
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
File: 28EoRfH6o1sy_s32oO1NFEKSyMw.mft (raw, json)
Hash identifier: 5bANA0IVrgRy+UHWhMCgkuN0L8MoVqZu1S5vacVwYzk=
Subject key identifier: 67:20:76:C9:97:87:0A:0A:46:0E:F3:11:C0:62:D8:EC:CF:CC:ED:2B
Authority key identifier: DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC
Certificate issuer: /CN=A9134790/serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
Manifest number: 89
Signing time: Sun 01 Mar 2026 08:53:03 +0000
Manifest this update: Sun 01 Mar 2026 08:53:03 +0000
Manifest next update: Sun 08 Mar 2026 08:53:03 +0000
Files and hashes: 1: 28EoRfH6o1sy_s32oO1NFEKSyMw.crl (hash: +rKJd8i1IC3HEKod8q308iIhGrSB1zfPzSj4TFReY4Q=)
2: 078FA91C44EA11F09EB11858C4F9AE02.roa (hash: 0SuulOZroh5YKmFDmSJwtaMeguYZYVtHHGTdUFtkVFs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl
rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:53:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134790, serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
Validity
Not Before: Mar 1 08:53:03 2026 GMT
Not After : Mar 8 08:53:03 2026 GMT
Subject: CN=69a3fe6f-25bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:d1:59:1c:db:e6:9b:8d:8f:af:af:0f:da:
ca:a0:f3:2c:06:e8:21:ce:2b:58:b7:ff:1f:dd:49:
25:43:11:df:6b:9b:58:6b:ec:c9:94:f9:41:10:78:
ca:5f:b2:4e:b6:28:a6:88:58:74:17:b3:ef:7e:0e:
1c:e0:da:72:0d:30:df:98:f4:42:9f:e8:05:30:91:
8a:24:1d:44:73:7c:b4:78:df:da:1b:32:73:49:c3:
a6:e1:8b:61:42:23:d0:93:a6:24:e5:3e:10:97:37:
53:cd:2b:c8:72:b8:b4:39:d4:db:bb:1a:b9:13:bf:
f1:58:55:25:5d:74:fd:ae:af:17:a2:f1:8c:20:24:
41:9d:85:b2:04:f1:7a:69:f6:5a:50:7a:7b:5a:2f:
36:7f:d3:17:d8:68:25:57:56:67:06:b9:ac:b8:7e:
98:8e:ec:61:e1:e8:c1:b4:3f:1b:15:a7:8b:34:43:
5b:0c:09:24:e1:bf:5c:73:c5:fd:71:7b:e5:f1:7a:
25:a8:ee:eb:7e:39:e1:2e:68:c2:5f:82:2e:63:f6:
e8:f8:eb:86:fc:27:37:d9:96:c0:34:29:db:de:76:
08:24:48:f3:91:c1:9b:d9:47:75:f9:b0:00:7c:4c:
ca:77:b6:53:29:08:4e:8d:e0:d8:40:a9:58:5e:19:
92:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:20:76:C9:97:87:0A:0A:46:0E:F3:11:C0:62:D8:EC:CF:CC:ED:2B
X509v3 Authority Key Identifier:
keyid:DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:53:79:d5:ce:4a:ec:c2:43:57:b8:96:a3:ea:10:0e:ab:fe:
9f:e1:5a:38:d3:06:5b:be:d7:32:bd:25:d1:6c:18:7f:d5:94:
2b:8c:af:38:a7:9c:8a:16:74:2b:c3:3c:cd:59:76:57:28:d4:
38:5d:78:8a:6a:ac:b2:b6:14:1c:b6:a4:ab:ec:04:26:3d:00:
8b:02:bf:3f:83:63:a6:d4:1e:34:28:61:1d:3c:dd:39:48:30:
91:c0:f2:15:73:13:3e:0e:0f:1c:c1:68:91:22:68:39:88:78:
be:b9:19:fb:cb:c3:cb:97:a3:ef:ce:d2:d9:09:a3:82:d6:6c:
3f:53:43:88:9a:12:cd:6e:d1:3e:da:ef:b7:97:c9:6c:c4:2c:
1e:b3:14:e6:f0:8a:73:fc:92:8c:69:54:c0:3d:e7:b9:70:dd:
bd:3d:c5:5b:91:28:14:86:00:02:84:8e:59:9b:de:af:9c:d1:
18:ae:0c:b8:40:69:f4:bd:25:fa:23:3d:2f:d4:7b:47:4c:d9:
ae:00:95:79:44:6f:ee:93:e5:8b:76:1d:cc:2e:95:73:74:3c:
df:33:4e:aa:67:e0:c7:f7:65:f7:51:19:b7:5c:49:af:7a:db:
c1:e1:d7:1e:41:41:08:ef:98:55:31:e0:3f:82:3f:2c:ed:3d:
88:76:ba:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:30 2026 by rpki-client