
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
File: MOWJKI62UAJRDId7Rmq-GXU7284.mft (raw, json)
Hash identifier: xifE+pV6SHEGwRxKeQclZjI9mOp5jsFeJFDKOcS1hBw=
Subject key identifier: 0A:EC:3B:59:C4:30:4F:8E:54:7C:60:74:31:E8:98:6B:FF:90:FD:F4
Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE
Certificate issuer: /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
Certificate serial: 2269
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
Manifest number: 2211
Signing time: Tue 12 May 2026 15:53:21 +0000
Manifest this update: Tue 12 May 2026 15:53:20 +0000
Manifest next update: Tue 19 May 2026 15:53:20 +0000
Files and hashes: 1: MOWJKI62UAJRDId7Rmq-GXU7284.crl (hash: 9WykXkb2MZET1EH0eNnLwOezHcQ2I3yvjZBgOrCIiVM=)
2: 89A9F0B436B511EEB14AD345C4F9AE02.roa (hash: u4JetaOWzMXn/9OVVoXfiQX/zpTvJHxG2pnCEY2Q6h8=)
3: 49CAEF64D07011F08EAB2929C4F9AE02.roa (hash: 9yWXqNFWiFfzJFLfOdFyogGNA+hYJ2MkS7N+G+jaZ/Y=)
4: FEDAEBD8932711F0B9305C4FC4F9AE02.roa (hash: oLPGAtInmgg8LJAGqD2eTzOmv35jtP5ZiQradw61X2A=)
5: 69A7319C4F7311E988A75B37C4F9AE02.roa (hash: aNgkAquiTrmAkAgx3eOEV0Kuy2J6l/EZLgSS59S6b0I=)
6: 869ED548F1E511E88BD7AA7CC4F9AE02.roa (hash: 6REJsbq1crWQe1RBVHIb3kv2oV963u4iX5SxxumAUhc=)
7: 96862188486111E8AA9B1B45C4F9AE02.roa (hash: qsZSEb0rwpplo93FKHewQ04M4ljPiZCm7esCnmdbdyk=)
8: 49567968D07011F0A2852929C4F9AE02.roa (hash: 8PQXUEVhK3IEgEy9LdNTrlYJLQFMsbSKz5nwyZNxIbk=)
9: 52644D4AA1E411E8AE269764C4F9AE02.roa (hash: AcklsjRNx+5Tl87ZCSnr+nKhs0vUfT9sBTNVYrvsdZ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl
rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8809 (0x2269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
Validity
Not Before: May 12 15:53:20 2026 GMT
Not After : May 19 15:53:20 2026 GMT
Subject: CN=6a034cf0-a0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:76:38:d8:d5:59:8e:aa:f3:e8:3f:2d:db:
4b:ff:7c:9f:4d:a8:10:f1:c8:4f:99:7f:36:e2:ab:
f6:6f:fa:ba:56:9c:8f:70:bd:9e:37:ee:43:da:10:
d7:64:c4:7c:93:5c:82:aa:2f:b9:d4:1f:c6:6f:7d:
f2:a4:a7:93:e4:6f:3b:c5:e9:29:1b:e3:d2:1c:90:
ee:7a:e5:97:12:33:10:e2:4b:f4:18:32:9b:30:3c:
f6:64:7a:eb:7c:15:5b:53:d0:d9:f5:36:c4:d2:81:
9a:42:71:c2:d5:ca:49:39:85:f4:ed:bc:9b:d8:92:
80:e8:e5:b9:fe:ed:66:5e:92:07:c5:de:94:72:0b:
88:b0:7e:56:f7:5d:80:b1:94:04:1b:15:82:ef:a2:
02:66:ad:dc:41:b9:70:da:ef:72:b6:83:70:2b:2d:
bb:3e:40:f7:29:85:3b:2d:6c:da:5c:b5:fe:f9:cb:
12:ef:bc:a0:f3:d7:79:1c:7d:a6:e6:be:67:0f:93:
c6:f7:34:99:09:ea:e9:31:c4:8a:a3:81:5d:05:e7:
4b:8a:ef:7e:fd:57:a4:8e:db:ff:2f:aa:47:89:53:
98:83:2f:80:ce:96:8b:c9:16:84:3b:48:e7:de:7d:
e5:0f:74:03:65:1a:51:77:39:ed:f2:b5:72:a5:41:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EC:3B:59:C4:30:4F:8E:54:7C:60:74:31:E8:98:6B:FF:90:FD:F4
X509v3 Authority Key Identifier:
keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:41:5b:a4:5b:b7:0e:46:61:af:ed:6a:f4:c5:af:bf:ab:81:
87:97:63:79:2b:68:80:20:70:06:a3:c1:e6:25:77:8c:15:e5:
a2:00:a3:24:9e:03:7a:7e:87:2a:ae:43:1c:5a:1d:48:12:94:
59:ae:5f:80:de:3e:dc:5b:73:e2:23:85:45:87:e9:5e:7b:a1:
38:fc:c2:c6:6f:65:36:a3:6f:57:a5:dc:a3:ca:85:d3:51:2e:
72:08:a3:1f:69:79:57:38:75:e0:4e:ed:dc:8f:ba:c5:ac:c1:
bc:ad:ed:b1:70:48:cc:22:3c:7b:b4:b4:b8:01:62:44:da:e7:
4b:60:3c:cc:e1:33:fc:51:7a:3c:d1:2e:ff:9c:a7:0e:13:e4:
6f:43:6b:4f:26:6b:d0:7a:46:bf:a9:71:2d:1a:65:78:e3:3a:
a5:41:eb:30:ea:27:3d:f6:94:a8:a5:7d:0c:d1:74:63:9d:b9:
22:2b:f4:c3:cb:c1:b3:b6:d3:95:da:fd:a8:c0:8f:74:68:e0:
d5:29:3a:d0:d2:03:09:3f:f5:fd:09:67:59:9a:d4:32:e3:81:
58:88:f6:2d:65:c2:cf:82:d5:32:25:c2:58:ea:2f:6e:b0:0c:
37:25:3c:c8:a3:a7:39:ac:73:2a:6d:75:6c:aa:e3:22:24:63:
3c:46:f8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:30:34 2026 by rpki-client