
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
File: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft (raw, json)
Hash identifier: KMKLuPf9M6XrkEJPar0aiisOQS8f0jyCxR0bgmqxpb4=
Subject key identifier: 35:9A:80:7E:04:C0:BE:C4:BE:AB:BD:4C:B9:EF:4B:F0:77:F8:0E:E8
Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
Certificate issuer: /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Certificate serial: 0CBD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
Manifest number: 0CB0
Signing time: Sat 28 Feb 2026 18:37:56 +0000
Manifest this update: Sat 28 Feb 2026 18:37:55 +0000
Manifest next update: Sat 07 Mar 2026 18:37:55 +0000
Files and hashes: 1: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl (hash: 9Ch4mF2Dub8261p4Espl8gJho5Bc7SdKDAJVXhTDKUg=)
2: EA903484DBE011EF8B7B8868C4F9AE02.roa (hash: F9++BbjjmMUe8vc/0zV646ZfgUr7qUiZRpjhYm31XaE=)
3: 1794902224E111EF97BA8F42C4F9AE02.roa (hash: iI/QhwgtRnAZ89cLUtViFH1F7QhncCiFpfub0JT3vAQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3261 (0xcbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Validity
Not Before: Feb 28 18:37:55 2026 GMT
Not After : Mar 7 18:37:55 2026 GMT
Subject: CN=69a33604-1433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:78:a3:66:e8:8d:2a:65:b3:2b:23:b2:6a:0b:
f4:4c:ee:67:de:4e:e7:f0:d6:95:33:46:be:3a:58:
41:48:03:fc:42:ca:a7:e3:42:5f:ab:14:c9:af:e2:
5f:cd:fd:41:9c:7f:1f:0d:1b:cd:da:51:45:a2:19:
82:68:76:dc:0c:0b:4e:54:30:10:f4:61:ce:d7:89:
d8:e0:67:29:34:eb:ef:82:87:54:5c:9e:4d:49:67:
55:74:3a:07:44:ef:62:11:ca:8b:31:3a:4f:c6:b3:
55:c6:1f:52:f0:c5:07:a4:7d:14:28:4b:04:f6:35:
55:c3:8d:1e:93:77:5a:82:d1:9e:8e:0b:49:45:e4:
05:59:15:6a:d5:66:9e:30:a7:34:eb:14:bf:a6:7c:
1d:a8:f2:70:62:6a:95:fc:04:d5:e0:30:a3:57:da:
0e:5e:66:1e:88:32:21:f4:49:a6:34:8e:f8:e3:77:
9b:2b:20:0e:1a:5c:1a:96:c2:f4:c8:53:55:10:7c:
d0:1d:c0:a6:ae:68:f0:6d:ee:15:ed:93:93:d1:b2:
90:13:76:0d:bd:01:9d:36:f4:71:d2:11:67:a6:ab:
1d:f2:ad:94:ed:9f:f3:27:63:21:93:ae:d2:ef:d6:
b1:da:35:0c:7e:a0:23:a7:3a:1e:0f:f7:2b:c8:d7:
2a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9A:80:7E:04:C0:BE:C4:BE:AB:BD:4C:B9:EF:4B:F0:77:F8:0E:E8
X509v3 Authority Key Identifier:
keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7d:8f:70:b5:16:58:52:ee:49:23:3c:5e:0d:7f:a7:2b:a7:
ba:64:4e:1b:57:88:d8:ee:0f:62:0c:eb:b2:71:96:7c:4b:af:
cf:4c:cb:4c:34:fc:86:49:a2:cd:ce:06:66:e5:51:25:aa:9d:
ee:1d:3e:40:66:9c:b2:63:4e:9c:2f:13:86:9d:a0:cd:e4:42:
a1:e0:88:a4:51:e5:f8:f4:fd:55:e7:bf:d7:5f:b7:70:45:6f:
03:23:3a:6d:06:d3:b1:f2:68:f6:2f:45:cc:b4:8b:a3:5f:bb:
e1:21:e4:76:fc:68:29:6c:f6:f2:10:da:3f:5a:1f:71:9e:b1:
d3:fd:77:96:7c:70:27:6f:c9:a5:8c:cb:54:06:ae:89:3e:08:
ca:76:e8:f8:d0:a7:86:3a:a1:72:5c:05:5c:e2:fa:f3:5b:52:
b3:09:78:69:cd:d6:58:2e:18:78:66:8e:29:51:01:92:4e:db:
4c:f5:e0:e5:73:3f:58:5b:46:c3:be:4f:dc:9a:09:5c:e7:01:
2c:16:3b:6b:e6:c9:17:bb:5b:c4:b9:8e:e7:dc:0c:12:68:66:
ac:99:b4:08:51:78:cc:8f:5a:27:e1:55:6d:82:ef:e5:c2:59:
66:42:a6:ca:85:aa:09:6f:45:18:74:25:b8:96:9c:26:8a:ed:
79:e0:db:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:07:40 2026 by rpki-client