
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft
File: 8MOq6RfojmgUGpayJuBGAJqBlIM.mft (raw, json)
Hash identifier: EaUG4PuIJUA0QufVMlLvff7KCnTLqZE/ouNIzrCNcK8=
Subject key identifier: A4:D6:3B:16:55:A6:39:4A:4C:99:E6:5D:E0:48:7D:58:72:5F:36:8A
Authority key identifier: F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83
Certificate issuer: /CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483
Certificate serial: 0262
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft
Manifest number: 024A
Signing time: Thu 23 Jul 2026 03:47:35 +0000
Manifest this update: Thu 23 Jul 2026 03:47:35 +0000
Manifest next update: Thu 30 Jul 2026 03:47:35 +0000
Files and hashes: 1: 8MOq6RfojmgUGpayJuBGAJqBlIM.crl (hash: IALYZhkTdmTgHTWTJHX/XPv/crBZkAuwqvdsrp9gVzg=)
2: A329BF2C582911F183AC6B14AB833773.roa (hash: TM2WtHEjUfTn/wrRnSdiIPpq9/DyfEtGAiBklqLVpsM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl
rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 610 (0x262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F48F3, serialNumber=F0C3AAE917E88E68141A96B226E046009A819483
Validity
Not Before: Jul 23 03:47:35 2026 GMT
Not After : Jul 30 03:47:35 2026 GMT
Subject: CN=6a618ed7-3fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7c:71:99:47:47:54:95:d2:51:b8:e2:92:38:
ba:0f:69:f2:ab:df:be:0e:2c:d2:10:04:75:75:04:
37:7a:db:99:98:89:51:d2:85:be:20:31:9b:98:af:
d4:29:f2:b1:04:d8:a0:e8:d2:7d:a7:92:99:78:bc:
89:17:b5:e0:3c:c8:c9:89:3d:db:2b:b0:d2:f5:58:
45:c9:91:14:35:4c:9e:2e:06:a9:7f:b3:59:c1:7e:
eb:0a:e5:29:39:ea:02:ca:62:fb:38:48:c0:d3:40:
78:20:5d:9f:29:2d:3b:8d:e7:fa:0c:75:9f:f9:58:
3e:ef:20:95:9e:7c:2a:de:1e:8f:4b:77:d4:ce:69:
ce:02:f4:d1:06:35:5f:f3:7f:a8:ce:1f:d3:f1:74:
d0:38:7f:46:ee:40:0b:88:bd:e5:d4:9c:41:a5:bd:
be:11:13:10:25:32:c6:21:60:0a:ea:a0:e1:42:e5:
dc:0e:45:17:1d:5e:63:25:33:1e:3f:b4:5e:9a:5a:
9b:86:53:ec:58:51:b1:26:1e:a7:87:c0:69:36:b3:
c5:42:46:f0:dc:62:6e:bc:fb:b2:c6:c4:1b:b0:53:
d1:c4:c8:62:b9:80:bc:0d:36:27:eb:fc:eb:a2:b4:
68:a8:ba:15:17:57:0a:a9:bc:a9:69:ec:97:79:11:
15:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D6:3B:16:55:A6:39:4A:4C:99:E6:5D:E0:48:7D:58:72:5F:36:8A
X509v3 Authority Key Identifier:
keyid:F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:69:88:78:18:70:89:36:c9:aa:02:ae:05:ef:9c:95:d0:ee:
4b:8a:91:2c:2d:a9:aa:e5:26:82:50:34:33:dd:ff:05:6e:71:
d9:97:ba:cf:35:e6:df:4f:53:d5:fc:bf:cb:a3:14:ac:80:06:
da:26:8c:f7:cc:52:01:c8:22:22:19:78:bf:50:65:71:8d:d7:
5e:bd:bb:99:02:c2:69:2a:cb:eb:89:02:aa:56:74:f1:4c:cc:
51:f8:08:b5:3c:60:c3:6a:01:c6:c7:a6:36:3a:77:6c:38:84:
1e:d3:b6:69:8e:f7:76:d4:f2:82:99:98:75:06:9a:6b:b2:97:
71:4f:98:1e:f2:17:03:86:f8:14:85:0a:49:d8:c5:d4:33:b8:
2f:f7:42:89:76:88:be:5e:84:7b:ec:a4:1e:2e:16:a5:d0:df:
db:80:1c:5b:b2:5a:03:6d:1f:71:58:97:9c:dc:43:08:31:e4:
31:2a:2f:0a:04:6a:20:ea:e4:e4:46:1a:60:34:62:30:34:2e:
da:97:09:f6:08:ea:88:b2:2b:31:93:10:2d:19:21:35:52:b1:
88:7c:93:74:32:97:65:a6:60:0f:2b:24:9e:90:f7:7f:dd:42:
0a:f3:00:47:55:a8:fd:89:89:8d:ed:db:b7:fa:7a:c0:a9:f6:
47:54:bf:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQ4RjMxMTAvBgNVBAUTKEYwQzNBQUU5MTdFODhFNjgxNDFBOTZCMjI2RTA0NjAw
OUE4MTk0ODMwHhcNMjYwNzIzMDM0NzM1WhcNMjYwNzMwMDM0NzM1WjAYMRYwFAYD
VQQDEw02YTYxOGVkNy0zZmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtnxxmUdHVJXSUbjikji6D2nyq9++DizSEAR1dQQ3etuZmIlR0oW+IDGbmK/U
KfKxBNig6NJ9p5KZeLyJF7XgPMjJiT3bK7DS9VhFyZEUNUyeLgapf7NZwX7rCuUp
OeoCymL7OEjA00B4IF2fKS07jef6DHWf+Vg+7yCVnnwq3h6PS3fUzmnOAvTRBjVf
83+ozh/T8XTQOH9G7kALiL3l1JxBpb2+ERMQJTLGIWAK6qDhQuXcDkUXHV5jJTMe
P7RemlqbhlPsWFGxJh6nh8BpNrPFQkbw3GJuvPuyxsQbsFPRxMhiuYC8DTYn6/zr
orRoqLoVF1cKqbypaeyXeREViwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKTWOxZV
pjlKTJnmXeBIfVhyXzaKMB8GA1UdIwQYMBaAFPDDqukX6I5oFBqWsibgRgCagZSD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMy9CNzIzNUUyQTI1
MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2ptZ1VHcGF5SnVCR0FKcUJs
SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhNT3E2UmZvam1nVUdwYXlKdUJHQUpxQmxJTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDhGMy9CNzIzNUUyQTI1MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2pt
Z1VHcGF5SnVCR0FKcUJsSU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV2mIeBhwiTbJqgKuBe+cldDuS4qRLC2pquUmglA0M93/BW5x2Ze6zzXm309T
1fy/y6MUrIAG2iaM98xSAcgiIhl4v1BlcY3XXr27mQLCaSrL64kCqlZ08UzMUfgI
tTxgw2oBxsemNjp3bDiEHtO2aY73dtTygpmYdQaaa7KXcU+YHvIXA4b4FIUKSdjF
1DO4L/dCiXaIvl6Ee+ykHi4WpdDf24AcW7JaA20fcViXnNxDCDHkMSovCgRqIOrk
5EYaYDRiMDQu2pcJ9gjqiLIrMZMQLRkhNVKxiHyTdDKXZaZgDysknpD3f91CCvMA
R1Wo/YmJje3bt/p6wKn2R1S/hA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:01 2026 by rpki-client