
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
File: MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json)
Hash identifier: mgm9X2yQNAzmr01s9GdtK6A3x9FRcgpNZIJi2t8m02g=
Subject key identifier: B5:80:CD:33:93:86:C5:A1:AA:9C:56:CD:A9:A4:71:3F:A3:D1:43:9F
Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03
Certificate issuer: /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
Certificate serial: 024F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
Manifest number: 023D
Signing time: Sun 05 Apr 2026 02:06:22 +0000
Manifest this update: Sun 05 Apr 2026 02:06:21 +0000
Manifest next update: Sun 12 Apr 2026 02:06:21 +0000
Files and hashes: 1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: VYdkepVsuIgwoMlQjxji1CiHKpHmVQSp5M9OXtJpQ0M=)
2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: EIvm3xLw4Nyp5EuKey6WkJaoQc2wgEjOvCaL4fAv+m8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl
rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E81A5, serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
Validity
Not Before: Apr 5 02:06:21 2026 GMT
Not After : Apr 12 02:06:21 2026 GMT
Subject: CN=69d1c39d-b57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f3:47:4a:8e:e2:33:8a:6d:d7:18:1a:91:81:
24:05:5d:fb:87:91:c9:a7:31:38:8f:61:35:c8:e2:
84:9c:e6:9e:70:85:db:fb:07:be:f8:20:54:23:07:
c2:c8:ee:85:0d:18:0d:99:dc:f2:b7:d9:07:84:f0:
ee:25:ae:83:2c:eb:2a:b6:ae:94:e5:89:ef:75:fd:
99:12:22:99:06:26:4b:76:5d:6c:b7:5c:62:e9:37:
2d:74:1b:63:13:60:53:57:d7:98:e0:8b:82:64:14:
7b:84:67:f3:03:5b:d2:14:53:3a:2a:4a:ef:83:7b:
b5:58:01:da:4d:6d:d1:42:2f:89:79:d1:a4:ba:e1:
16:f0:2a:ed:6e:57:d7:8d:d5:5a:23:74:ee:a8:4a:
30:8b:fa:a7:04:cd:54:03:ca:12:fd:11:45:f3:59:
70:40:28:25:5b:d5:17:88:bd:fb:74:52:53:b3:e5:
51:66:a3:c4:e1:d6:b5:16:41:ff:63:e5:93:dc:b1:
cf:a8:32:cc:39:d4:fa:12:9b:e0:52:75:30:d8:c2:
0d:b7:62:3e:44:fd:de:9b:4b:36:1d:a9:01:c5:86:
5f:0c:21:e3:86:e9:6b:72:13:e6:53:a9:56:fe:e9:
93:e5:57:25:09:53:ac:a5:43:54:c3:f6:e1:c4:ca:
a8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:80:CD:33:93:86:C5:A1:AA:9C:56:CD:A9:A4:71:3F:A3:D1:43:9F
X509v3 Authority Key Identifier:
keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f9:d3:0b:87:39:f5:81:94:60:37:bf:9c:bd:57:92:80:8e:
e3:6e:df:14:90:1a:15:09:49:01:f6:8c:87:c9:13:f8:ab:3e:
ff:05:21:c2:98:d8:7d:bb:81:57:54:dc:52:ac:44:16:15:0e:
8c:61:dc:9f:39:50:fd:81:14:83:52:d3:04:48:82:f4:3f:d1:
46:fc:84:3c:6b:23:03:e0:fa:e2:1b:61:60:00:9a:09:ed:7e:
b2:4c:5c:9c:8e:de:24:10:e0:5a:e6:44:03:49:99:07:52:97:
b6:8f:77:d6:01:5f:21:f3:3f:a6:7e:77:38:22:7b:e4:5a:c6:
96:9a:b2:0a:9f:4d:a4:92:85:eb:e1:1d:10:8d:f9:36:e0:55:
3c:c8:70:dd:c8:55:c5:bf:4c:d4:a8:d2:9c:fa:4d:9f:4c:24:
26:65:34:fd:0f:8f:d7:6d:ad:3b:90:ef:83:1d:44:02:92:6e:
52:15:4c:50:3a:d0:eb:4f:af:ba:3d:cc:79:dc:c0:35:4b:b0:
8d:a8:30:a9:ed:ba:33:d7:ce:c7:94:4a:d6:6d:eb:33:83:78:
53:2d:f7:ca:b6:c5:5c:d3:d6:ee:e0:11:f7:5f:c4:c3:cf:06:
72:70:f8:84:b3:6d:c8:03:aa:09:f4:54:c9:7d:a4:02:9a:64:
23:be:6a:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgxQTUxMTAvBgNVBAUTKDMwMzRERUYwNEQ5QTAzRUUyMjg5ODkyNEUzMTI2NEMw
MURFMDAzMDMwHhcNMjYwNDA1MDIwNjIxWhcNMjYwNDEyMDIwNjIxWjAYMRYwFAYD
VQQDEw02OWQxYzM5ZC1iNTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl/NHSo7iM4pt1xgakYEkBV37h5HJpzE4j2E1yOKEnOaecIXb+we++CBUIwfC
yO6FDRgNmdzyt9kHhPDuJa6DLOsqtq6U5Ynvdf2ZEiKZBiZLdl1st1xi6TctdBtj
E2BTV9eY4IuCZBR7hGfzA1vSFFM6Kkrvg3u1WAHaTW3RQi+JedGkuuEW8CrtblfX
jdVaI3TuqEowi/qnBM1UA8oS/RFF81lwQCglW9UXiL37dFJTs+VRZqPE4da1FkH/
Y+WT3LHPqDLMOdT6EpvgUnUw2MINt2I+RP3em0s2HakBxYZfDCHjhulrchPmU6lW
/umT5VclCVOspUNUw/bhxMqozwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLWAzTOT
hsWhqpxWzamkcT+j0UOfMB8GA1UdIwQYMBaAFDA03vBNmgPuIomJJOMSZMAd4AMD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODFBNS9DMTU4NDNCNENB
MDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEtNGlpWWtrNHhKa3dCM2dB
d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01EVGU4RTJhQS00aWlZa2s0eEprd0IzZ0F3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODFBNS9DMTU4NDNCNENBMDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEt
NGlpWWtrNHhKa3dCM2dBd00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAs/nTC4c59YGUYDe/nL1XkoCO427fFJAaFQlJAfaMh8kT+Ks+/wUhwpjYfbuB
V1TcUqxEFhUOjGHcnzlQ/YEUg1LTBEiC9D/RRvyEPGsjA+D64hthYACaCe1+skxc
nI7eJBDgWuZEA0mZB1KXto931gFfIfM/pn53OCJ75FrGlpqyCp9NpJKF6+EdEI35
NuBVPMhw3chVxb9M1KjSnPpNn0wkJmU0/Q+P122tO5Dvgx1EApJuUhVMUDrQ60+v
uj3MedzANUuwjagwqe26M9fOx5RK1m3rM4N4Uy33yrbFXNPW7uAR91/Ew88GcnD4
hLNtyAOqCfRUyX2kAppkI75qbg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:44 2026 by rpki-client