
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
File: MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json)
Hash identifier: reC6dNVBpJSR5zQfUuuV7vo14Yiw++2LVFusBQ7AWy8=
Subject key identifier: EE:10:CC:2D:C1:B7:7E:81:E3:4C:A3:5E:48:9C:B3:D0:BC:C7:FE:33
Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03
Certificate issuer: /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
Certificate serial: 022B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
Manifest number: 0227
Signing time: Sun 01 Mar 2026 03:29:24 +0000
Manifest this update: Sun 01 Mar 2026 03:29:23 +0000
Manifest next update: Sun 08 Mar 2026 03:29:23 +0000
Files and hashes: 1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: +J4Fyic8i1UERj8xvq0YSMzTZs4ck/9AEfLANS3NJDc=)
2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: EAhOEk1Moc8akKSrCsGi3T0LgEn8rEjOcRa2pHiI7Xs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl
rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555 (0x22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E81A5, serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
Validity
Not Before: Mar 1 03:29:23 2026 GMT
Not After : Mar 8 03:29:23 2026 GMT
Subject: CN=69a3b294-e09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:a1:0b:00:88:a7:56:b1:ce:60:01:b5:48:
f3:32:b6:79:98:7c:1f:05:64:95:f0:6f:c8:b2:8e:
6c:0d:43:e5:20:ae:2a:7f:a5:5f:6d:d3:42:62:3e:
01:d2:08:38:d8:76:a1:63:ba:ba:b4:bb:5b:51:55:
d2:bb:1c:6b:74:a9:cf:3f:8a:7e:eb:ed:0e:67:54:
d0:8a:cf:97:ee:9b:49:39:a5:bf:cb:07:0c:85:83:
25:cc:fc:d0:45:8d:4b:66:ca:17:4c:98:0a:36:ca:
50:e0:22:5f:fa:26:22:c6:4f:df:e4:d2:e8:cd:70:
e2:c4:c1:12:c9:e5:7e:0d:a0:8f:88:ee:38:36:5b:
df:7d:5e:54:1c:fd:2f:4c:9b:62:ee:c0:ee:77:68:
6a:57:4b:27:ad:ac:cd:81:dd:af:b5:6f:04:c9:ba:
a4:21:ea:d6:6c:8e:2b:cf:ae:75:a0:49:25:99:c9:
92:3e:93:c9:e9:b2:7b:75:93:8a:d8:02:30:da:ca:
e5:7f:da:90:fc:ec:e1:60:25:aa:59:e8:af:44:70:
98:28:a9:2b:54:ac:b7:d6:8b:4b:2b:75:3d:bc:65:
0a:21:0e:c4:a9:ea:2f:f3:55:b1:14:e9:36:86:45:
4b:98:2e:ef:85:22:de:3d:f1:07:32:05:a7:5b:1a:
24:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:10:CC:2D:C1:B7:7E:81:E3:4C:A3:5E:48:9C:B3:D0:BC:C7:FE:33
X509v3 Authority Key Identifier:
keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:78:48:3e:b6:0a:c6:7f:9b:1e:f0:d0:35:c8:87:a6:43:eb:
87:50:ee:48:fc:9b:f8:dd:14:1e:40:74:92:c6:e2:5b:40:87:
dd:7b:04:14:64:14:5d:b4:0f:a8:28:02:bb:47:41:08:8e:7f:
fd:22:c3:12:62:ec:4f:34:8e:9a:a3:b8:3f:b3:f2:ff:23:3b:
d3:a6:6c:f3:77:39:6c:7f:ce:3a:97:69:a9:60:5d:01:b4:3d:
73:ef:aa:83:f7:d4:6a:c2:52:ed:dc:fc:b7:f1:bd:60:14:22:
e7:17:93:fe:f0:68:73:61:44:ff:72:1a:a4:6e:82:26:58:b1:
8f:3d:3e:ec:0e:0c:75:53:ea:87:cb:05:37:ed:b3:80:ae:af:
80:86:d1:68:44:50:73:b5:d2:b3:3a:46:48:35:b1:71:79:af:
cd:df:7b:4e:40:d6:03:13:5f:e3:b8:3f:96:f0:55:54:10:8e:
8e:4a:60:78:a0:af:91:b4:90:75:86:71:c8:36:84:26:bd:de:
f6:86:f3:d7:74:b2:a9:ce:0c:97:d4:fc:d5:35:a5:06:b9:70:
4f:07:13:95:9e:2e:a4:27:ac:53:2c:3f:f0:1c:c4:37:9a:51:
1e:e0:04:7a:00:4c:16:94:ea:a0:e9:57:c9:f2:9e:27:d2:51:
aa:3b:e6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:22 2026 by rpki-client