
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft
File: 28byJW3eXCxGqA6yQy8lcu3FN9Y.mft (raw, json)
Hash identifier: 1T3WjrhPrD7QH1kmHQUf7uRNyUnwLt6s61mNth3bIog=
Subject key identifier: BA:AE:21:FE:EC:B2:A6:84:B5:86:04:65:EC:1F:C5:C3:AE:CC:1A:9A
Authority key identifier: DB:C6:F2:25:6D:DE:5C:2C:46:A8:0E:B2:43:2F:25:72:ED:C5:37:D6
Certificate issuer: /CN=A914D0E3/serialNumber=DBC6F2256DDE5C2C46A80EB2432F2572EDC537D6
Certificate serial: 0172
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft
Manifest number: 0172
Signing time: Wed 07 Oct 2026 05:17:52 +0000
Manifest this update: Wed 07 Oct 2026 05:17:51 +0000
Manifest next update: Wed 14 Oct 2026 05:17:51 +0000
Files and hashes: 1: 28byJW3eXCxGqA6yQy8lcu3FN9Y.crl (hash: 7rQRn6AP53xvKAIpbLzIeT8PbOaTvqnaslTmZAfGsXI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.crl
rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 05:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D0E3, serialNumber=DBC6F2256DDE5C2C46A80EB2432F2572EDC537D6
Validity
Not Before: Oct 7 05:17:51 2026 GMT
Not After : Oct 14 05:17:51 2026 GMT
Subject: CN=6ac5d600-33dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:9e:73:ca:a6:6d:8b:03:a0:9d:a9:ff:3d:
3d:32:95:34:8d:c7:1a:7f:dc:2e:51:73:f3:b1:54:
b1:f0:92:96:a0:63:a8:cc:28:7f:c3:b6:a3:39:a9:
3c:a3:54:d5:5f:0a:44:da:5e:a7:08:b5:4e:ed:0a:
22:c9:de:b6:dc:87:be:a7:67:15:c1:10:db:dc:a5:
a1:f8:43:d5:80:3a:a6:95:22:fa:68:51:92:26:92:
29:b7:ae:d4:48:2e:03:a8:f7:f8:d6:5b:bb:83:cf:
79:0f:8c:12:58:4a:de:d4:87:24:9c:03:eb:6d:7f:
66:c1:f3:b6:92:2c:a6:0e:d4:b2:ec:7f:21:c6:1f:
29:25:c1:ff:bd:c5:d6:64:3d:b0:e9:e4:f3:ae:a6:
a4:cc:24:c4:74:51:5b:80:0c:d2:a2:20:70:d3:5d:
61:00:b7:92:fb:59:78:8a:fd:44:45:2a:0d:ec:74:
19:44:f1:f1:0d:e4:8b:b2:20:09:b1:8f:70:f3:45:
d1:9e:1e:0a:49:e9:d6:1d:6e:55:2e:f0:a6:d1:5f:
53:ab:18:4d:7e:0b:73:4f:d7:62:8a:fb:81:9a:79:
d4:3f:a1:04:59:5d:b1:4a:08:f2:31:fb:f4:6f:fe:
9c:0d:bd:eb:ba:ff:04:c1:4d:7c:16:e3:8a:8c:da:
8a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AE:21:FE:EC:B2:A6:84:B5:86:04:65:EC:1F:C5:C3:AE:CC:1A:9A
X509v3 Authority Key Identifier:
keyid:DB:C6:F2:25:6D:DE:5C:2C:46:A8:0E:B2:43:2F:25:72:ED:C5:37:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fa:2e:ae:6a:96:da:50:c8:a1:20:9b:7e:f0:81:d6:4c:5a:
80:58:07:ee:56:4b:04:92:1a:94:ea:cc:4a:bf:0d:13:82:93:
c9:ca:f7:70:39:31:e5:4c:ef:af:a5:32:d4:f1:94:6f:f3:dd:
ab:91:ed:e7:cf:d5:ef:5e:01:d2:b6:5e:03:58:92:d2:1e:af:
11:57:36:d3:b6:9a:53:e6:cc:6e:00:8d:bd:9a:ba:a7:42:eb:
1c:b5:a0:fb:02:f6:8c:6b:e6:78:b3:34:53:38:5c:87:d6:de:
7e:14:45:96:6c:d5:15:ee:23:7e:58:35:89:3a:91:06:be:35:
c9:3b:75:0b:e0:93:ab:ca:08:99:f6:8f:79:7d:f9:cd:b7:3b:
a6:e9:59:d2:e1:4f:39:e8:c5:4b:64:44:e0:31:0f:c8:49:7c:
52:e7:aa:0e:45:8b:c1:3b:6d:8d:93:da:ba:5e:a8:55:5f:34:
5e:5d:80:37:39:4b:a5:2f:81:56:d3:c9:cc:71:c1:77:63:42:
fa:21:9f:9b:dc:60:81:7c:65:18:81:f8:5b:af:c6:c1:04:9b:
4b:e7:44:97:1b:7a:73:f4:70:18:85:1a:ef:a4:47:0d:71:93:
b7:7a:20:19:5f:a6:77:4f:2b:9c:fa:b6:4c:e1:9a:0e:56:9c:
cf:81:7d:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEQwRTMxMTAvBgNVBAUTKERCQzZGMjI1NkRERTVDMkM0NkE4MEVCMjQzMkYyNTcy
RURDNTM3RDYwHhcNMjYxMDA3MDUxNzUxWhcNMjYxMDE0MDUxNzUxWjAYMRYwFAYD
VQQDEw02YWM1ZDYwMC0zM2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAveeec8qmbYsDoJ2p/z09MpU0jccaf9wuUXPzsVSx8JKWoGOozCh/w7ajOak8
o1TVXwpE2l6nCLVO7Qoiyd623Ie+p2cVwRDb3KWh+EPVgDqmlSL6aFGSJpIpt67U
SC4DqPf41lu7g895D4wSWEre1IcknAPrbX9mwfO2kiymDtSy7H8hxh8pJcH/vcXW
ZD2w6eTzrqakzCTEdFFbgAzSoiBw011hALeS+1l4iv1ERSoN7HQZRPHxDeSLsiAJ
sY9w80XRnh4KSenWHW5VLvCm0V9TqxhNfgtzT9diivuBmnnUP6EEWV2xSgjyMfv0
b/6cDb3ruv8EwU18FuOKjNqKMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLquIf7s
sqaEtYYEZewfxcOuzBqaMB8GA1UdIwQYMBaAFNvG8iVt3lwsRqgOskMvJXLtxTfW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDBFMy9CMzVBQjlGQThD
N0UxMUVGOEU5MkU3MUJDNEY5QUUwMi8yOGJ5SlczZVhDeEdxQTZ5UXk4bGN1M0ZO
OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzI4YnlKVzNlWEN4R3FBNnlReThsY3UzRk45WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RDBFMy9CMzVBQjlGQThDN0UxMUVGOEU5MkU3MUJDNEY5QUUwMi8yOGJ5SlczZVhD
eEdxQTZ5UXk4bGN1M0ZOOVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnvourmqW2lDIoSCbfvCB1kxagFgH7lZLBJIalOrMSr8NE4KTycr3cDkx5Uzv
r6Uy1PGUb/Pdq5Ht58/V714B0rZeA1iS0h6vEVc207aaU+bMbgCNvZq6p0LrHLWg
+wL2jGvmeLM0Uzhch9befhRFlmzVFe4jflg1iTqRBr41yTt1C+CTq8oImfaPeX35
zbc7pulZ0uFPOejFS2RE4DEPyEl8UueqDkWLwTttjZPaul6oVV80Xl2ANzlLpS+B
VtPJzHHBd2NC+iGfm9xggXxlGIH4W6/GwQSbS+dElxt6c/RwGIUa76RHDXGTt3og
GV+md08rnPq2TOGaDlacz4F9gw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 09:21:02 2026 by rpki-client