
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
File: MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json)
Hash identifier: W4r94NGsopePmvoSRSirGs0Af9gtEhs7ZKxmg/vCibk=
Subject key identifier: 16:A1:F0:DF:0B:ED:3F:35:18:79:C0:BF:E7:93:26:1E:EA:4E:AC:23
Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03
Certificate issuer: /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
Certificate serial: 024A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
Manifest number: 0238
Signing time: Fri 27 Mar 2026 02:06:45 +0000
Manifest this update: Fri 27 Mar 2026 02:06:45 +0000
Manifest next update: Fri 03 Apr 2026 02:06:45 +0000
Files and hashes: 1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: OzxNTRJuWCYt53z3GCdPOwi/n381nvL3g1IiykS5ZSg=)
2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: EIvm3xLw4Nyp5EuKey6WkJaoQc2wgEjOvCaL4fAv+m8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl
rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 02:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E81A5, serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
Validity
Not Before: Mar 27 02:06:45 2026 GMT
Not After : Apr 3 02:06:45 2026 GMT
Subject: CN=69c5e635-0dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ac:ed:0e:74:97:4f:ef:0d:4c:8f:34:f4:b4:
83:28:5c:76:a8:43:3b:60:c3:9a:e1:ee:19:e6:3c:
15:c4:db:6d:0b:7e:16:12:1e:d1:fd:e7:db:83:e2:
96:b9:4a:ac:e3:df:e5:a2:d3:8d:9f:a7:66:99:08:
a2:1b:a7:59:9e:e4:13:90:05:67:5b:66:df:ef:71:
de:07:a5:b8:0d:c2:a4:3c:8a:a7:72:c4:fa:66:3c:
4f:7a:05:71:58:dc:66:a7:70:23:df:d4:9b:ad:de:
54:bf:e1:3f:95:4d:ac:70:7e:8c:28:81:12:f3:3b:
c8:62:6b:8a:16:1d:66:3f:d5:6b:1d:f5:b3:b3:b0:
be:8c:22:a7:75:82:bc:a2:bb:48:1e:6e:6a:7a:da:
36:13:b0:c9:2e:33:4d:1a:66:1c:6b:b5:21:53:31:
4b:f1:f1:9f:5b:2b:6c:87:71:2f:e8:89:e9:d6:f6:
77:17:dc:82:c5:1d:08:6d:f8:43:f0:b0:c6:79:b8:
0a:bd:37:f5:58:24:4a:11:5e:f2:9f:21:d1:e6:49:
57:cc:22:f8:27:8e:33:59:ab:ca:d4:29:5e:57:64:
d0:95:8e:02:35:0a:f7:db:06:8d:39:e7:66:64:67:
b1:b9:1d:db:ed:3e:1d:85:a2:e9:3c:5f:0e:13:dd:
f7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A1:F0:DF:0B:ED:3F:35:18:79:C0:BF:E7:93:26:1E:EA:4E:AC:23
X509v3 Authority Key Identifier:
keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:6a:d1:e5:a9:93:2a:3d:74:95:da:36:bf:9e:59:32:12:af:
6b:1d:5f:97:bb:66:e0:02:71:93:e4:43:45:a7:75:ae:83:26:
0b:06:34:bc:82:73:35:d2:95:bb:13:84:c1:0d:62:5d:60:4f:
61:d2:12:4c:4c:af:5f:b4:04:b8:c5:a7:3e:b2:9b:06:df:9e:
75:17:18:33:10:b9:9e:e3:04:3d:9e:de:1e:98:7b:c8:5b:94:
c4:67:df:10:c7:db:ae:1e:45:fa:bd:71:e9:83:d6:10:e2:9c:
06:b1:50:53:f1:2a:49:e1:88:ad:6f:ef:d5:11:6f:68:8b:71:
c3:3d:4b:b0:af:40:47:f6:41:59:af:f9:e3:bd:d3:fc:64:d4:
3e:77:fe:1b:85:dc:85:c1:df:3e:44:17:03:9e:16:05:79:5a:
1f:50:0e:7e:33:ae:98:de:27:e4:0b:8d:7e:7d:0c:df:1c:d1:
37:03:20:fb:04:4a:ab:dd:97:0d:b9:a0:b4:bb:94:df:26:10:
1d:9c:5e:be:db:76:a9:f3:74:92:dc:9e:80:c5:05:d0:a0:f9:
c5:97:0f:a4:ad:01:dd:8d:97:3b:10:5e:b8:31:84:6f:8d:d1:
8d:d8:cb:e6:82:ea:48:ba:27:d4:a8:b8:7d:3c:57:b8:9c:53:
60:81:b8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:36:24 2026 by rpki-client