
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
File: MOfescUi55FZhZK2RTCIY8oADhg.mft (raw, json)
Hash identifier: ntqznbmg9EWJGzHpuTPY3nozLJZqXpqITrVDU3ZT1OY=
Subject key identifier: 1D:C7:1B:11:F3:D0:DD:CF:B2:59:A3:3E:CC:0C:B8:FF:3E:FB:57:1D
Authority key identifier: 30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
Certificate issuer: /CN=A91E76B8/serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Certificate serial: 1544
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
Manifest number: 1525
Signing time: Tue 22 Sep 2026 16:44:59 +0000
Manifest this update: Tue 22 Sep 2026 16:44:59 +0000
Manifest next update: Tue 29 Sep 2026 16:44:59 +0000
Files and hashes: 1: MOfescUi55FZhZK2RTCIY8oADhg.crl (hash: jt/N+6vYQ1M1KbgyP3vmtwAquWfkEPTdcWWmLjGYYM4=)
2: ECBAA694826F11ED963DD626C4F9AE02.roa (hash: hNpWfzStSxoi1fPkxcbnh4V9DqsCkVyC0AQQMNFEtXk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5444 (0x1544)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E76B8, serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Validity
Not Before: Sep 22 16:44:59 2026 GMT
Not After : Sep 29 16:44:59 2026 GMT
Subject: CN=6ab2b08b-9e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:10:08:b9:0b:9e:a6:b7:7d:e3:66:ab:52:
df:2a:36:16:41:bd:ee:44:15:1d:24:32:47:67:be:
f5:03:f0:ae:9f:ba:a6:7a:e9:e8:1d:3b:f0:f7:c9:
0f:cb:21:b9:f3:09:e4:52:cb:da:c6:8c:97:ff:86:
45:ce:cd:16:7f:4f:8a:6f:74:20:56:d1:58:b3:d1:
3b:68:a0:0c:2f:b0:2c:ec:22:c6:2e:04:67:14:51:
67:d1:a2:9a:05:6f:eb:dc:b0:67:2c:35:13:9e:61:
e8:fe:2c:e2:df:d9:af:2b:08:00:0c:c9:d7:4f:af:
a8:52:4f:4d:fd:1d:2d:4c:b6:25:17:e0:26:6b:2c:
c9:57:8e:0f:27:3e:4c:2e:cd:05:8f:04:23:32:ee:
66:7e:4e:bf:93:37:cf:22:43:5d:05:4a:a3:2c:49:
73:93:81:64:83:2d:69:f3:71:90:12:6d:0c:e1:1f:
b2:f7:99:2e:09:4f:2c:13:aa:b9:a5:54:60:a3:b1:
46:3e:a2:cf:92:02:c0:5d:5c:98:ac:27:75:47:9a:
06:a3:1d:93:a1:ad:67:a7:23:71:a1:1b:21:49:34:
df:77:8f:47:1e:70:6e:b2:dd:de:e6:97:b9:27:6c:
de:e6:50:27:bf:6b:ab:0d:5f:49:96:de:ec:23:ce:
fb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C7:1B:11:F3:D0:DD:CF:B2:59:A3:3E:CC:0C:B8:FF:3E:FB:57:1D
X509v3 Authority Key Identifier:
keyid:30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:17:e4:01:74:89:0c:b2:30:a2:9a:72:ef:b9:14:2b:96:50:
61:84:6c:c8:07:49:8e:d4:32:10:d7:13:0e:a4:98:40:20:d9:
3d:83:4c:1d:35:bc:95:aa:a2:6e:56:b3:f8:98:97:21:4a:57:
69:7f:a4:2c:cd:16:db:2b:b1:5e:0d:ce:1a:e4:61:06:01:42:
1f:9e:36:55:1f:f1:ca:f5:ec:18:7c:aa:db:f1:dd:6f:f9:3a:
4c:90:ee:c9:25:d3:45:a8:f4:82:50:eb:49:02:da:78:23:db:
ad:f2:09:94:5a:c3:38:f0:81:4e:fd:7d:f5:22:b3:7d:07:0d:
fd:3a:77:4a:d8:c6:fe:08:31:c0:9d:fc:64:60:5e:24:a3:45:
c5:df:55:9f:61:b2:21:4a:2e:21:b2:48:bd:3b:39:ea:eb:b5:
cf:a7:6d:36:75:8c:e4:cd:48:86:5b:a9:79:d9:84:fa:1b:ae:
07:16:2e:58:7c:2a:59:5d:3e:f5:b5:a4:ef:fa:94:39:b8:02:
5f:f1:8f:e4:03:3d:e5:44:a5:af:cb:bd:e6:17:94:a1:06:63:
0b:3f:10:0b:e7:d2:4f:ac:12:5c:44:fd:a9:b8:24:e5:84:26:
04:5b:bb:9c:13:fe:52:a7:bf:75:49:cd:11:f9:de:ed:31:eb:
8e:51:80:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:20:56 2026 by rpki-client