
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
File: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft (raw, json)
Hash identifier: UOPb4LfQAUXvrKXBODHx8hYQNXbORdPXkeifJFkzRNk=
Subject key identifier: 33:D9:1E:9A:0B:DD:A6:15:2D:54:B4:55:BE:C1:F3:5E:81:82:41:98
Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
Certificate issuer: /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Certificate serial: 0D00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
Manifest number: 0CEC
Signing time: Fri 12 Jun 2026 18:23:41 +0000
Manifest this update: Fri 12 Jun 2026 18:23:40 +0000
Manifest next update: Fri 19 Jun 2026 18:23:40 +0000
Files and hashes: 1: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl (hash: ZoDNG0qLkJNIpm4oi/IdvGAXWOXDYN+Ah2AA0fysK30=)
2: 1794902224E111EF97BA8F42C4F9AE02.roa (hash: Cb0ms+5MzoBG/XTt2Zd5Vxt/O/XifJs8Bp4bbDCzW6c=)
3: 2C986C7E574711F1B4D92A609E833773.roa (hash: RWHIKGnsMljIh4sg02JObP14y4cKA5XjiIZ6HSOyX4I=)
4: EA903484DBE011EF8B7B8868C4F9AE02.roa (hash: Js9Xf/lTcrawT2dX8Q0Cfk/++xiRQdkyCZUT92zAOmA=)
5: A01AB4EC574511F1B124FED69D833773.roa (hash: MZIyYBnjh1pUhOWTFHX7tr01fIswpc8hJw1uWXdGFcg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3328 (0xd00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Validity
Not Before: Jun 12 18:23:40 2026 GMT
Not After : Jun 19 18:23:40 2026 GMT
Subject: CN=6a2c4ead-b0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:e2:a3:dc:bf:3a:6e:0c:fa:2e:dc:c8:5b:
b0:7d:d0:13:ce:44:f4:9d:c7:d7:55:92:7a:19:e7:
fa:af:fb:cf:df:c7:16:a8:c9:40:3a:37:ed:a8:10:
00:d0:42:ae:f6:d4:f0:b8:5a:03:03:9f:18:f2:e6:
a5:6b:4c:2c:5d:09:86:b9:cd:0b:4a:7b:cf:b9:7b:
0b:3f:59:92:6a:65:6e:6f:b3:a5:c8:94:9e:50:da:
7b:92:7e:50:82:a1:06:cc:4d:d3:74:ca:17:75:3b:
ff:ff:84:38:db:2b:b4:4e:39:84:bf:22:ba:d0:76:
05:e3:60:1f:e9:fa:29:da:06:38:91:19:33:03:bd:
03:26:53:ac:f9:92:bf:35:53:1b:67:01:39:be:96:
ef:b0:98:0e:65:3b:c8:20:28:cf:96:cc:e5:4a:c9:
22:21:3f:9f:51:f2:0b:0d:6a:f6:e5:0a:64:3e:59:
4b:18:61:6a:d5:bf:cc:22:16:35:8e:d9:60:4a:1c:
ba:f0:a5:8c:14:42:e7:5e:72:68:00:59:2f:c2:dc:
5e:34:ff:14:3a:d9:da:2f:58:f0:92:f9:48:f6:61:
9e:f2:ee:bb:47:c4:fc:fb:a1:b7:c1:35:04:00:08:
6f:c5:47:e5:1f:ad:ab:85:84:30:f9:f3:6e:82:14:
90:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D9:1E:9A:0B:DD:A6:15:2D:54:B4:55:BE:C1:F3:5E:81:82:41:98
X509v3 Authority Key Identifier:
keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:6c:6d:c2:3a:a1:ee:b5:1b:55:8c:33:36:83:15:6e:19:d7:
4c:f5:4e:ac:8b:28:ff:76:c0:e9:6d:4c:4b:9b:96:0b:5b:61:
e6:06:ce:04:d0:6c:50:9a:be:26:9d:18:35:4a:98:1c:fc:3e:
6a:45:77:94:5a:b5:04:1c:c8:26:ca:37:bb:71:9c:80:a1:46:
7e:5a:b9:95:84:d5:9c:3c:d1:31:b2:40:cf:63:50:47:e4:cd:
e8:7d:08:8a:30:d1:9c:fd:6f:e0:68:04:8e:6f:af:e9:a2:7c:
40:6c:d5:af:0a:88:70:8a:b8:13:7f:6c:6e:09:c6:14:14:76:
53:85:3d:d1:59:3f:b4:49:60:d8:a5:d0:7b:6c:40:01:a3:4a:
5f:21:0f:59:8f:6e:68:5c:8f:3d:fd:86:36:96:52:b5:9e:96:
a5:fc:e6:d1:7c:45:b2:bb:8b:8a:40:45:5a:ba:9a:de:61:19:
bb:88:d8:b5:60:8a:b7:34:0c:42:63:c3:cd:aa:1f:79:92:1a:
6b:e1:65:94:d3:c3:a5:17:54:f0:20:f0:4f:4b:16:c5:68:05:
d9:cf:da:0a:e3:3d:05:b0:5a:b0:20:be:e6:9c:80:78:3e:63:
84:d3:88:cc:1c:f1:0b:c8:07:65:3d:a1:b1:84:b8:f3:c6:3c:
3c:86:22:78
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTcyQUIxMTAvBgNVBAUTKDMxRDA5RTI0RDVEQjhDNThGNDE0RUVBM0VGMEVFREZC
MzU1REFCRjQwHhcNMjYwNjEyMTgyMzQwWhcNMjYwNjE5MTgyMzQwWjAYMRYwFAYD
VQQDEw02YTJjNGVhZC1iMGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuY7io9y/Om4M+i7cyFuwfdATzkT0ncfXVZJ6Gef6r/vP38cWqMlAOjftqBAA
0EKu9tTwuFoDA58Y8uala0wsXQmGuc0LSnvPuXsLP1mSamVub7OlyJSeUNp7kn5Q
gqEGzE3TdMoXdTv//4Q42yu0TjmEvyK60HYF42Af6fop2gY4kRkzA70DJlOs+ZK/
NVMbZwE5vpbvsJgOZTvIICjPlszlSskiIT+fUfILDWr25QpkPllLGGFq1b/MIhY1
jtlgShy68KWMFELnXnJoAFkvwtxeNP8UOtnaL1jwkvlI9mGe8u67R8T8+6G3wTUE
AAhvxUflH62rhYQw+fNughSQHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDPZHpoL
3aYVLVS0Vb7B816BgkGYMB8GA1UdIwQYMBaAFDHQniTV24xY9BTuo+8O7fs1Xav0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJBQi9ENzE3MzRGRTBD
QTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpGajBGTzZqN3c3dC16VmRx
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01kQ2VKTlhiakZqMEZPNmo3dzd0LXpWZHFfUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzJBQi9ENzE3MzRGRTBDQTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpG
ajBGTzZqN3c3dC16VmRxX1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV2xtwjqh7rUbVYwzNoMVbhnXTPVOrIso/3bA6W1MS5uWC1th5gbOBNBsUJq+
Jp0YNUqYHPw+akV3lFq1BBzIJso3u3GcgKFGflq5lYTVnDzRMbJAz2NQR+TN6H0I
ijDRnP1v4GgEjm+v6aJ8QGzVrwqIcIq4E39sbgnGFBR2U4U90Vk/tElg2KXQe2xA
AaNKXyEPWY9uaFyPPf2GNpZStZ6Wpfzm0XxFsruLikBFWrqa3mEZu4jYtWCKtzQM
QmPDzaofeZIaa+FllNPDpRdU8CDwT0sWxWgF2c/aCuM9BbBasCC+5pyAeD5jhNOI
zBzxC8gHZT2hsYS488Y8PIYieA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:43:47 2026 by rpki-client