
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft
File: MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft (raw, json)
Hash identifier: zLj4FWxyHbwqo2uFoRcB0FeuG0HLgxqvGJge949LPyY=
Subject key identifier: 4C:0D:E5:96:02:82:34:0D:3A:A2:8B:EB:A3:15:DF:C6:B0:06:97:A8
Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14
Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114
Certificate serial: 70
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft
Manifest number: 59
Signing time: Mon 02 Mar 2026 23:36:47 +0000
Manifest this update: Mon 02 Mar 2026 23:36:46 +0000
Manifest next update: Mon 09 Mar 2026 23:36:46 +0000
Files and hashes: 1: MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl (hash: Mr8i090Nk5VrGbsoGY3ez9kMt2TDsIqv1NQJxbuWok8=)
2: 474BBE8AA5FF11F08004B67CC4F9AE02.roa (hash: OAI+YN11U1PZfLdiNPQNMB7UXRmGheB6bQN72SIA05g=)
3: 485C422CA5FF11F08004B67CC4F9AE02.roa (hash: ES3xbmOIjTGPeT8IfY1TCtnhdjiNJx4hr7CiNHyRg0w=)
4: 47D5EEA2A5FF11F08004B67CC4F9AE02.roa (hash: dWHrgDdQ9oxBHH3ChoJxtFZzUQfQ+vX9Kd8hcoNAwZY=)
5: 4988E222A5FF11F08004B67CC4F9AE02.roa (hash: G9FNuAU8h0eYcNdJ/v+kuiqEGbw+uC7kAoaWzDV1Tvw=)
6: 48DA881CA5FF11F08004B67CC4F9AE02.roa (hash: vLVmclqSWSw9c6sWEF49QFNtj33DBN50eIGMmcN8s88=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl
rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 23:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114
Validity
Not Before: Mar 2 23:36:46 2026 GMT
Not After : Mar 9 23:36:46 2026 GMT
Subject: CN=69a61f0f-59f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7a:a6:ba:08:e4:0d:b2:9f:bf:56:4f:37:a9:
c2:c7:17:c0:e9:b8:6a:3c:e9:c0:42:1d:47:12:1c:
5c:fd:ef:d6:b6:5a:74:ad:a0:1e:2c:26:aa:0d:17:
17:09:ce:6a:c1:f5:a4:af:e8:e8:cb:6a:1b:b2:7c:
9d:f2:7c:09:24:87:e7:2b:e0:ae:11:f9:e3:e8:82:
de:91:5d:74:50:6f:70:7b:39:cf:58:6f:aa:ff:cf:
c3:3e:9d:4b:cb:d4:39:4e:11:fa:9f:3c:0b:c2:58:
52:98:b9:05:bc:80:e7:5f:a2:3a:11:5b:74:74:81:
c0:74:c7:9e:32:e3:e1:c9:27:41:7a:2b:be:e3:65:
4c:e1:26:92:f5:f2:23:5a:be:1a:6a:5a:a4:c9:51:
71:95:cd:9e:d1:a3:df:0a:53:9a:e9:26:3e:6e:0f:
38:6c:f5:67:c6:f7:3e:60:65:7e:9b:27:d6:3d:89:
3c:5a:a9:ce:41:66:24:eb:7d:87:f4:be:9b:c9:f5:
95:ed:e3:c4:a4:c8:40:f9:f4:fb:e3:32:24:62:b5:
9e:a5:f8:e1:0d:a5:f0:63:a1:01:c0:88:e8:27:12:
25:ad:29:65:25:c3:a0:9a:a8:5b:8a:79:4f:b9:a4:
56:47:68:01:e6:04:d5:7f:52:e8:87:af:13:aa:71:
23:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0D:E5:96:02:82:34:0D:3A:A2:8B:EB:A3:15:DF:C6:B0:06:97:A8
X509v3 Authority Key Identifier:
keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:05:bc:2f:6b:0d:9e:c9:77:58:86:d2:86:bc:cb:a2:26:a6:
16:67:4c:c6:8a:68:d9:6a:08:db:5d:ae:00:8f:d7:28:3c:3c:
91:88:ed:a5:d8:a1:90:3b:f9:e9:9c:ce:ba:4d:2b:96:ef:14:
ba:eb:b8:f6:f2:e6:ae:f2:f0:f2:df:dc:16:61:bb:df:e2:67:
2a:1b:da:19:88:48:eb:ee:be:6f:98:6c:f4:f6:33:12:ba:4d:
c0:79:7f:cb:43:71:28:78:98:d9:31:be:54:0e:d3:a9:57:8c:
19:16:49:5d:0c:cd:50:10:ae:6d:3b:ee:65:2f:20:cd:ad:c6:
40:4a:46:54:ab:ee:16:9e:0b:94:79:e5:c8:f8:bb:5c:de:25:
09:3f:a0:f1:6f:f7:75:86:9d:ea:55:f1:70:fc:1f:e8:26:0c:
92:ec:ca:45:5c:f6:58:fe:fd:28:df:89:b1:c9:a0:20:ed:25:
38:0a:2e:b6:a6:33:3d:f8:78:13:fa:46:d1:65:31:39:34:e9:
ff:46:ed:4f:0f:a4:38:07:c5:3d:f8:c4:f3:3d:c4:9d:75:54:
69:75:c2:8a:22:cd:a7:e1:56:c7:43:77:01:00:7e:bb:33:8a:
94:82:6f:b0:69:bc:c6:7f:a5:a8:5f:c3:b0:ed:94:13:43:cd:
be:e5:2e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:37:25 2026 by rpki-client