
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
File: 28EoRfH6o1sy_s32oO1NFEKSyMw.mft (raw, json)
Hash identifier: ZB5DDMrr5v3iqpuGPlZyWXg6NmVgAnAqHJ+TLXCklqg=
Subject key identifier: 73:9A:48:31:6E:67:E6:A0:C9:70:12:EC:8A:12:22:22:2D:27:83:3C
Authority key identifier: DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC
Certificate issuer: /CN=A9134790/serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
Manifest number: F3
Signing time: Wed 23 Sep 2026 06:07:08 +0000
Manifest this update: Wed 23 Sep 2026 06:07:07 +0000
Manifest next update: Wed 30 Sep 2026 06:07:07 +0000
Files and hashes: 1: 28EoRfH6o1sy_s32oO1NFEKSyMw.crl (hash: 93UJUJNx/3QSSNKe0mdzzx3SJeiXnzKVzF0xtPM5XBo=)
2: 078FA91C44EA11F09EB11858C4F9AE02.roa (hash: C/ZGqWc8u20kL8eL26pbZWd67Dk6EABUUd6GG9DsIEU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl
rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134790, serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
Validity
Not Before: Sep 23 06:07:07 2026 GMT
Not After : Sep 30 06:07:07 2026 GMT
Subject: CN=6ab36c8c-c234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:80:0a:cd:f1:72:73:75:f5:2e:83:dc:9e:
79:86:65:0b:63:82:09:ae:63:16:b8:50:77:69:3b:
5a:a1:31:e0:f9:0b:b8:7c:2b:2b:1e:bd:a1:1d:6c:
65:b6:f2:61:e9:3d:c7:96:4e:2b:f6:62:34:6b:0b:
a1:6d:ef:8e:8c:22:f8:9a:49:49:e8:10:0b:86:80:
36:3e:66:2b:1c:fb:d6:a7:43:76:93:29:87:8d:ce:
1f:7f:78:70:2c:c2:c0:39:09:b3:68:d4:af:0f:41:
6b:db:83:0a:5e:b6:a0:20:dc:90:b3:59:9e:23:f6:
2a:88:86:7a:84:b0:42:1f:c6:20:cf:fb:23:90:8e:
e3:8d:da:52:62:ab:cb:06:d3:9e:ae:15:4e:a0:66:
d9:75:07:2d:06:2a:8e:68:c8:35:1b:aa:4d:c7:80:
d6:9a:83:18:31:ca:70:57:88:8a:74:34:2e:aa:08:
e2:dc:49:fc:4f:93:e7:19:71:18:a9:22:30:1c:89:
1f:4d:45:c9:f4:39:a8:40:01:b9:27:01:8c:8f:cd:
06:04:1a:b1:ee:d1:69:75:ff:f8:ca:d9:62:e3:9a:
6b:d4:0f:00:f0:33:06:c1:0d:4d:eb:fb:ac:9d:f4:
48:b0:3f:02:41:ba:45:3f:a6:49:8f:20:30:7e:1e:
07:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9A:48:31:6E:67:E6:A0:C9:70:12:EC:8A:12:22:22:2D:27:83:3C
X509v3 Authority Key Identifier:
keyid:DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c7:78:72:69:bc:be:57:8a:73:7c:33:02:75:50:bf:95:69:
c7:4a:7e:45:15:96:44:9c:58:1f:17:01:d8:ba:c8:e2:f4:ec:
aa:45:40:8e:6e:36:74:40:ad:fe:0a:fb:68:75:10:40:35:94:
93:5e:d5:ba:f6:f8:af:c4:fd:92:78:bd:f4:b3:df:16:88:dc:
74:0c:b8:ef:44:36:bb:fa:45:c6:7b:c9:7d:8b:8c:37:9e:0c:
63:ec:d7:a6:52:2a:65:da:c2:7a:90:1f:e8:7c:d8:32:da:45:
fb:71:6e:85:44:9e:09:8d:cc:00:eb:6d:ee:d0:89:35:7f:7a:
dc:e2:dd:04:65:b0:4c:05:97:1a:2e:7f:84:13:a7:6b:fd:26:
22:8b:09:fa:91:e1:47:44:48:ea:bd:6b:7e:73:e5:a3:de:08:
eb:ac:2a:6f:9c:1f:09:bd:d8:f0:1a:92:8d:96:e6:e8:9e:aa:
a2:4b:ad:3c:b2:b2:9c:fe:b0:f8:63:67:f9:bd:21:58:35:16:
5e:bb:ac:57:3b:49:c5:81:0b:8b:ba:65:d5:69:f9:e9:ef:8e:
1e:2c:62:52:2d:c5:90:d4:bc:f3:9f:ae:5d:bb:93:24:84:b5:
4f:d5:23:72:16:f0:3d:7f:12:d5:88:ac:93:f0:d0:69:17:6d:
57:58:14:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:53:39 2026 by rpki-client