
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
File: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft (raw, json)
Hash identifier: rbg9Yg1AX7RP87uiXTHCLFdqQlip6bIBaqsjy5w/I5U=
Subject key identifier: A3:80:68:4C:83:2D:B6:40:86:25:9D:8D:76:08:46:25:CA:3D:0B:DD
Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
Certificate issuer: /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Certificate serial: 0D2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
Manifest number: 0D1A
Signing time: Thu 10 Sep 2026 18:18:53 +0000
Manifest this update: Thu 10 Sep 2026 18:18:52 +0000
Manifest next update: Thu 17 Sep 2026 18:18:52 +0000
Files and hashes: 1: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl (hash: 631N2PeezDX4fU0V/hI84BdX5OWU/fFSTkoS876VWmw=)
2: A01AB4EC574511F1B124FED69D833773.roa (hash: MZIyYBnjh1pUhOWTFHX7tr01fIswpc8hJw1uWXdGFcg=)
3: 1794902224E111EF97BA8F42C4F9AE02.roa (hash: Cb0ms+5MzoBG/XTt2Zd5Vxt/O/XifJs8Bp4bbDCzW6c=)
4: EA903484DBE011EF8B7B8868C4F9AE02.roa (hash: Js9Xf/lTcrawT2dX8Q0Cfk/++xiRQdkyCZUT92zAOmA=)
5: 2C986C7E574711F1B4D92A609E833773.roa (hash: RWHIKGnsMljIh4sg02JObP14y4cKA5XjiIZ6HSOyX4I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 18:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3374 (0xd2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Validity
Not Before: Sep 10 18:18:52 2026 GMT
Not After : Sep 17 18:18:52 2026 GMT
Subject: CN=6aa2f48c-d8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b2:59:3f:de:8f:85:f8:e6:4c:14:04:ec:f4:
cf:d7:0d:6f:b2:dc:97:28:2b:52:3d:3d:e9:96:ed:
20:f1:96:fb:b6:6b:c0:d9:35:47:03:c4:5c:1f:4a:
a7:4d:90:ed:45:a6:d6:85:12:69:d8:15:2b:fc:6c:
10:1b:0a:56:f8:27:3e:53:39:83:cf:fd:59:13:58:
a4:ca:a1:8c:75:d1:b6:86:43:82:81:23:63:cc:26:
0d:ab:d1:e6:65:3e:83:d0:4a:10:ba:27:9a:d8:0b:
73:3c:d6:b3:00:bc:ee:6e:62:2e:24:5f:96:73:53:
d7:33:74:11:15:bf:28:b6:b9:3d:d7:4d:ed:92:d8:
94:b3:44:5f:9d:ca:60:01:06:0d:34:d5:18:da:bf:
e4:02:e9:46:a7:43:aa:73:32:92:7e:17:ff:68:63:
05:57:55:16:5c:1c:14:03:9d:d1:a5:19:cb:ed:0c:
2b:9d:33:d8:cd:b5:59:80:3e:3b:ec:94:31:ce:bf:
b4:4c:2c:7d:54:50:33:f3:8b:db:9c:0f:b6:87:4a:
94:b8:d7:6e:4d:15:d8:9e:6b:d8:e8:d6:f0:b5:e2:
58:48:77:60:e5:c3:6f:83:28:f2:c2:a6:00:ed:8f:
a6:d0:27:f0:f0:dd:6d:38:b6:df:7c:35:eb:d9:97:
7e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:80:68:4C:83:2D:B6:40:86:25:9D:8D:76:08:46:25:CA:3D:0B:DD
X509v3 Authority Key Identifier:
keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ac:20:9b:48:fa:b5:2c:01:20:72:c8:e8:75:58:3d:ce:30:
c0:65:d8:76:ac:65:49:32:92:96:e3:c3:9a:db:c8:58:59:3d:
63:7a:a0:58:80:15:25:1c:9c:7e:f4:8c:47:40:0f:a7:9a:83:
b4:72:cf:dd:98:b6:97:c2:9c:ef:6f:a6:a9:fd:7e:a0:e6:88:
e8:8e:28:82:83:33:50:61:9a:f0:11:5b:87:1f:9c:6f:4b:5f:
35:40:7f:4d:7a:9a:05:a8:7e:99:73:b6:92:db:ab:23:67:cd:
ea:75:2a:d6:7c:af:f7:f5:af:8e:f8:40:d4:d1:34:77:cd:b2:
de:ff:2c:4c:15:36:5c:9a:2b:21:ff:8f:d0:5d:13:71:e8:09:
46:d2:4a:c8:c5:0b:71:86:2f:ec:f4:2e:08:d0:32:d7:9e:07:
8c:d0:4c:38:ac:dd:4b:54:6d:f0:0b:11:e8:f4:6f:26:fd:aa:
7f:5b:2c:22:f3:c1:c3:59:e0:b3:70:46:a0:14:5c:83:41:e5:
d7:1e:f5:c9:03:cd:30:d0:44:91:e8:02:5c:1c:77:50:74:10:
4b:bc:92:3e:36:f2:67:5b:a3:aa:52:45:e3:a5:c7:41:54:bb:
fb:b3:de:ad:c9:b1:70:31:9b:d7:f8:2f:cf:29:95:90:c1:f0:
68:5d:1a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:27:41 2026 by rpki-client