
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
File: MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json)
Hash identifier: pYMx5ZudpjK5JlXLJprhyUNIVkPSQoQWUmGk2EMH8hs=
Subject key identifier: 6D:35:69:CA:59:D6:8A:23:98:E8:21:F4:A5:F9:7E:E0:40:1E:B7:C1
Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03
Certificate issuer: /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
Certificate serial: 0271
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
Manifest number: 025F
Signing time: Sat 13 Jun 2026 02:14:18 +0000
Manifest this update: Sat 13 Jun 2026 02:14:17 +0000
Manifest next update: Sat 20 Jun 2026 02:14:17 +0000
Files and hashes: 1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: bArMzZmjYYjOjW/2bkXkZqZbi2Xtb68d+bXm+ONDA2U=)
2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: EIvm3xLw4Nyp5EuKey6WkJaoQc2wgEjOvCaL4fAv+m8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl
rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:14:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E81A5, serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
Validity
Not Before: Jun 13 02:14:17 2026 GMT
Not After : Jun 20 02:14:17 2026 GMT
Subject: CN=6a2cbcfa-c85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:2f:80:0a:c9:29:61:be:31:08:71:01:70:74:
c1:fa:24:8f:d2:08:50:4b:ba:ec:77:4f:ef:43:ae:
cf:d4:7c:0d:d1:2d:1b:0d:ae:43:8a:ae:0a:91:88:
ee:9f:5b:41:f3:f0:d1:bb:11:5f:0b:f4:51:dc:3e:
eb:a8:12:a8:35:9d:2f:e8:d9:a0:a9:b4:cd:8b:82:
54:8d:b4:30:28:e9:05:5f:37:c4:d3:c5:47:e2:9c:
1f:84:e5:61:fa:73:f8:2e:75:6a:7e:78:e3:d9:35:
73:7b:6d:a2:50:57:64:f2:0c:43:f6:28:95:2f:5c:
aa:97:db:71:8c:5c:3e:b5:d9:8d:6e:a4:4a:28:93:
aa:c9:63:a5:e7:06:c9:bc:c5:07:6c:72:6b:94:3d:
b6:52:cf:27:97:0d:e4:82:93:e6:46:3a:e2:41:17:
c6:f0:7c:2c:95:27:d8:61:69:02:68:a7:3e:1e:46:
67:8d:b0:79:fa:a5:e0:b2:9e:5d:4c:ef:b0:65:25:
84:57:7d:4c:d2:14:4a:eb:62:bc:81:c6:c7:40:d2:
79:a0:b8:e6:16:09:d1:6f:c8:9e:fa:8b:6b:1f:ca:
42:eb:5c:3b:b4:1c:48:01:91:9f:78:75:a7:c9:09:
65:01:3a:16:1d:c6:fb:e5:87:e2:15:df:1a:ce:4a:
33:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:35:69:CA:59:D6:8A:23:98:E8:21:F4:A5:F9:7E:E0:40:1E:B7:C1
X509v3 Authority Key Identifier:
keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:eb:4f:ef:fe:41:24:d6:10:a8:3a:9c:b2:df:b4:3f:60:c9:
57:22:c1:30:81:05:16:d7:82:44:f9:10:58:b0:aa:f7:42:c0:
8a:b7:69:91:4d:96:8e:0a:0d:10:d6:c0:45:82:49:7e:1c:62:
77:2f:2f:e5:56:a8:2a:7f:b5:86:90:a3:b9:87:d2:58:86:a0:
cd:6d:27:1d:d3:86:fa:a9:a6:af:76:ad:d7:23:52:d9:cd:fd:
82:1c:97:ab:aa:62:55:f8:ae:51:15:f2:53:61:b1:09:1a:90:
08:e6:aa:e0:b4:05:8c:bd:9f:ac:b9:2b:75:db:81:20:70:ca:
88:33:20:de:90:9a:6d:ed:2a:04:60:43:77:2c:f6:58:25:e7:
41:ed:7b:a3:24:94:6e:f1:83:7d:58:89:a5:26:c1:b8:42:d9:
b9:c4:56:26:57:a4:97:d5:04:78:a2:e1:8c:7f:40:bc:8b:b5:
c4:d0:a5:a8:4a:f1:59:d8:11:a6:75:9b:15:ee:b9:9f:a1:0f:
1e:30:16:2a:c9:51:8a:45:1f:f7:b7:7e:43:dd:cc:39:14:5b:
18:d1:27:6e:13:ec:06:a3:17:f0:1e:10:45:d6:5c:06:e7:9b:
9e:a2:7b:97:f7:b8:61:c1:52:fe:13:32:24:3d:d7:ea:cd:23:
ad:58:f7:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgxQTUxMTAvBgNVBAUTKDMwMzRERUYwNEQ5QTAzRUUyMjg5ODkyNEUzMTI2NEMw
MURFMDAzMDMwHhcNMjYwNjEzMDIxNDE3WhcNMjYwNjIwMDIxNDE3WjAYMRYwFAYD
VQQDEw02YTJjYmNmYS1jODVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9i+ACskpYb4xCHEBcHTB+iSP0ghQS7rsd0/vQ67P1HwN0S0bDa5Diq4KkYju
n1tB8/DRuxFfC/RR3D7rqBKoNZ0v6NmgqbTNi4JUjbQwKOkFXzfE08VH4pwfhOVh
+nP4LnVqfnjj2TVze22iUFdk8gxD9iiVL1yql9txjFw+tdmNbqRKKJOqyWOl5wbJ
vMUHbHJrlD22Us8nlw3kgpPmRjriQRfG8HwslSfYYWkCaKc+HkZnjbB5+qXgsp5d
TO+wZSWEV31M0hRK62K8gcbHQNJ5oLjmFgnRb8ie+otrH8pC61w7tBxIAZGfeHWn
yQllAToWHcb75YfiFd8azkoz1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG01acpZ
1oojmOgh9KX5fuBAHrfBMB8GA1UdIwQYMBaAFDA03vBNmgPuIomJJOMSZMAd4AMD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODFBNS9DMTU4NDNCNENB
MDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEtNGlpWWtrNHhKa3dCM2dB
d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01EVGU4RTJhQS00aWlZa2s0eEprd0IzZ0F3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODFBNS9DMTU4NDNCNENBMDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEt
NGlpWWtrNHhKa3dCM2dBd00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVOtP7/5BJNYQqDqcst+0P2DJVyLBMIEFFteCRPkQWLCq90LAirdpkU2WjgoN
ENbARYJJfhxidy8v5VaoKn+1hpCjuYfSWIagzW0nHdOG+qmmr3at1yNS2c39ghyX
q6piVfiuURXyU2GxCRqQCOaq4LQFjL2frLkrdduBIHDKiDMg3pCabe0qBGBDdyz2
WCXnQe17oySUbvGDfViJpSbBuELZucRWJlekl9UEeKLhjH9AvIu1xNClqErxWdgR
pnWbFe65n6EPHjAWKslRikUf97d+Q93MORRbGNEnbhPsBqMX8B4QRdZcBuebnqJ7
l/e4YcFS/hMyJD3X6s0jrVj3vQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:50:52 2026 by rpki-client