
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
File: MOIGH3wgvYQ77lNywTIcNfux0-8.mft (raw, json)
Hash identifier: heQfAeMj4KMskReHSGDmTvK0jcSRffHoTMSZrPLxtKY=
Subject key identifier: D7:6B:CF:CE:A9:F1:22:3E:72:91:F1:C5:5F:4C:09:4F:50:54:7B:EA
Authority key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
Certificate issuer: /CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Certificate serial: 045A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
Manifest number: 0422
Signing time: Thu 23 Jul 2026 01:22:00 +0000
Manifest this update: Thu 23 Jul 2026 01:22:00 +0000
Manifest next update: Thu 30 Jul 2026 01:22:00 +0000
Files and hashes: 1: MOIGH3wgvYQ77lNywTIcNfux0-8.crl (hash: mtuiU1KaGhr/oljoLy2/iK/+y6m7OwivFaWzoJ+7ZBo=)
2: BC17B1DCB96311EDA3070C82C4F9AE02.roa (hash: yx99PM/doynK6amMJCx4RnGFExv3AhkFjaVK6BVMsi8=)
3: DAAECE38C77711EDA89BE25DC4F9AE02.roa (hash: OfnYKuQhDrInznQzuFPB413oqI3j0lvfN0e0b1WjdCQ=)
4: 9B8A0A56F56F11EF84317935C4F9AE02.roa (hash: sjpSFEfJfHB83JHegW9f77CP43Jk4MjH6G+ONPOjQR4=)
5: 80F23C7E1BC011EFB7916B7DC4F9AE02.roa (hash: drWKWXcfieuwG7SjP+7RkCnFgsaCs32hkx5iXKT+hFA=)
6: 96A539C2278211EF902D8D85C4F9AE02.roa (hash: zRt+bc55ZEJWia3T4UZGB0Xb9CQvFixH45VBiBP4lDs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1114 (0x45a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC269, serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Validity
Not Before: Jul 23 01:22:00 2026 GMT
Not After : Jul 30 01:22:00 2026 GMT
Subject: CN=6a616cb8-b3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:8f:78:8f:2b:e9:e9:83:2b:e3:4e:11:77:
89:24:cc:c0:ee:f6:c9:3a:b2:ad:96:9a:66:72:53:
80:72:f2:b7:4d:06:4d:a7:88:8c:c9:1a:4a:ab:6e:
18:ab:4c:7f:80:0a:d8:55:b0:f8:4a:46:2a:93:b4:
3d:ae:58:2c:7e:b2:ca:25:73:f8:c8:34:54:81:a4:
f7:8b:f3:09:31:30:00:b3:97:e2:83:ae:9c:52:50:
fd:48:b8:68:48:7f:64:92:36:91:69:51:f4:bc:7c:
fa:e2:20:7c:73:1d:ed:7f:e9:de:2d:54:86:50:48:
34:03:64:d9:a6:ca:1e:86:c0:7a:31:d3:c5:73:ef:
76:93:96:e9:f4:5c:10:26:c8:44:cb:65:8b:4f:c6:
10:ed:52:d1:33:d0:ff:5b:e7:51:23:ef:2c:b7:df:
18:c1:13:dd:06:3c:7c:88:9f:17:38:b8:0f:be:10:
20:a3:90:f6:da:c5:dd:38:b1:c8:8b:fa:7c:fc:e6:
dc:6a:f4:66:ef:3b:d0:01:b7:ae:c5:fc:e9:2d:88:
2c:2e:67:d1:10:0e:82:09:99:e6:d2:69:a0:df:39:
c4:7c:fd:e3:16:a9:d5:fa:a7:a3:05:bc:c0:84:df:
df:f9:6e:f6:ed:06:4c:2c:1c:66:ef:d9:14:ba:af:
f3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6B:CF:CE:A9:F1:22:3E:72:91:F1:C5:5F:4C:09:4F:50:54:7B:EA
X509v3 Authority Key Identifier:
keyid:30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:60:b5:99:60:ed:3d:09:f6:81:57:fc:84:e4:9e:09:af:34:
f3:e9:b6:d8:fe:ec:f1:a2:5c:1b:72:53:02:aa:d9:3b:64:2b:
91:c4:da:47:90:84:d5:15:1d:8e:df:88:ca:94:4e:1c:17:2d:
4a:ed:b9:43:85:a1:e3:e4:84:ca:48:71:72:52:93:3c:f0:80:
21:ef:50:96:50:b2:67:04:a2:30:a6:5f:08:73:d1:1a:d6:a8:
7d:3c:de:0a:5b:80:78:e6:d2:71:38:fe:11:49:c6:dc:41:67:
e3:bd:17:db:11:d4:98:c5:27:a5:e0:f5:af:a8:db:f6:e0:ea:
11:55:e2:29:6a:34:ef:9f:1e:25:23:a1:8e:99:47:9e:b9:00:
bb:6b:ee:6b:b1:0d:7e:5a:eb:ca:76:48:94:03:f1:8c:b8:bf:
bd:44:5b:44:0b:67:a9:f3:4e:3f:f8:a8:7c:82:1d:dd:67:a7:
2b:ba:4f:56:ee:5b:f2:14:eb:a2:b6:16:70:32:bb:78:4a:da:
9e:cd:af:99:0b:93:48:6f:5e:bf:9b:1c:d7:8e:96:70:96:13:
ae:c1:7e:7f:c0:51:f8:34:8b:61:89:3d:af:82:19:31:b0:a2:
d2:b5:c7:72:39:b3:64:f5:0e:7b:64:c4:7b:21:c2:e5:cc:b0:
3b:46:f0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:21 2026 by rpki-client