
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
File: 28EoRfH6o1sy_s32oO1NFEKSyMw.mft (raw, json)
Hash identifier: GEYzSvScfzKMY4iDCkBT+OQOq2HtVt5N4FY0kC3VDPI=
Subject key identifier: FD:F3:21:8A:65:0E:62:96:65:47:43:B0:43:61:5C:16:B9:37:96:45
Authority key identifier: DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC
Certificate issuer: /CN=A9134790/serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
Manifest number: 95
Signing time: Wed 25 Mar 2026 06:38:55 +0000
Manifest this update: Wed 25 Mar 2026 06:38:55 +0000
Manifest next update: Wed 01 Apr 2026 06:38:55 +0000
Files and hashes: 1: 28EoRfH6o1sy_s32oO1NFEKSyMw.crl (hash: rpg3Y+g8XsGwIUoikt4Xrv8rGxKkqG3jJcda/7taEjw=)
2: 078FA91C44EA11F09EB11858C4F9AE02.roa (hash: 0SuulOZroh5YKmFDmSJwtaMeguYZYVtHHGTdUFtkVFs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl
rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:38:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134790, serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
Validity
Not Before: Mar 25 06:38:55 2026 GMT
Not After : Apr 1 06:38:55 2026 GMT
Subject: CN=69c382ff-1d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:a9:5c:8f:27:a5:bd:ec:20:1a:bd:d7:af:
2d:31:3b:70:13:0d:85:96:f6:60:56:c9:5e:3c:04:
da:66:98:c6:24:b9:f2:d4:58:c9:fc:27:5b:81:ab:
02:52:5a:64:16:bb:9a:49:db:39:bc:5f:c1:62:94:
be:57:9c:58:65:93:23:f8:00:f9:c2:38:f1:af:54:
38:4a:e4:dd:26:a6:9a:10:b4:74:88:b2:fe:7a:21:
6d:7b:9e:66:80:97:81:e8:c6:3c:d0:0c:cb:2f:a2:
b2:14:4c:f1:9a:9b:e6:cf:99:73:24:24:21:63:1d:
da:e4:34:bc:15:1e:12:a1:42:9c:6f:e6:03:3c:81:
99:be:6a:08:24:b4:03:90:b8:bc:cb:00:5b:6a:e9:
51:0c:ed:48:89:8c:99:f7:86:4c:4b:33:b1:66:37:
50:fb:06:68:18:ae:80:37:39:fb:c4:d6:a8:31:e1:
91:a3:3a:8b:a2:94:de:a0:c7:0f:49:72:21:0b:58:
44:28:bd:5d:08:b3:07:40:a7:7d:ce:d5:a5:80:be:
46:c5:9b:95:69:f9:19:80:a8:aa:35:a4:d3:3b:8a:
41:55:9a:80:6c:b2:fc:ed:ee:ef:0b:a3:ce:2a:7e:
85:6e:8a:2b:d7:48:3d:f2:4c:5a:01:9b:01:ed:c6:
bb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F3:21:8A:65:0E:62:96:65:47:43:B0:43:61:5C:16:B9:37:96:45
X509v3 Authority Key Identifier:
keyid:DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8e:f5:10:05:88:e9:ff:09:ab:08:71:2d:e9:55:59:97:59:
6e:b3:0f:4f:46:48:6c:cd:01:af:52:b4:93:b6:db:b9:7f:b3:
c2:a5:87:fa:c3:74:b1:9c:14:c9:35:58:85:b9:c5:90:dc:fe:
05:f6:ee:62:31:62:ca:f1:3a:25:90:d1:dd:2f:02:4c:2f:ec:
f2:da:58:30:52:f4:41:fe:cd:44:68:1c:fa:43:a3:86:b5:36:
75:f3:19:f1:87:29:69:78:7b:54:9a:b4:c7:55:ba:42:34:57:
eb:9e:77:41:e4:27:5c:e9:9e:0e:cd:05:f8:ed:bc:77:0a:69:
78:90:8c:3c:1a:a3:9b:3d:4a:8a:1b:a8:1e:38:80:f8:b1:78:
cc:28:ab:59:02:75:96:37:7d:df:67:24:0e:d6:18:41:d6:31:
c4:63:09:81:1d:20:12:fa:b7:a2:02:fb:bb:9b:20:c3:7b:1b:
b5:c7:88:80:b3:84:f5:82:83:ee:55:e9:59:f3:64:9d:e1:03:
1a:9f:91:de:fe:5b:30:f9:9b:b1:d5:94:23:1a:81:dc:51:fa:
7b:ae:e8:0a:ff:05:13:ae:ca:a5:af:8b:0d:24:bc:3a:35:9b:
92:a9:92:42:4f:cb:9d:0d:b8:a7:6b:1c:6e:5a:ee:08:d2:3b:
e0:a4:ec:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQ3OTAxMTAvBgNVBAUTKERCQzEyODQ1RjFGQUEzNUIzMkZFQ0RGNkEwRUQ0RDE0
NDI5MkM4Q0MwHhcNMjYwMzI1MDYzODU1WhcNMjYwNDAxMDYzODU1WjAYMRYwFAYD
VQQDEw02OWMzODJmZi0xZDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqjWpXI8npb3sIBq9168tMTtwEw2FlvZgVslePATaZpjGJLny1FjJ/CdbgasC
UlpkFruaSds5vF/BYpS+V5xYZZMj+AD5wjjxr1Q4SuTdJqaaELR0iLL+eiFte55m
gJeB6MY80AzLL6KyFEzxmpvmz5lzJCQhYx3a5DS8FR4SoUKcb+YDPIGZvmoIJLQD
kLi8ywBbaulRDO1IiYyZ94ZMSzOxZjdQ+wZoGK6ANzn7xNaoMeGRozqLopTeoMcP
SXIhC1hEKL1dCLMHQKd9ztWlgL5GxZuVafkZgKiqNaTTO4pBVZqAbLL87e7vC6PO
Kn6Fboor10g98kxaAZsB7ca7vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP3zIYpl
DmKWZUdDsENhXBa5N5ZFMB8GA1UdIwQYMBaAFNvBKEXx+qNbMv7N9qDtTRRCksjM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDc5MC81MTMzRkVBQzQ0
RTkxMUYwOTFBOTZFNTNDNEY5QUUwMi8yOEVvUmZINm8xc3lfczMyb08xTkZFS1N5
TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzI4RW9SZkg2bzFzeV9zMzJvTzFORkVLU3lNdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDc5MC81MTMzRkVBQzQ0RTkxMUYwOTFBOTZFNTNDNEY5QUUwMi8yOEVvUmZINm8x
c3lfczMyb08xTkZFS1N5TXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj471EAWI6f8JqwhxLelVWZdZbrMPT0ZIbM0Br1K0k7bbuX+zwqWH+sN0sZwU
yTVYhbnFkNz+BfbuYjFiyvE6JZDR3S8CTC/s8tpYMFL0Qf7NRGgc+kOjhrU2dfMZ
8YcpaXh7VJq0x1W6QjRX6553QeQnXOmeDs0F+O28dwppeJCMPBqjmz1KihuoHjiA
+LF4zCirWQJ1ljd932ckDtYYQdYxxGMJgR0gEvq3ogL7u5sgw3sbtceIgLOE9YKD
7lXpWfNkneEDGp+R3v5bMPmbsdWUIxqB3FH6e67oCv8FE67Kpa+LDSS8OjWbkqmS
Qk/LnQ24p2scblruCNI74KTslQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:27:37 2026 by rpki-client