
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
File: 28EoRfH6o1sy_s32oO1NFEKSyMw.mft (raw, json)
Hash identifier: 8bJdQA0Ha2HDRLgNm0M/5cVAvqtxgziCL1mv22x3zEU=
Subject key identifier: 48:D5:92:BA:94:87:30:5C:4F:A4:E1:6B:23:1F:72:17:DE:5E:0B:EC
Authority key identifier: DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC
Certificate issuer: /CN=A9134790/serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
Manifest number: D0
Signing time: Fri 17 Jul 2026 07:56:43 +0000
Manifest this update: Fri 17 Jul 2026 07:56:43 +0000
Manifest next update: Fri 24 Jul 2026 07:56:43 +0000
Files and hashes: 1: 28EoRfH6o1sy_s32oO1NFEKSyMw.crl (hash: kI/e5roAL3xo2JqCTIkC97eycCsAnZMe9zmbRHrC2lE=)
2: 078FA91C44EA11F09EB11858C4F9AE02.roa (hash: C/ZGqWc8u20kL8eL26pbZWd67Dk6EABUUd6GG9DsIEU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl
rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134790, serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
Validity
Not Before: Jul 17 07:56:43 2026 GMT
Not After : Jul 24 07:56:43 2026 GMT
Subject: CN=6a59e03b-e861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:55:de:a6:32:bb:96:ad:b4:0e:d7:4f:19:82:
86:7c:0c:05:5f:23:83:3e:88:2e:e8:2a:8e:30:b4:
9e:18:1b:ec:ff:49:30:9a:59:ce:aa:5f:fa:aa:02:
9d:80:75:47:83:a4:be:4e:f9:79:33:f1:f5:d3:0d:
f5:45:3b:31:2e:b1:4d:88:a2:36:43:29:ab:75:3d:
de:94:75:85:8b:10:2e:e0:a9:5a:42:55:11:0e:e7:
46:b0:f7:09:a0:6e:8c:75:27:07:67:2d:3d:be:10:
36:2b:d8:35:a5:e3:29:e8:09:46:31:32:54:58:c0:
db:c5:9f:da:f4:a3:4e:cb:f9:fa:02:b3:fe:75:16:
6e:86:73:5a:c2:2a:ec:a2:45:cd:0e:c3:c9:3f:8f:
2a:6c:98:7f:40:fe:c3:d4:37:87:07:a1:e8:30:fc:
ec:4d:99:2c:21:45:80:40:4a:54:61:46:90:e6:66:
99:17:65:ee:6c:b4:4f:b0:94:da:9d:cd:0c:86:c3:
45:dc:05:31:3f:53:8a:d3:eb:2f:4b:2c:78:3f:e8:
69:ae:0f:10:ba:bf:59:48:12:37:cd:28:59:b4:4d:
ee:a6:f9:a5:82:bc:5f:18:c7:6e:7d:ce:d2:f6:d5:
f5:fd:9b:41:5c:5a:f2:0f:a3:4b:75:ca:b9:66:0b:
8e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D5:92:BA:94:87:30:5C:4F:A4:E1:6B:23:1F:72:17:DE:5E:0B:EC
X509v3 Authority Key Identifier:
keyid:DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:ea:5b:dc:48:09:e6:00:97:ff:6e:83:4a:da:32:45:2e:1a:
51:98:16:22:0b:e1:ca:45:66:32:94:9e:75:bf:64:1f:eb:73:
41:d4:73:1d:26:3a:f0:be:ba:c8:78:e2:a2:9d:de:85:45:d3:
65:1e:01:4d:27:bd:5c:e9:e6:dd:23:5e:e9:87:b5:1a:90:cd:
2b:af:f8:bc:13:e1:47:19:01:28:21:ee:43:b7:18:0c:b8:9b:
b7:59:39:67:e6:91:48:fd:1e:13:04:b8:5f:f3:8b:0d:3f:3b:
83:e9:84:a0:85:f0:e9:d2:cf:d9:67:59:06:67:c1:da:da:bc:
91:29:9d:93:ed:0f:12:48:aa:dc:d6:f9:90:15:dc:97:4a:7a:
8d:dc:c8:42:c3:0b:58:b5:7e:88:0f:08:ff:8d:ff:b7:8e:38:
aa:59:19:34:bc:cb:63:06:05:97:ee:34:0a:79:f5:4c:c0:28:
2c:8e:e8:89:38:05:34:90:6b:5f:0d:de:76:be:92:9d:67:14:
e7:ee:4d:f7:4d:1a:b8:7e:7a:2e:58:a9:a9:5f:9f:8b:df:f9:
c1:b2:30:49:63:7a:c4:0c:69:15:75:77:c6:3a:de:96:f7:73:
1c:9a:95:e4:db:96:db:c9:12:a0:9a:0c:de:27:5d:a8:f1:4c:
d6:8a:ec:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:52:00 2026 by rpki-client