
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
File: 28ptKqUoxLJFVtsH_LVpw2rC_rE.mft (raw, json)
Hash identifier: JyJcXSz/GUffD7om7wKB6Cqokm/Rnu6+qFU94tj4Zi0=
Subject key identifier: F9:9F:48:CD:04:B7:33:93:D8:52:DE:D0:7D:77:EF:7C:40:67:BB:C6
Authority key identifier: DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1
Certificate issuer: /CN=A918C477/serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1
Certificate serial: 031F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
Manifest number: 031A
Signing time: Sun 05 Apr 2026 00:53:25 +0000
Manifest this update: Sun 05 Apr 2026 00:53:24 +0000
Manifest next update: Sun 12 Apr 2026 00:53:24 +0000
Files and hashes: 1: 28ptKqUoxLJFVtsH_LVpw2rC_rE.crl (hash: CCzLfnfrXnWwOOt1R1xRYMnoG2tWSQs+G0yT2OPzBYw=)
2: FB2262620C3111EDBD0F7137C4F9AE02.roa (hash: pwiKgtogbJLJ/RbRQdDDfmFN4XuwAJG68m5hiv5+D3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl
rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 799 (0x31f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C477, serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1
Validity
Not Before: Apr 5 00:53:24 2026 GMT
Not After : Apr 12 00:53:24 2026 GMT
Subject: CN=69d1b285-3d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d9:85:b6:87:85:0b:3f:fd:4c:33:a8:2e:65:
6c:bf:8a:eb:03:0d:c2:2d:d9:13:ca:72:20:78:c2:
17:bc:84:ae:98:cb:a8:71:94:05:a9:7b:41:5b:3c:
32:59:b0:c3:9b:82:e0:76:e9:18:83:d1:de:5a:3c:
ad:19:94:a3:75:de:23:15:19:f4:5f:dd:7a:d2:0b:
1b:1a:42:52:c9:81:cb:23:60:b5:c2:06:11:ce:6f:
28:90:fe:e6:c5:82:81:ee:9a:cc:2d:1f:8c:d0:05:
27:96:3a:88:62:f4:89:b1:b1:bf:7d:22:20:f8:3f:
57:41:c8:bd:a8:56:74:ce:8a:ae:3b:90:62:aa:15:
1a:9a:77:f9:33:ea:c8:b0:f2:15:25:b1:70:fb:44:
90:68:5f:dd:0d:f0:e2:36:b4:ed:2e:e7:45:10:22:
0a:40:5e:b9:19:d2:ca:a3:5c:ef:23:0f:40:ef:7c:
00:b6:63:a0:46:28:8a:d5:b1:76:93:78:32:16:cc:
1d:35:0f:87:38:a0:14:b0:aa:ac:dd:c1:ce:8e:cf:
bc:63:6e:8d:54:55:ad:38:45:eb:10:96:c8:0c:6b:
be:19:28:75:a7:67:c1:80:a4:3e:32:67:00:d5:6a:
e3:7e:f6:02:3b:ce:7e:e9:4f:84:38:55:5f:08:f0:
6d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9F:48:CD:04:B7:33:93:D8:52:DE:D0:7D:77:EF:7C:40:67:BB:C6
X509v3 Authority Key Identifier:
keyid:DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:02:15:28:d2:76:9b:bf:e2:53:34:c3:dc:2b:f7:63:b7:74:
e9:83:a7:a2:d0:86:64:7c:20:7e:95:42:8d:d3:03:70:b2:c3:
2b:fd:78:38:d5:30:32:29:b9:ea:47:af:c0:33:74:35:93:f3:
07:f4:81:89:40:ee:40:8d:1b:2f:82:ca:b0:3d:c0:f6:04:c5:
25:97:6a:12:f3:09:a1:da:aa:0e:12:c5:73:7e:91:cb:41:b1:
2c:5d:63:a6:37:70:a9:bd:21:6b:00:c2:12:04:05:04:09:3a:
c6:05:7b:d2:b9:cc:18:e9:46:ed:c0:d2:23:02:5f:c5:9c:ca:
44:1a:f1:2d:1d:42:24:de:79:a8:dd:31:57:e1:a4:b3:63:8b:
9d:22:e8:a1:c9:3b:b1:e6:3a:02:13:98:3e:b5:70:51:70:70:
a9:63:4b:f6:b7:6d:16:cf:3a:7f:34:5c:6f:b6:b9:c0:29:e9:
a7:36:f1:6e:90:d4:97:76:b4:be:93:0a:9a:af:6f:d9:80:f6:
e8:d2:87:b3:5c:b6:5f:7c:47:3e:d7:b7:c9:db:8d:62:9b:bd:
73:70:fd:a0:73:6c:d8:07:bc:73:19:87:ab:47:bb:87:cd:d5:
8b:33:e1:85:ab:1c:dc:5a:be:21:0a:1d:75:d2:91:ab:2d:80:
c5:4c:8a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:13 2026 by rpki-client