
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
File: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft (raw, json)
Hash identifier: 2FaZUvLM1sODEu7CBIQliIKttF6BWCeJqxdih7CoHOM=
Subject key identifier: 18:2A:6F:EF:E3:A3:03:D5:46:45:54:99:BB:9A:51:EB:98:08:B7:B6
Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
Certificate issuer: /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Certificate serial: 0C7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
Manifest number: 0C6F
Signing time: Sun 26 Oct 2025 18:57:29 +0000
Manifest this update: Sun 26 Oct 2025 18:57:28 +0000
Manifest next update: Sun 02 Nov 2025 18:57:28 +0000
Files and hashes: 1: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl (hash: +xHGTdNsa9grUncDoEg3ROOw2Kr+0EuShtxAj9Yq8B8=)
2: EA903484DBE011EF8B7B8868C4F9AE02.roa (hash: F9++BbjjmMUe8vc/0zV646ZfgUr7qUiZRpjhYm31XaE=)
3: 1794902224E111EF97BA8F42C4F9AE02.roa (hash: iI/QhwgtRnAZ89cLUtViFH1F7QhncCiFpfub0JT3vAQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Nov 2025 18:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3196 (0xc7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Validity
Not Before: Oct 26 18:57:28 2025 GMT
Not After : Nov 2 18:57:28 2025 GMT
Subject: CN=68fe6f18-029e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:91:7a:71:69:02:b9:26:c3:aa:53:f3:6d:
ec:12:b6:3a:b9:c1:ab:ec:47:e0:2d:b7:fb:a3:43:
d4:52:28:f4:74:9e:27:b3:2a:eb:60:6c:4b:9c:17:
d4:ac:1e:ee:11:60:e5:2d:40:36:04:f4:5d:ed:3b:
47:44:34:29:77:5f:36:5c:39:a8:64:99:0f:e0:fe:
c8:a6:9c:fa:fe:b8:3b:6e:ec:d2:fb:f5:3c:f7:b6:
88:28:ca:e8:5c:d5:b4:b0:30:ea:06:7a:43:29:c2:
2b:56:a9:6d:0e:8d:fb:94:d5:b6:c7:f3:0f:3e:ae:
bb:99:65:49:59:8f:9c:da:42:16:51:4a:d9:04:87:
1c:32:6b:00:9c:a7:3c:6e:a1:6d:db:20:6f:e0:15:
6e:16:d1:3e:5f:d7:2f:c2:53:25:7f:ae:19:d5:41:
38:c4:d3:1d:59:d1:81:c8:09:03:45:12:45:bd:65:
b5:b3:dc:1b:07:6c:06:c1:a2:a1:51:7e:4c:5d:a6:
6e:95:52:68:f7:4b:f0:7d:20:db:c4:b4:11:fe:2d:
93:2a:24:e1:02:ec:8c:d1:6c:01:e2:14:6a:b4:54:
e7:e5:88:d6:45:bc:4f:8b:c5:d5:c3:99:73:5d:3e:
c4:d7:66:4a:ac:ca:82:6e:e6:08:db:06:33:af:98:
80:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2A:6F:EF:E3:A3:03:D5:46:45:54:99:BB:9A:51:EB:98:08:B7:B6
X509v3 Authority Key Identifier:
keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:56:70:b2:7c:b9:ec:e6:76:aa:63:94:19:ac:81:31:d5:e9:
5a:58:b6:07:1f:fc:3e:3e:f9:e3:02:57:04:e9:d7:51:b8:64:
59:20:99:e7:44:b1:12:80:d9:71:c8:5e:17:f8:e9:09:e7:36:
40:bd:21:1c:4a:74:94:76:e5:7b:ba:4f:20:9b:bb:1e:90:a6:
b3:09:c7:9b:33:11:f8:f0:5f:b5:31:54:1a:3e:fa:cf:60:47:
c6:0b:ed:32:93:c0:e3:e7:ec:27:59:b3:64:b8:12:d4:42:4f:
43:ed:ad:5f:5b:5f:e2:d0:9a:ea:44:7e:f1:88:5e:fe:62:b0:
95:bd:4d:56:93:18:eb:e5:12:e5:24:e7:7d:68:50:e8:b1:2e:
f8:d8:2e:94:d3:a1:4a:a7:2b:3c:44:60:53:ce:46:1c:a7:19:
fe:23:11:ec:0c:b4:1e:12:c9:0f:c8:08:8c:61:0a:90:2d:f2:
bc:a2:f6:4b:c3:b8:7b:8f:39:83:f3:93:f5:61:77:a3:0f:8b:
65:18:ad:0b:c6:82:88:39:1c:bb:79:70:ca:f6:3f:d3:dc:b1:
81:7e:50:87:11:86:18:66:0d:5d:23:8e:e4:de:95:2d:ef:35:
53:38:44:a1:41:5d:e7:16:fe:ff:a1:79:9d:ba:be:11:7a:d2:
2b:76:8b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:00:47 2025 by rpki-client