
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
File: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft (raw, json)
Hash identifier: lJdXoRP2raUrbCioruKKWzdsHKC7RYPPb/Br2T1F2MU=
Subject key identifier: D1:20:F0:8C:B0:81:6B:31:FC:F0:D5:19:B5:FF:49:F7:A5:1A:10:F1
Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
Certificate issuer: /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Certificate serial: 0CD3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
Manifest number: 0CC4
Signing time: Sat 04 Apr 2026 18:17:10 +0000
Manifest this update: Sat 04 Apr 2026 18:17:09 +0000
Manifest next update: Sat 11 Apr 2026 18:17:09 +0000
Files and hashes: 1: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl (hash: +Y+txhCA1qZtEM3FANQzzfnGufe8vEKqJZxOhcEppKY=)
2: 1794902224E111EF97BA8F42C4F9AE02.roa (hash: Yq+GDOgPjYfjlCH3DOObesHj7a3fvejOrl/4IRRx/CI=)
3: EA903484DBE011EF8B7B8868C4F9AE02.roa (hash: qYrHqLo6UNCs7hu1fqjRiYyLDCXIk6/ZaenYZLihdqs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3283 (0xcd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Validity
Not Before: Apr 4 18:17:09 2026 GMT
Not After : Apr 11 18:17:09 2026 GMT
Subject: CN=69d155a6-2c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1e:6a:fa:f4:d1:08:d6:fd:c0:2e:a2:31:fe:
ac:50:94:0c:d5:1a:05:9c:e1:93:05:12:9c:44:dd:
32:2f:ca:62:8d:1b:f9:23:87:59:8f:04:a6:8e:cc:
a3:ed:24:d0:da:d2:a2:45:f9:08:b7:3f:b6:b0:ba:
67:e1:b1:ec:07:1b:a5:81:c0:9f:91:71:51:e6:88:
82:ae:80:68:e4:8d:5c:d4:5b:55:22:75:85:f4:68:
2d:e5:22:b4:70:67:91:34:1e:fa:7b:46:9b:ce:13:
96:6c:97:af:46:86:17:f3:88:67:d6:b2:7d:e5:be:
d7:98:48:95:44:cb:32:cb:5f:3e:6a:34:12:42:31:
7a:54:82:47:81:c0:d8:03:d6:29:ef:88:c6:ff:90:
f3:bd:01:42:85:2c:d3:01:ce:87:59:2b:db:a3:d7:
eb:ce:94:b8:f1:2e:7c:3b:b4:7a:82:fe:c7:2f:e2:
a8:c3:31:67:4a:0c:b3:68:4e:32:d7:fc:eb:df:b9:
7f:08:87:1f:21:a6:31:89:ff:bf:1c:8a:4f:a8:34:
24:03:0d:e9:39:51:9f:e0:b4:d2:b2:59:51:d5:dd:
b0:9c:4a:1f:4c:5e:a6:c8:a0:a0:3b:d8:53:66:48:
e5:72:66:82:6b:e1:fe:46:14:ff:9c:40:e7:81:27:
dc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:20:F0:8C:B0:81:6B:31:FC:F0:D5:19:B5:FF:49:F7:A5:1A:10:F1
X509v3 Authority Key Identifier:
keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c4:5d:1c:3e:5c:42:bc:76:b1:e3:33:32:a7:22:61:f5:03:
46:9b:6e:25:05:7e:4a:a7:0f:89:87:14:fd:1c:58:6a:ce:3b:
cd:a3:82:f6:a5:cd:ca:46:46:89:8c:bc:43:31:26:d1:07:19:
ee:92:c1:fd:e1:c5:77:5e:83:85:ab:8a:5f:13:c0:26:0d:74:
38:94:f4:87:81:97:59:e5:52:57:7b:0b:7f:78:1b:8c:94:60:
b7:34:d9:0b:6e:36:45:5a:7f:0a:b2:84:8c:31:16:7e:13:7c:
8f:bc:a5:da:22:ba:1d:ee:2c:a5:a5:c4:69:4d:1f:ce:c1:b8:
6a:36:82:64:4f:ba:24:c9:7e:0c:cc:26:a3:aa:39:fe:aa:16:
8d:67:bf:33:e0:63:99:0e:e6:a5:10:3f:9e:61:b8:10:be:1d:
8e:1a:ea:49:df:14:77:39:54:5c:3d:a9:90:5e:ff:3d:0b:4b:
04:59:59:81:89:09:a2:bf:4e:04:9f:6a:9a:24:5c:ec:ff:c2:
de:22:46:eb:1d:88:37:66:0c:4f:ed:9c:de:9d:ef:6e:3f:11:
b7:5c:a9:82:74:d6:4c:78:af:2e:63:06:7f:9b:77:ec:0b:29:
7d:b7:1d:c2:13:14:59:ad:ff:af:68:d4:54:4d:f7:c9:67:4e:
7b:34:95:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:40:50 2026 by rpki-client