
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
File: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft (raw, json)
Hash identifier: cfplHeiPD0VOPDKbO/YuUnkg4U28aLoizEZpjRTT/s4=
Subject key identifier: 0B:CC:D3:20:C5:D5:AA:B6:FA:12:88:5D:B0:5E:25:AB:01:C1:E6:98
Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
Certificate issuer: /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Certificate serial: 0D16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
Manifest number: 0D02
Signing time: Sun 26 Jul 2026 18:41:04 +0000
Manifest this update: Sun 26 Jul 2026 18:41:04 +0000
Manifest next update: Sun 02 Aug 2026 18:41:04 +0000
Files and hashes: 1: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl (hash: YxyQjH5PFv5pP85YnVLJLjMtp1rHPvL+b2YiX45krEg=)
2: 1794902224E111EF97BA8F42C4F9AE02.roa (hash: Cb0ms+5MzoBG/XTt2Zd5Vxt/O/XifJs8Bp4bbDCzW6c=)
3: EA903484DBE011EF8B7B8868C4F9AE02.roa (hash: Js9Xf/lTcrawT2dX8Q0Cfk/++xiRQdkyCZUT92zAOmA=)
4: 2C986C7E574711F1B4D92A609E833773.roa (hash: RWHIKGnsMljIh4sg02JObP14y4cKA5XjiIZ6HSOyX4I=)
5: A01AB4EC574511F1B124FED69D833773.roa (hash: MZIyYBnjh1pUhOWTFHX7tr01fIswpc8hJw1uWXdGFcg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 18:41:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3350 (0xd16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Validity
Not Before: Jul 26 18:41:04 2026 GMT
Not After : Aug 2 18:41:04 2026 GMT
Subject: CN=6a6654c0-8017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:75:fc:c8:9c:a9:6b:e0:22:8b:eb:b0:70:41:
de:a3:2e:e5:ac:83:2f:d0:02:99:a6:82:b9:6a:da:
46:88:6b:0c:78:60:73:c4:bd:3b:dc:16:95:04:32:
08:a2:94:02:84:66:5e:56:43:3d:65:cb:5e:4d:bc:
91:34:0b:31:85:94:d4:c0:38:e4:e1:27:33:de:a9:
f6:83:dd:60:78:35:ef:c5:da:b6:bc:d5:fc:52:94:
00:05:f5:46:61:d6:03:c9:57:69:31:b8:cf:6f:ab:
3b:3b:43:e5:02:7a:d9:b9:66:77:f2:a4:9a:d3:a4:
db:ee:34:36:8c:47:52:9d:bf:56:c9:6e:03:11:25:
e8:60:d9:f3:ed:68:25:be:bd:8c:cd:14:4c:37:4e:
e2:f2:35:5e:e9:4b:ae:e6:41:4d:fa:f2:e1:72:e2:
a5:cc:25:ea:e1:8b:65:b7:53:44:69:18:35:74:d4:
88:39:bf:f6:d1:04:b0:17:46:4d:c7:53:f5:af:61:
0a:d9:91:78:b7:e5:4b:2b:28:53:98:f9:5d:fb:ed:
42:79:83:2a:19:f6:8c:8a:32:58:ad:03:31:75:23:
8d:3c:29:19:b0:99:f1:38:1d:c0:71:7f:5c:d5:e2:
59:68:71:2e:e2:ab:e4:06:8b:49:88:f0:d9:8e:f3:
7c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CC:D3:20:C5:D5:AA:B6:FA:12:88:5D:B0:5E:25:AB:01:C1:E6:98
X509v3 Authority Key Identifier:
keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1c:eb:68:b9:52:cd:ed:7b:67:be:b6:24:83:98:26:96:fb:
5c:bc:08:6a:6a:14:cd:9a:7e:9c:ff:ce:70:90:68:c4:7a:9f:
59:63:78:f8:d1:d1:2e:cd:b8:b6:c4:0a:fb:bf:94:26:a7:10:
32:a7:0b:63:64:ee:26:83:40:80:ac:a6:9a:e2:e5:41:c1:1f:
8a:96:08:a3:16:78:62:0d:e7:33:f2:f2:be:7a:a2:9e:58:a1:
a4:a9:b9:b1:48:8f:a3:d3:0c:78:83:95:83:5a:4a:32:60:ab:
0a:41:45:67:0c:ce:ba:6f:30:f6:78:3b:f8:cb:16:07:b6:8a:
79:24:a6:f5:e9:5a:b1:99:46:7a:3e:23:2e:18:e8:b5:ef:ec:
a3:c7:1b:38:55:01:d6:57:c3:37:5b:eb:06:7b:6c:10:b0:61:
56:0c:6e:ff:e1:b3:d5:66:00:8b:c9:4b:7e:c4:4a:86:91:b3:
a9:82:76:d9:6e:d3:5c:d1:0c:21:26:02:05:a8:ed:12:78:48:
29:1c:81:18:2e:dc:03:a4:f8:0d:4c:cc:fa:2f:45:ac:a3:a7:
11:81:94:d7:91:8a:a6:fe:12:5e:6a:87:9c:fa:f6:74:00:27:
c8:03:e3:b7:2c:5d:c0:74:23:1f:56:ef:20:3d:a0:33:de:86:
45:d6:31:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 23:01:17 2026 by rpki-client