNTM3MkMxMzIxQzM1
RkJCMUQzRUYwHhcNMjYwMzI1MDAyMDI2WhcNMjYwNDAxMDAyMDI2WjAYMRYwFAYD
VQQDEw02OWMzMmE0YS1hYjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqkwISIDfcwjQL/kuPxVgoxFDjHeG1dl0cJB1+D0sIJzRQmtOSwmtAxmbntXN
VUeKInWG0G2eXXZsfLu4S76ljPYRA4SOqZ7dstUHFf2h7763jKtGvVhJ7o0Pua7P
FLf6h2BjEpfJ29+vgFV+VRvm6OkbKG1d0y1pAfRf003+2dCxq66aD0Kz0BG38PDB
M/0jwdJJvVV4/tzIyUBScbMNgqYtGmIM/dOl0IkwqHIffduLWWMG1aiLhMV5Irl7
Nhuvdg0fHdK16iQ7gK5eNDdtDhCC0B9agFfouCuczoAct/0/4BnNCSRfQnmQyobN
LL+5e5RtK15vFGtqUrtlvDGl/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJnSKu3Y
16CaSzln3G/JdTsP9QwsMB8GA1UdIwQYMBaAFDDiBh98IL2EO+5TcsEyHDX7sdPv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzI2OS9CQTY3NkUzMENG
RTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9NT0lHSDN3Z3ZZUTc3bE55d1RJY05mdXgw
LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01PSUdIM3dndllRNzdsTnl3VEljTmZ1eDAtOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzI2OS9CQTY3NkUzMENGRTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9NT0lHSDN3Z3ZZ
UTc3bE55d1RJY05mdXgwLTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVEtMYyG9mrY0c/Pm//0RXnOj0Rkec4GucV5O5A2greEIbp4PTHhFrl2CpwNI
zvXov4RCmHGwAg2DxqhcgWLqB/oHPqvemxNYMghoIisW/8Me182uQOx7les8in3n
jXDXdA1CzRlI//MTLAxNNVgierKDxTKfgUM9Y+HL82pyn2sJQ4DvJ2rtd0UUNq2J
JE/zoVF6ohEJ/ZydNw81m51dpcg9VcWqnuUxrb3xwLvPxaEgqugbwzXypeL8cCRw
wJiW4cS4T51qXNSPQIGjR0/agxreQEP8y2Hz6LBaiR+fVu1zx+EmDtbahcYFH5aY
U9spkuXorC+38b9MyvT9SXVDJw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:22 2026 by rpki-client