
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
File: MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json)
Hash identifier: vCQPu8XOUpUiDPjtKr3whw1aY3ScfYuvmioCiTdXMXY=
Subject key identifier: 50:38:A4:9D:C6:99:D7:08:DE:60:D7:45:22:42:92:1F:68:01:75:23
Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03
Certificate issuer: /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
Certificate serial: 0266
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
Manifest number: 0254
Signing time: Thu 21 May 2026 02:22:35 +0000
Manifest this update: Thu 21 May 2026 02:22:35 +0000
Manifest next update: Thu 28 May 2026 02:22:35 +0000
Files and hashes: 1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: NkeUnXO5z65jjQOzlZJasAEAcGz9qheK82Ts76PWADo=)
2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: EIvm3xLw4Nyp5EuKey6WkJaoQc2wgEjOvCaL4fAv+m8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl
rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 614 (0x266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E81A5, serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
Validity
Not Before: May 21 02:22:35 2026 GMT
Not After : May 28 02:22:35 2026 GMT
Subject: CN=6a0e6c6b-83bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fe:18:f0:1e:9e:ac:8d:b9:3d:1d:75:8b:00:
1b:f3:8c:69:78:6b:cf:44:a2:6b:2d:f8:71:78:64:
b3:62:48:50:11:dc:89:ca:e3:50:9e:ed:11:24:de:
ea:1e:46:10:4a:f0:57:ea:bd:1c:26:cd:be:86:75:
f2:1a:66:b0:62:85:ac:72:c8:5d:59:91:68:2a:df:
83:5d:1e:22:2f:d9:4d:c6:69:47:6d:a2:5d:92:91:
8e:35:bb:cc:16:f6:22:ba:d0:25:37:04:49:1a:84:
66:dc:b5:f1:50:a0:55:da:ab:4e:ce:08:6b:53:1b:
bd:80:50:71:f9:79:88:42:77:0f:9f:fd:be:d7:56:
04:44:09:4b:c3:8b:2a:80:a6:0c:6d:df:0f:ed:2e:
0c:cb:75:eb:c0:81:9b:86:d6:1e:85:2e:dc:0f:ab:
d0:24:4d:9f:e8:86:9c:df:f0:bd:d6:86:90:3c:64:
6c:8c:5e:55:80:9d:bc:87:b5:59:27:21:b1:38:a0:
78:78:ef:88:99:50:ed:79:87:e0:0b:5e:8a:e9:f0:
e7:8a:23:af:72:6e:3d:d8:d9:20:d4:98:ff:57:d2:
61:f5:75:d9:58:90:30:08:b2:be:ab:87:ce:e3:77:
89:01:8b:db:ef:6f:ac:f7:04:54:0e:4f:93:08:74:
ce:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:38:A4:9D:C6:99:D7:08:DE:60:D7:45:22:42:92:1F:68:01:75:23
X509v3 Authority Key Identifier:
keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:5c:a9:d4:46:ed:6c:a3:bd:a1:b6:48:28:77:13:bd:02:67:
fe:ff:85:b0:80:2d:35:f8:b9:8d:ce:11:61:03:46:41:4b:3c:
84:8b:3a:03:bb:2e:8a:de:95:63:43:ff:54:24:83:d6:06:32:
5c:4d:13:d9:96:34:02:38:43:42:7b:08:23:0f:c6:83:87:61:
1e:65:64:b1:fd:06:ce:b6:e6:33:ca:54:ff:d3:47:fd:fe:90:
e5:5c:03:ca:82:ba:58:04:9d:7e:c3:dd:59:57:9a:0a:59:98:
a0:10:11:ad:5e:a4:37:1c:c3:91:5e:dd:49:3b:c3:48:e8:44:
4d:0b:dd:2f:5f:10:2f:14:33:3c:92:41:45:5b:a9:b6:75:bb:
c9:0a:d5:01:e1:51:53:76:44:14:68:d5:aa:2c:21:5b:d3:ea:
9b:d5:1d:f5:c6:56:0e:14:52:46:e0:69:80:c4:98:9c:0b:cb:
58:62:e1:0f:fb:79:8c:60:11:7d:ea:f8:c5:b3:85:ac:ac:0b:
27:8b:3a:df:7d:37:1a:e3:90:08:a2:d7:06:6c:16:3f:5e:dd:
45:15:a8:ca:fd:29:65:32:be:39:03:12:62:c5:98:76:e9:72:
bf:3b:80:c0:f0:bf:a7:f9:43:0d:b2:01:67:bb:60:b4:99:34:
84:49:bd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:26 2026 by rpki-client