
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
File: 28EoRfH6o1sy_s32oO1NFEKSyMw.mft (raw, json)
Hash identifier: hlciLhkLmIfM2SoTqf323cViUC9NDRKnDAq4o+boTus=
Subject key identifier: C4:13:49:E0:5C:69:0F:08:11:94:14:D3:81:FE:CB:C2:4F:3D:49:22
Authority key identifier: DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC
Certificate issuer: /CN=A9134790/serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
Manifest number: FF
Signing time: Sat 17 Oct 2026 06:53:03 +0000
Manifest this update: Sat 17 Oct 2026 06:53:03 +0000
Manifest next update: Sat 24 Oct 2026 06:53:03 +0000
Files and hashes: 1: 28EoRfH6o1sy_s32oO1NFEKSyMw.crl (hash: 0kt55LePEC66+iWaeq4bCw2jQgEFucoZw8ZG6XrzcU8=)
2: 078FA91C44EA11F09EB11858C4F9AE02.roa (hash: C/ZGqWc8u20kL8eL26pbZWd67Dk6EABUUd6GG9DsIEU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl
rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 06:53:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134790, serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
Validity
Not Before: Oct 17 06:53:03 2026 GMT
Not After : Oct 24 06:53:03 2026 GMT
Subject: CN=6ad31b4f-8426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:c0:9b:cf:82:78:63:43:20:93:72:d9:1a:
5b:a2:25:11:6f:86:fc:83:41:79:5a:28:2b:65:3f:
7e:a3:e2:b9:10:11:79:7a:b2:04:4a:e6:65:c6:06:
57:13:16:0c:58:14:19:f0:4c:98:2f:91:e2:72:cc:
0c:cb:b5:6d:f5:32:d3:da:52:58:c5:27:38:fb:e0:
9d:61:ff:24:3a:d2:6d:ae:05:67:3d:cb:62:e0:14:
a8:fe:21:3d:e5:b8:e5:92:48:80:ec:1a:32:52:eb:
69:d4:a8:d5:b1:45:7a:a7:83:79:68:a7:0d:4f:a2:
db:39:ac:59:d9:15:9f:40:99:10:07:9f:73:43:05:
70:1a:00:95:e0:88:7f:68:98:d4:76:d2:ab:5f:18:
da:86:01:2c:ad:9f:f8:54:c4:63:45:cd:01:9f:21:
75:6d:d1:16:ba:ce:51:d6:74:9a:28:c3:89:fa:ec:
5e:92:23:c8:59:04:9c:9f:7b:ef:18:ba:9c:b0:cb:
2e:df:82:b0:cc:94:aa:44:2a:77:88:ec:b8:39:1e:
c5:03:98:13:65:0b:04:74:22:0a:dd:06:b4:ec:7d:
c8:9f:87:8b:96:96:99:92:9e:7b:12:47:fb:05:54:
87:4f:bd:fd:f3:31:7f:f2:6e:6d:1b:4c:68:90:9f:
d3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:13:49:E0:5C:69:0F:08:11:94:14:D3:81:FE:CB:C2:4F:3D:49:22
X509v3 Authority Key Identifier:
keyid:DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:80:c6:63:8a:a4:cd:31:1b:2b:41:02:68:ad:c7:a5:5e:d7:
93:dc:10:65:2e:2f:9f:86:8f:37:e8:66:21:65:2a:e5:cb:c7:
37:18:34:81:1a:61:b6:19:1e:83:7a:7b:bf:04:40:17:32:c1:
fe:9c:d9:2d:58:57:3d:d2:a6:ec:df:45:e5:bd:f3:59:bd:42:
83:85:d6:fc:aa:d2:cc:16:23:f7:f5:3c:be:56:c8:58:05:a8:
8c:91:48:4b:df:6b:b3:d4:3e:61:ec:1b:10:3e:f5:fe:f2:a9:
41:d1:2e:19:67:05:f1:69:07:4c:c6:45:ee:47:7d:de:ff:b4:
37:6d:0d:45:e1:ea:1a:c9:18:b3:e8:01:0a:2a:11:d0:95:a2:
9f:a7:62:3e:90:76:37:82:36:a2:12:45:e4:e6:5e:29:91:e8:
90:19:5e:3f:54:3f:7c:54:33:cf:fb:3d:69:f0:83:4b:8d:8c:
44:ec:c5:73:32:b7:3a:40:2c:59:4c:31:81:26:e8:4f:dd:a6:
ce:91:f2:c5:0c:a3:38:0b:15:18:72:a3:f5:c3:e6:f1:49:d0:
d4:1c:1e:b2:15:a4:12:d7:5e:bb:80:c7:c1:4e:e0:db:e9:66:
29:69:c0:8b:f3:3a:da:55:d2:36:a3:4a:11:64:99:de:f4:e9:
86:e9:48:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 19:59:49 2026 by rpki-client