
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
File: z28S295L6RNFgVj1x3hccSkIVVw.mft (raw, json)
Hash identifier: KiCXU5FO9FnAezwQvyxoBIiIJFoaiY6GowO9fWk0dys=
Subject key identifier: B8:39:0C:DE:B3:1C:FA:0A:53:65:73:DE:CE:6C:8B:76:63:6C:4B:A2
Authority key identifier: CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C
Certificate issuer: /CN=A91725C8/serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
Manifest number: F0
Signing time: Sat 03 Oct 2026 07:04:40 +0000
Manifest this update: Sat 03 Oct 2026 07:04:40 +0000
Manifest next update: Sat 10 Oct 2026 07:04:40 +0000
Files and hashes: 1: z28S295L6RNFgVj1x3hccSkIVVw.crl (hash: E5/mgdqJZd8zb8+pDEk794oLuNeZZZ2zfEJYQbMXOSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl
rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:04:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91725C8, serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C
Validity
Not Before: Oct 3 07:04:40 2026 GMT
Not After : Oct 10 07:04:40 2026 GMT
Subject: CN=6ac0a908-4f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:67:0b:e4:eb:ed:d6:91:24:fd:b9:48:82:
11:21:f7:b1:11:e8:42:a1:47:5b:21:3e:36:5b:90:
7a:c7:e9:e7:16:d8:dc:4a:6c:1d:6a:2b:09:4d:92:
dc:98:11:12:06:45:5b:d7:76:95:3c:49:ef:21:c6:
0b:09:2e:4d:d2:e9:92:94:e7:b7:ba:0b:39:e7:57:
1e:74:48:8c:15:74:4e:20:21:3d:47:10:45:e0:b0:
c3:bb:b5:35:49:34:e7:c0:5f:d6:de:25:c0:dd:d6:
0c:75:17:6c:6c:10:4f:45:ae:02:99:81:27:55:f0:
80:58:5b:58:fb:8c:e5:a1:e5:c2:f4:a0:e5:97:6a:
2d:36:92:90:bc:b6:eb:e0:19:01:b7:e6:a6:f8:48:
fa:1a:46:1e:76:75:cf:a6:b0:ff:e8:2d:8b:5b:67:
42:75:de:f8:9d:6e:20:ed:fa:ea:59:4c:43:60:08:
53:d3:03:78:f0:99:33:fa:fb:fc:92:f6:97:b1:fc:
8f:c1:e9:c9:63:72:5a:a5:c9:f8:e8:6c:bf:65:ab:
95:d1:e6:db:da:a9:ad:0f:2a:b7:82:80:e6:a5:ec:
43:32:86:b4:8a:bc:46:72:2c:54:ba:d0:c4:4e:a4:
5b:75:b2:03:74:c3:45:9e:5b:9c:58:cd:d3:4c:f6:
03:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:39:0C:DE:B3:1C:FA:0A:53:65:73:DE:CE:6C:8B:76:63:6C:4B:A2
X509v3 Authority Key Identifier:
keyid:CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:96:54:35:52:b6:a8:d0:b5:4e:1c:85:55:d4:2f:22:e7:94:
29:29:1e:2e:34:02:7e:ef:b4:6f:47:cf:c6:fb:83:06:ad:91:
1b:90:b2:27:5c:1c:b6:c7:c9:db:f7:ac:23:9e:88:f4:0b:9f:
ce:f7:d3:ee:fa:b3:dd:c7:e6:44:6f:35:5f:5b:0a:9c:f2:68:
9f:20:68:55:5b:de:f1:15:ea:45:55:f5:75:fb:6d:ff:71:85:
51:ec:a9:da:43:1f:9d:68:bd:3d:4d:39:3b:10:bd:48:51:83:
cf:1e:68:eb:f9:58:c5:3e:c1:ae:ff:72:aa:1f:21:3f:04:c7:
20:20:f4:3a:b6:43:9a:0a:1c:1b:b2:f2:0f:19:c7:45:74:03:
66:8a:77:34:f9:22:6e:88:08:48:f7:17:d5:e3:30:a4:bc:9e:
e2:f8:e8:1c:55:47:34:81:f1:3d:d7:28:90:c8:e9:bf:23:89:
78:33:71:90:42:c8:73:78:5a:22:eb:58:31:35:ef:01:6a:ce:
5a:58:2b:e7:97:cd:50:02:aa:d0:6e:c4:a7:23:86:2d:fd:b8:
2e:9d:aa:7e:75:b4:1d:ca:c4:53:1d:09:e9:7a:26:30:78:bb:
65:d2:79:f4:73:d4:a3:db:b3:68:8b:2f:86:78:ce:e4:38:32:
d1:d1:cc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:19:40 2026 by rpki-client