
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
File: MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json)
Hash identifier: ngfR3HozqTXD4Yeuym9Uka8LUUamSBWZGh0mHWVVEq8=
Subject key identifier: 36:36:8E:DD:9F:71:FA:1D:6B:40:83:1F:CF:62:CA:CB:EA:04:3D:7C
Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03
Certificate issuer: /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
Certificate serial: 0255
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
Manifest number: 0243
Signing time: Fri 17 Apr 2026 02:14:32 +0000
Manifest this update: Fri 17 Apr 2026 02:14:31 +0000
Manifest next update: Fri 24 Apr 2026 02:14:31 +0000
Files and hashes: 1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: bCV5RkKlShKwestFSPCcxr/cnGD/wIOzbzs8e4D3XW8=)
2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: EIvm3xLw4Nyp5EuKey6WkJaoQc2wgEjOvCaL4fAv+m8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl
rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:14:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E81A5, serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
Validity
Not Before: Apr 17 02:14:31 2026 GMT
Not After : Apr 24 02:14:31 2026 GMT
Subject: CN=69e19788-a2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c9:66:b0:9c:46:82:48:9c:2b:23:2b:8c:a6:
1c:3e:9b:9c:41:8f:81:f1:58:0c:80:e3:62:8a:46:
71:ec:85:f4:e0:1a:fa:a0:ba:35:48:cb:8d:00:f4:
a8:1a:50:e9:88:4b:05:a2:9a:b2:86:d9:7b:17:85:
4b:8f:29:aa:bd:c2:cf:75:db:37:2c:a5:c5:8f:1b:
70:d7:82:66:a1:4a:af:ee:71:fa:92:a8:a9:8b:d7:
c8:63:c7:e9:bd:f9:62:12:3e:35:27:bb:33:d4:da:
db:ff:80:07:74:52:5a:37:3b:51:e1:4d:3c:c4:00:
6f:6c:06:8d:76:c9:68:f3:9e:46:0c:68:bf:ea:1f:
e5:a9:22:6b:30:09:43:31:c2:15:21:e6:a8:5f:ef:
e7:b9:81:dd:d3:64:42:7b:ce:b3:e4:72:a8:03:57:
04:63:6f:8b:54:95:37:c3:50:26:a3:71:17:85:c6:
6a:20:71:4c:db:97:3f:a7:a0:29:94:65:f8:3c:91:
b6:7f:e8:0d:b0:9a:74:6a:1b:3b:9e:fc:92:74:f6:
5f:46:ff:dc:01:db:64:aa:99:ee:13:03:63:0d:8d:
7d:b9:d2:c7:5e:b0:71:38:16:03:68:f1:ba:1b:d4:
6f:da:82:c2:0d:cb:c1:a7:36:20:16:ba:49:fc:b8:
39:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:36:8E:DD:9F:71:FA:1D:6B:40:83:1F:CF:62:CA:CB:EA:04:3D:7C
X509v3 Authority Key Identifier:
keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:af:e6:cc:22:15:ed:23:0a:5f:93:0e:81:66:86:15:c8:ad:
56:59:93:77:7c:b9:35:91:2e:21:77:68:cd:64:65:a4:ae:3e:
69:97:52:b7:66:ca:d9:10:08:97:40:23:6d:ca:58:8c:b8:3b:
97:8b:7f:1f:96:3f:e1:20:96:7c:85:2f:54:8c:92:d9:ad:7d:
f3:9b:f7:96:16:80:d6:d2:16:d0:3a:10:a1:0d:f6:0a:e4:a0:
72:36:91:55:39:1f:58:21:3a:bb:b3:55:d9:94:1c:7b:17:4e:
f4:2b:9d:3e:b0:92:a7:82:d1:7b:22:5a:7a:9e:f8:f1:f7:ba:
7d:73:41:07:43:fa:e1:03:00:54:0e:19:52:72:37:6a:c5:01:
b1:92:d4:1f:1d:21:3d:dc:03:db:f0:91:50:57:13:5a:f7:ba:
6c:de:1c:33:0d:ce:fe:83:23:83:29:87:0e:de:51:1c:e7:3b:
e8:f9:34:44:e1:4d:40:b5:b7:c2:ef:73:4a:be:a6:ea:a6:dd:
9a:ce:e9:6b:60:41:e5:c6:c4:52:56:c2:c3:0a:86:0f:63:04:
9e:1c:22:b3:c0:a0:bc:8e:cc:90:27:32:f4:4d:13:fd:86:fd:
de:d0:d4:f7:c2:26:74:bc:f1:9c:9f:88:d4:6d:a9:f2:a7:13:
b2:cf:1d:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgxQTUxMTAvBgNVBAUTKDMwMzRERUYwNEQ5QTAzRUUyMjg5ODkyNEUzMTI2NEMw
MURFMDAzMDMwHhcNMjYwNDE3MDIxNDMxWhcNMjYwNDI0MDIxNDMxWjAYMRYwFAYD
VQQDEw02OWUxOTc4OC1hMmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApclmsJxGgkicKyMrjKYcPpucQY+B8VgMgONiikZx7IX04Br6oLo1SMuNAPSo
GlDpiEsFopqyhtl7F4VLjymqvcLPdds3LKXFjxtw14JmoUqv7nH6kqipi9fIY8fp
vfliEj41J7sz1Nrb/4AHdFJaNztR4U08xABvbAaNdslo855GDGi/6h/lqSJrMAlD
McIVIeaoX+/nuYHd02RCe86z5HKoA1cEY2+LVJU3w1Amo3EXhcZqIHFM25c/p6Ap
lGX4PJG2f+gNsJp0ahs7nvySdPZfRv/cAdtkqpnuEwNjDY19udLHXrBxOBYDaPG6
G9Rv2oLCDcvBpzYgFrpJ/Lg56QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDY2jt2f
cfoda0CDH89iysvqBD18MB8GA1UdIwQYMBaAFDA03vBNmgPuIomJJOMSZMAd4AMD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODFBNS9DMTU4NDNCNENB
MDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEtNGlpWWtrNHhKa3dCM2dB
d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01EVGU4RTJhQS00aWlZa2s0eEprd0IzZ0F3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODFBNS9DMTU4NDNCNENBMDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEt
NGlpWWtrNHhKa3dCM2dBd00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALq/mzCIV7SMKX5MOgWaGFcitVlmTd3y5NZEuIXdozWRlpK4+aZdSt2bK2RAI
l0AjbcpYjLg7l4t/H5Y/4SCWfIUvVIyS2a1985v3lhaA1tIW0DoQoQ32CuSgcjaR
VTkfWCE6u7NV2ZQcexdO9CudPrCSp4LReyJaep748fe6fXNBB0P64QMAVA4ZUnI3
asUBsZLUHx0hPdwD2/CRUFcTWve6bN4cMw3O/oMjgymHDt5RHOc76Pk0ROFNQLW3
wu9zSr6m6qbdms7pa2BB5cbEUlbCwwqGD2MEnhwis8CgvI7MkCcy9E0T/Yb93tDU
98ImdLzxnJ+I1G2p8qcTss8dUQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:03:20 2026 by rpki-client