
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
File: 28EoRfH6o1sy_s32oO1NFEKSyMw.mft (raw, json)
Hash identifier: IXfv3tUhj3X2P4V09wrYNZSA3ojNKu9UW5Iec+2DRos=
Subject key identifier: 41:97:4C:A9:30:47:27:5C:63:C2:73:7F:C4:DF:10:3D:B7:2F:96:40
Authority key identifier: DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC
Certificate issuer: /CN=A9134790/serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
Certificate serial: D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
Manifest number: D6
Signing time: Wed 29 Jul 2026 08:05:11 +0000
Manifest this update: Wed 29 Jul 2026 08:05:11 +0000
Manifest next update: Wed 05 Aug 2026 08:05:11 +0000
Files and hashes: 1: 28EoRfH6o1sy_s32oO1NFEKSyMw.crl (hash: NtvSeP5iSLQpRjdikOYv3duS5fBYDUUxRPy5iXeBRVA=)
2: 078FA91C44EA11F09EB11858C4F9AE02.roa (hash: C/ZGqWc8u20kL8eL26pbZWd67Dk6EABUUd6GG9DsIEU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl
rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 08:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134790, serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
Validity
Not Before: Jul 29 08:05:11 2026 GMT
Not After : Aug 5 08:05:11 2026 GMT
Subject: CN=6a69b437-f936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:ee:c8:7c:79:d0:14:3c:6c:4b:8c:7c:49:
73:06:59:05:92:34:ab:48:fd:cf:58:b2:69:bd:5f:
dd:9b:4c:d0:81:34:87:38:d0:fc:70:fe:1e:ae:58:
16:8f:9a:54:58:1b:13:f5:2b:c6:96:f5:f0:3e:98:
1c:22:3c:78:a6:a3:63:e4:ff:f2:ae:6a:62:eb:1c:
7a:5b:7b:0e:95:f7:07:b3:4e:56:2a:97:11:00:5a:
c9:81:5f:dc:09:f9:a5:6d:27:5b:ac:96:a9:1e:89:
c3:9b:db:b2:08:18:60:00:13:20:e8:ca:80:20:4c:
38:9c:3f:e5:71:ff:df:a4:3a:01:14:e5:23:69:6a:
d2:ac:02:7e:fb:12:4f:5d:df:d9:b2:47:df:de:65:
76:6e:e7:f2:84:db:66:80:7d:35:b2:31:a9:20:a7:
31:57:ba:12:a9:22:a6:fe:54:36:83:69:2e:c2:e7:
06:fb:7d:e2:d5:3a:4b:39:a2:ad:e8:6d:6e:a6:70:
e4:56:63:74:d3:82:09:48:09:4d:84:59:ce:b3:e5:
88:14:0c:4c:72:33:ce:75:60:00:14:fe:cc:d7:d3:
45:c4:05:25:15:c0:ca:9e:0d:85:8e:94:1a:0a:71:
3c:2c:6c:2a:b6:3e:d2:59:51:90:75:87:30:22:32:
74:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:97:4C:A9:30:47:27:5C:63:C2:73:7F:C4:DF:10:3D:B7:2F:96:40
X509v3 Authority Key Identifier:
keyid:DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ef:c4:92:b4:90:35:dd:d0:16:f8:ef:a0:e7:84:d8:05:9d:
36:5f:cd:51:ca:f7:d4:26:ba:0b:5f:b0:75:dc:49:04:01:2d:
b6:d3:79:3c:16:96:6f:dd:d0:50:42:8c:a4:fe:50:02:5b:0c:
df:0d:3b:3d:d3:7f:5c:4a:e4:aa:b5:dc:90:c6:ca:df:39:bf:
fe:6e:61:bc:cc:0f:5c:00:7e:57:ef:7d:48:74:99:51:38:85:
a2:b3:d3:a5:89:d8:81:42:7c:0c:06:03:20:2d:7f:65:3c:97:
51:d8:7e:85:87:a9:8c:b9:19:a9:b3:8f:b7:5e:20:44:52:cb:
1b:c3:ff:17:81:24:4e:08:18:28:2b:0d:6d:66:59:d9:bd:2e:
a7:e6:d4:bd:51:db:f0:69:ff:9b:54:a0:d9:d2:62:ea:f6:0e:
f0:1d:f2:d4:dd:29:2f:a2:c2:02:3d:30:8a:25:a4:15:3c:33:
60:2e:33:8e:a0:b8:01:07:48:dd:db:4c:f7:27:29:b5:ca:f8:
2a:5f:01:c2:6e:69:23:5a:2e:e6:f6:b8:ed:25:7e:53:15:f8:
44:8d:a7:1f:c8:83:5f:e9:71:4d:f3:54:d4:c7:4f:73:a1:df:
fe:07:a9:5c:ec:30:73:b0:43:80:27:70:28:5a:c5:26:bf:8a:
ff:10:2e:50
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQ3OTAxMTAvBgNVBAUTKERCQzEyODQ1RjFGQUEzNUIzMkZFQ0RGNkEwRUQ0RDE0
NDI5MkM4Q0MwHhcNMjYwNzI5MDgwNTExWhcNMjYwODA1MDgwNTExWjAYMRYwFAYD
VQQDEw02YTY5YjQzNy1mOTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0LbuyHx50BQ8bEuMfElzBlkFkjSrSP3PWLJpvV/dm0zQgTSHOND8cP4erlgW
j5pUWBsT9SvGlvXwPpgcIjx4pqNj5P/yrmpi6xx6W3sOlfcHs05WKpcRAFrJgV/c
CfmlbSdbrJapHonDm9uyCBhgABMg6MqAIEw4nD/lcf/fpDoBFOUjaWrSrAJ++xJP
Xd/Zskff3mV2bufyhNtmgH01sjGpIKcxV7oSqSKm/lQ2g2kuwucG+33i1TpLOaKt
6G1upnDkVmN004IJSAlNhFnOs+WIFAxMcjPOdWAAFP7M19NFxAUlFcDKng2FjpQa
CnE8LGwqtj7SWVGQdYcwIjJ0GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEGXTKkw
RydcY8Jzf8TfED23L5ZAMB8GA1UdIwQYMBaAFNvBKEXx+qNbMv7N9qDtTRRCksjM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDc5MC81MTMzRkVBQzQ0
RTkxMUYwOTFBOTZFNTNDNEY5QUUwMi8yOEVvUmZINm8xc3lfczMyb08xTkZFS1N5
TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzI4RW9SZkg2bzFzeV9zMzJvTzFORkVLU3lNdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDc5MC81MTMzRkVBQzQ0RTkxMUYwOTFBOTZFNTNDNEY5QUUwMi8yOEVvUmZINm8x
c3lfczMyb08xTkZFS1N5TXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsO/EkrSQNd3QFvjvoOeE2AWdNl/NUcr31Ca6C1+wddxJBAEtttN5PBaWb93Q
UEKMpP5QAlsM3w07PdN/XErkqrXckMbK3zm//m5hvMwPXAB+V+99SHSZUTiForPT
pYnYgUJ8DAYDIC1/ZTyXUdh+hYepjLkZqbOPt14gRFLLG8P/F4EkTggYKCsNbWZZ
2b0up+bUvVHb8Gn/m1Sg2dJi6vYO8B3y1N0pL6LCAj0wiiWkFTwzYC4zjqC4AQdI
3dtM9ycptcr4Kl8Bwm5pI1ou5va47SV+UxX4RI2nH8iDX+lxTfNU1MdPc6Hf/gep
XOwwc7BDgCdwKFrFJr+K/xAuUA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:36:08 2026 by rpki-client