
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
File: 28EoRfH6o1sy_s32oO1NFEKSyMw.mft (raw, json)
Hash identifier: K7Z51hXoxN89NU2GMHMwsGlbjY5kbNcu5qz1URx7FZM=
Subject key identifier: 3C:A5:D4:E4:D0:74:22:74:7C:0E:69:D6:E7:CE:08:FC:9B:0D:F8:F1
Authority key identifier: DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC
Certificate issuer: /CN=A9134790/serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
Certificate serial: EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
Manifest number: E7
Signing time: Mon 31 Aug 2026 06:50:58 +0000
Manifest this update: Mon 31 Aug 2026 06:50:57 +0000
Manifest next update: Mon 07 Sep 2026 06:50:57 +0000
Files and hashes: 1: 28EoRfH6o1sy_s32oO1NFEKSyMw.crl (hash: IpadEHt7VZvWXFEJprh02eMbm6gi9gZRYR+0Bja6UaA=)
2: 078FA91C44EA11F09EB11858C4F9AE02.roa (hash: C/ZGqWc8u20kL8eL26pbZWd67Dk6EABUUd6GG9DsIEU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl
rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 06:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134790, serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
Validity
Not Before: Aug 31 06:50:57 2026 GMT
Not After : Sep 7 06:50:57 2026 GMT
Subject: CN=6a952451-e0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:04:ca:aa:06:5f:4e:96:4a:f3:2a:51:4b:
b8:d1:98:1e:15:0b:79:45:d8:45:b5:73:1f:e4:7d:
97:20:d3:20:4f:01:14:be:d2:5e:13:d4:4a:23:fa:
57:fe:22:c9:07:2c:0f:c0:2e:6d:a8:dd:e2:46:3e:
59:1e:4f:bd:d9:16:c2:38:3e:29:24:5b:a7:ea:d6:
f8:5f:5f:00:a8:44:44:65:16:0a:69:90:b0:0b:c4:
e9:94:17:c6:53:5a:07:35:49:10:80:be:d1:52:7d:
2a:21:50:ea:98:e9:56:be:83:6c:0e:9f:fa:7d:b5:
eb:ce:a0:18:5b:84:b5:69:83:a6:a7:43:38:08:0c:
db:fa:17:21:df:9d:98:9e:78:22:d6:a7:e6:2f:63:
9c:fd:bc:58:09:7c:91:44:1e:e8:07:95:69:1f:b2:
48:ae:ee:4c:4b:f9:07:4c:65:a5:36:d2:99:2a:ef:
5e:18:02:76:c2:3a:a5:8f:d7:1c:69:fa:7d:b2:29:
89:f9:f0:1c:f0:9d:a9:24:ee:84:d5:cc:c4:99:80:
18:34:c8:c9:fb:10:81:0c:51:28:84:77:b7:54:8d:
90:f8:bd:df:ae:87:e7:cc:26:98:5a:f7:63:6a:f6:
d9:b4:b4:de:f5:bf:02:e1:da:09:16:20:e7:a3:e0:
77:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A5:D4:E4:D0:74:22:74:7C:0E:69:D6:E7:CE:08:FC:9B:0D:F8:F1
X509v3 Authority Key Identifier:
keyid:DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:75:d2:88:45:4d:a8:4c:70:65:47:97:ee:44:77:e3:a9:cf:
51:2c:4e:5e:4d:81:d2:3e:fe:c2:d9:9e:01:b5:90:27:a3:b1:
fe:d3:d2:4c:bd:c2:2a:ef:bd:60:dc:fd:c1:b7:46:1a:b3:53:
c9:4e:7c:05:e8:9b:77:fa:32:78:7a:c6:e2:72:0e:cd:2f:ac:
d6:48:b5:83:46:1f:ee:66:21:c3:55:b0:59:9e:8f:ba:4d:07:
8a:08:a1:9a:f7:3e:b1:3b:b1:5e:45:2b:08:50:7e:53:26:71:
7d:ef:0e:15:ce:71:cb:5c:33:1e:e0:50:58:47:aa:f4:b1:83:
34:d3:95:58:fb:3f:35:b4:fa:5d:09:48:12:12:a8:24:5c:1d:
da:57:63:42:04:5e:bc:98:f2:e3:92:54:33:2d:91:f5:06:36:
84:a5:03:83:70:97:d2:e8:17:fc:bd:e3:d6:57:2d:15:82:2c:
61:a2:af:7b:ad:01:10:a2:59:01:68:f1:a5:dd:a0:d4:5f:b7:
f4:0c:e5:d5:e8:70:c6:9d:7f:0c:06:75:d7:e1:96:09:c1:e1:
53:89:e9:4d:cf:ca:4a:e6:f4:a8:3f:0e:e5:31:b4:19:ca:10:
72:b9:d0:01:b1:b7:57:5b:83:a4:a5:a6:01:01:01:db:91:40:
eb:c8:a7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:07:54 2026 by rpki-client