
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
File: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft (raw, json)
Hash identifier: n7YixiGV6nvHdKjN/KaPvkUWe3xcOe+ID0qL8DNFkJI=
Subject key identifier: AB:11:18:49:0E:15:2C:8D:11:0A:12:C1:BC:B3:0F:A9:A0:74:D0:9E
Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
Certificate issuer: /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Certificate serial: 0D46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
Manifest number: 0D32
Signing time: Wed 28 Oct 2026 18:26:05 +0000
Manifest this update: Wed 28 Oct 2026 18:26:04 +0000
Manifest next update: Wed 04 Nov 2026 18:26:04 +0000
Files and hashes: 1: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl (hash: MpcmkTH22Uqrt6hbr9/6/sYL8H5V6CnTt3eR1tYZLQQ=)
2: EA903484DBE011EF8B7B8868C4F9AE02.roa (hash: Js9Xf/lTcrawT2dX8Q0Cfk/++xiRQdkyCZUT92zAOmA=)
3: 2C986C7E574711F1B4D92A609E833773.roa (hash: RWHIKGnsMljIh4sg02JObP14y4cKA5XjiIZ6HSOyX4I=)
4: 1794902224E111EF97BA8F42C4F9AE02.roa (hash: Cb0ms+5MzoBG/XTt2Zd5Vxt/O/XifJs8Bp4bbDCzW6c=)
5: A01AB4EC574511F1B124FED69D833773.roa (hash: MZIyYBnjh1pUhOWTFHX7tr01fIswpc8hJw1uWXdGFcg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 18:26:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3398 (0xd46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Validity
Not Before: Oct 28 18:26:04 2026 GMT
Not After : Nov 4 18:26:04 2026 GMT
Subject: CN=6ae23e3d-65c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c7:3c:7d:ac:1c:eb:0e:a8:b1:c5:1a:0e:8f:
e3:cf:81:fc:12:53:f2:e4:8e:d7:2b:62:9d:31:68:
11:de:d6:86:60:09:44:a5:7c:d2:c0:76:9c:fb:1f:
a5:d2:53:ea:29:fa:fb:59:38:6f:5e:06:3f:bd:56:
6e:f7:6a:7d:20:27:7c:ee:1c:e2:82:78:17:5a:e8:
54:24:00:ab:89:2a:c2:91:75:ad:99:cd:7b:11:60:
78:2b:79:eb:87:c2:82:0d:82:de:c3:7b:4c:70:7a:
ae:1c:ef:3a:97:8d:1e:d1:ab:7f:0b:45:6b:3c:c2:
61:f9:74:29:13:01:4b:0c:bf:d6:a2:87:0f:26:6c:
c6:ee:31:e2:4f:25:60:d2:7b:c1:b2:d2:48:d6:64:
6a:83:e7:4b:4d:f8:92:f3:72:6a:30:5c:97:e9:38:
ad:de:7d:9a:8f:66:21:e3:60:af:3b:dc:06:59:b4:
0b:bf:2b:4d:80:2c:0b:27:36:a9:61:9e:a5:11:3b:
cb:eb:3c:7c:c0:66:6d:63:55:0c:93:65:08:a8:1c:
e9:e8:17:1f:d7:d4:d9:cb:9b:17:47:59:79:15:ba:
27:b2:b6:49:50:62:bf:88:c9:92:30:6d:71:d7:f8:
eb:31:58:21:6e:1f:e2:63:13:fe:ba:d9:62:a6:6f:
21:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:11:18:49:0E:15:2C:8D:11:0A:12:C1:BC:B3:0F:A9:A0:74:D0:9E
X509v3 Authority Key Identifier:
keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:df:41:e4:49:02:1f:52:cd:72:05:2d:a2:d3:f1:da:32:d8:
3f:2e:ee:54:d6:27:2f:17:07:cb:76:9e:2b:d8:34:26:37:ba:
3c:25:99:08:e8:7e:db:1a:78:8e:d3:0a:20:b2:d3:28:cc:42:
17:30:21:80:85:3b:2a:cf:1d:e5:5b:af:79:63:98:a3:1c:ec:
68:0f:47:30:36:b3:01:e6:c0:53:0e:95:58:51:19:18:98:e9:
90:00:5c:60:e2:91:82:10:9b:19:69:23:6b:dc:f8:6b:75:c9:
ea:59:c5:f9:30:bc:ec:73:ca:0d:dc:bd:72:27:37:0e:6a:92:
9d:79:47:7b:37:15:e7:29:1a:4a:f9:83:0b:e1:0f:99:92:c9:
16:50:f1:be:d1:ff:9e:54:54:5e:aa:c1:e4:7b:82:76:32:b1:
b2:5e:af:26:79:eb:da:64:ce:96:14:7f:a2:3b:bb:79:0e:74:
b3:f7:b4:8d:96:bf:12:36:de:9a:94:8f:5c:7f:92:2f:2d:28:
9d:0f:43:9e:62:c7:ef:84:50:e5:43:6f:1e:52:1d:5b:0b:09:
3d:3e:66:13:01:98:1d:73:83:cd:c2:0c:cd:00:2e:5d:81:60:
92:44:6c:df:91:35:44:cb:e6:67:21:f2:7b:c3:33:d2:43:aa:
a4:4b:e1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 12:07:30 2026 by rpki-client