
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft
File: MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft (raw, json)
Hash identifier: viDSCYH/pyN++939INsZpmoJx4bhwp+c8N8WwRpI01s=
Subject key identifier: 8A:E4:88:69:4A:CE:B2:90:38:1B:C8:BF:B5:02:9F:4A:72:FA:D5:53
Authority key identifier: 30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D
Certificate issuer: /CN=A91EF73D/serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D
Certificate serial: 0188
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft
Manifest number: 0188
Signing time: Wed 25 Mar 2026 03:44:07 +0000
Manifest this update: Wed 25 Mar 2026 03:44:06 +0000
Manifest next update: Wed 01 Apr 2026 03:44:06 +0000
Files and hashes: 1: MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl (hash: 2H2wfHBnLNT326aI7+IW3IgtKO+vNuH7lmv96cV0xtc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl
rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:44:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF73D, serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D
Validity
Not Before: Mar 25 03:44:06 2026 GMT
Not After : Apr 1 03:44:06 2026 GMT
Subject: CN=69c35a07-62d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:87:65:d7:77:8e:23:66:6c:51:e4:92:bc:91:
3c:06:6e:31:d3:6c:3f:65:50:42:ee:f1:4e:46:ca:
46:07:d7:f7:0f:af:79:a2:b8:39:c0:91:fb:3c:c6:
df:0e:87:a7:b3:5c:eb:59:80:ec:5e:8a:dc:cb:4d:
2c:35:47:01:0b:a4:ba:86:0a:ec:e7:f9:a2:78:83:
0d:78:ae:c3:ac:69:8a:88:15:63:5a:9d:17:67:18:
b6:24:85:20:3f:5d:45:c7:d8:27:26:19:37:37:23:
cd:bd:5e:9a:07:b4:6e:95:44:17:82:6f:d8:74:a2:
8f:ff:eb:b3:f1:6d:74:12:59:f4:6f:0d:73:ed:e4:
4d:bd:9b:03:61:ec:64:80:a1:21:ba:d0:61:ce:bb:
6b:4e:80:0b:29:58:2f:0c:81:4d:4b:bd:8e:3d:56:
8a:13:8a:17:70:67:41:8a:fb:97:44:b0:55:42:78:
28:0e:8e:6a:2c:0c:1d:e1:1c:13:4f:be:e3:7f:78:
8d:ce:ed:f7:52:d9:05:c2:d9:41:38:b8:1e:b4:0e:
26:fd:38:ec:47:0f:ca:7e:73:55:ab:4c:c3:74:ab:
66:b9:b0:0e:cb:3b:61:44:13:b4:1c:59:61:0d:ae:
db:38:e3:62:10:06:dd:0f:04:df:0e:4d:11:17:63:
fe:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E4:88:69:4A:CE:B2:90:38:1B:C8:BF:B5:02:9F:4A:72:FA:D5:53
X509v3 Authority Key Identifier:
keyid:30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:61:ff:33:34:0f:dd:61:7c:29:07:0d:32:cd:d1:a7:6d:a7:
57:7a:bb:a1:f6:1e:db:26:78:b3:b2:b2:22:a3:e6:25:74:41:
25:e7:26:12:3f:f8:c3:14:df:47:a8:26:77:a2:bf:9e:16:05:
11:6f:35:13:1f:04:6a:26:f8:f2:d3:9b:f5:6b:f7:d4:84:96:
e0:11:72:6a:8f:ea:d3:34:12:16:f5:af:32:d9:54:ad:42:43:
3b:2e:e9:01:fe:25:25:81:16:58:e5:71:f4:1b:6d:25:50:72:
30:d0:75:dd:3c:98:5f:33:25:95:b9:f3:ca:f4:a6:1b:50:f6:
78:d0:92:e9:98:22:b7:68:49:55:33:d7:ff:ac:ff:29:8f:ab:
8c:92:5b:f4:1b:77:f8:85:61:04:19:a3:0c:e9:97:42:1e:24:
cf:84:90:3a:e9:4c:d8:46:38:71:22:77:b2:27:42:0f:3d:bd:
c2:49:db:e5:b4:e2:23:b2:4d:3d:89:6e:a3:5f:ac:35:cf:0b:
dc:29:a5:d2:16:79:e1:54:34:24:72:7f:8c:88:b1:4e:c3:ec:
f0:50:14:25:5b:52:54:eb:ea:ae:63:2f:2b:5e:8a:04:25:84:
32:c7:44:0c:74:57:66:ce:c1:18:9e:63:2f:3a:2d:b8:27:70:
d5:c2:46:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:32:29 2026 by rpki-client