
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
File: MOfescUi55FZhZK2RTCIY8oADhg.mft (raw, json)
Hash identifier: i0cIkYBdTH+X5zTY+KOkuzWySrKegch8+VdFbHzrV/Y=
Subject key identifier: B3:3D:58:13:E3:9A:70:57:BA:DD:96:3A:F2:6A:C8:3D:57:DC:76:DD
Authority key identifier: 30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
Certificate issuer: /CN=A91E76B8/serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Certificate serial: 1524
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
Manifest number: 1505
Signing time: Wed 22 Jul 2026 16:56:10 +0000
Manifest this update: Wed 22 Jul 2026 16:56:10 +0000
Manifest next update: Wed 29 Jul 2026 16:56:10 +0000
Files and hashes: 1: MOfescUi55FZhZK2RTCIY8oADhg.crl (hash: 80EaksAOkqIUWoWd9BdrT4Xl2m7ZZV0Tay3P8VRUd+8=)
2: ECBAA694826F11ED963DD626C4F9AE02.roa (hash: hNpWfzStSxoi1fPkxcbnh4V9DqsCkVyC0AQQMNFEtXk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:56:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5412 (0x1524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E76B8, serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Validity
Not Before: Jul 22 16:56:10 2026 GMT
Not After : Jul 29 16:56:10 2026 GMT
Subject: CN=6a60f62a-7ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a8:f0:b4:64:a7:60:6a:e0:9a:97:2f:78:23:
ef:e9:36:49:8a:dc:f9:3b:01:61:7e:e4:34:81:48:
94:30:dd:6a:c9:30:78:c1:5f:9b:c0:22:25:4e:53:
80:84:2f:2e:43:b0:47:d8:6a:0b:a5:f9:bb:bb:58:
05:85:a5:27:de:a4:81:bc:39:cb:b7:94:6f:52:26:
e9:7d:b3:7a:a7:9b:bf:c9:44:4c:18:d1:9b:fc:78:
f4:90:91:49:9e:63:46:35:18:5d:2a:92:be:6b:9f:
dd:32:82:7c:ff:b0:f6:48:0c:cf:b0:fa:4c:5d:51:
c0:fe:56:7e:8d:c1:2e:72:ca:eb:fd:53:78:9d:3f:
a1:90:45:5a:5f:91:c9:15:cf:0d:86:74:28:ca:f8:
8d:04:10:a9:60:e4:b2:50:29:e7:ea:eb:b9:46:3b:
26:6d:3c:30:84:a3:86:68:57:94:f9:89:da:64:76:
72:f0:c8:02:9f:b8:51:9b:59:78:ab:77:1b:15:8f:
9c:b2:e1:b8:82:43:cd:82:19:be:c8:a2:7c:09:23:
8c:87:6a:b8:a5:7b:99:6e:c8:e1:e8:ec:e0:4b:28:
fc:50:71:ca:70:ec:18:04:54:e7:48:5e:5a:18:61:
b7:11:ee:65:16:d5:d8:a6:7a:51:b0:f7:a8:dd:b8:
84:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3D:58:13:E3:9A:70:57:BA:DD:96:3A:F2:6A:C8:3D:57:DC:76:DD
X509v3 Authority Key Identifier:
keyid:30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:cb:3c:d4:b4:0e:a6:48:22:0f:77:62:9c:8a:8a:68:e3:79:
81:fe:1e:87:93:8c:ea:cb:90:fb:2a:59:2b:aa:fc:6f:f7:2f:
7a:20:fe:5c:91:73:54:01:03:0e:31:6f:88:9f:89:64:75:28:
95:0f:16:ef:70:3f:01:07:f6:17:e7:4c:40:30:56:be:3f:41:
e3:d0:fb:13:78:a6:8d:68:86:dd:f5:e7:5d:ab:c7:57:fd:32:
ff:e1:cf:6f:03:f7:7a:11:6c:6d:8f:b7:b7:2c:43:ca:ef:3a:
00:9e:ab:18:42:23:b9:67:e1:53:f1:50:aa:e4:3c:1e:06:83:
17:5e:91:78:10:89:da:8d:46:33:02:86:c1:8d:b1:00:ec:0f:
85:c2:05:43:2e:22:e1:6b:71:47:57:e9:74:b1:84:d2:5a:d9:
99:e2:81:05:84:35:84:04:eb:b0:8e:8c:91:c6:5f:14:27:62:
6f:f9:1e:d4:76:e4:fa:9c:1e:36:ee:86:2d:13:e5:68:ac:6e:
1a:42:cd:37:3f:57:c6:54:1b:b1:1a:19:d6:26:be:da:6a:76:
1d:0d:e8:ae:ec:fd:ed:ce:88:73:43:8d:e6:94:e1:65:77:47:
ee:c9:a8:0f:5f:c9:d1:22:53:e0:e8:65:43:13:48:53:4b:85:
25:d4:94:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:52 2026 by rpki-client