
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft
File: 28byJW3eXCxGqA6yQy8lcu3FN9Y.mft (raw, json)
Hash identifier: sSTejQ2SOWzWk4taeqTZAkNe7DVlo6E2aSW+bcFCoy0=
Subject key identifier: DD:BA:6F:CA:C5:34:AA:9B:DF:E0:52:46:2F:B1:81:34:15:3E:DE:95
Authority key identifier: DB:C6:F2:25:6D:DE:5C:2C:46:A8:0E:B2:43:2F:25:72:ED:C5:37:D6
Certificate issuer: /CN=A914D0E3/serialNumber=DBC6F2256DDE5C2C46A80EB2432F2572EDC537D6
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft
Manifest number: 0101
Signing time: Sun 01 Mar 2026 07:11:53 +0000
Manifest this update: Sun 01 Mar 2026 07:11:53 +0000
Manifest next update: Sun 08 Mar 2026 07:11:53 +0000
Files and hashes: 1: 28byJW3eXCxGqA6yQy8lcu3FN9Y.crl (hash: G6gpMIicrlnLdMCwnjOtEfdsk0AcXUDx1+c904zPjCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.crl
rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:11:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D0E3, serialNumber=DBC6F2256DDE5C2C46A80EB2432F2572EDC537D6
Validity
Not Before: Mar 1 07:11:53 2026 GMT
Not After : Mar 8 07:11:53 2026 GMT
Subject: CN=69a3e6b9-d7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:25:05:12:e0:e4:75:d1:8b:bc:13:fe:00:
71:33:f6:65:c7:70:80:b4:c1:dd:3e:ff:75:52:9d:
b9:bb:a0:86:61:78:de:b6:3c:c2:82:27:77:69:1d:
e7:97:b4:96:85:3f:f9:01:91:4c:ae:09:72:c6:c8:
57:bf:bd:9b:f2:22:b8:65:36:9c:53:ac:19:62:d4:
3a:9b:f8:9b:7e:a6:d4:7d:86:1b:13:cc:27:1a:27:
c6:ed:dc:13:28:c8:e8:6f:e9:c4:9c:b4:76:7e:11:
c6:8d:a8:b0:a9:cf:ba:0d:27:a0:96:4c:fa:8c:87:
ba:3e:bf:fc:28:c8:0f:8d:ca:ac:78:63:4b:d1:9a:
a8:41:32:d7:de:5e:36:98:1c:78:71:84:e5:a1:f9:
3d:9e:91:6c:4c:32:11:ce:bf:a0:1c:f0:3e:02:e9:
c5:b2:13:06:af:14:0e:9d:48:52:93:ba:8f:1e:45:
6d:f5:d7:55:a6:29:1d:c5:a1:56:78:b5:ca:d2:a2:
2e:31:31:05:9b:da:d3:e9:25:b9:6a:ca:a4:d2:cb:
7d:b1:f4:8a:fa:be:c5:2c:05:b0:e8:dc:46:13:13:
97:37:89:a5:ed:18:b5:6f:35:02:ba:90:77:d1:c1:
c6:f4:25:f8:06:52:4a:33:70:54:d2:9c:03:d6:cb:
67:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BA:6F:CA:C5:34:AA:9B:DF:E0:52:46:2F:B1:81:34:15:3E:DE:95
X509v3 Authority Key Identifier:
keyid:DB:C6:F2:25:6D:DE:5C:2C:46:A8:0E:B2:43:2F:25:72:ED:C5:37:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:06:f8:ef:05:15:55:34:46:95:d1:d4:93:4e:6f:70:68:2e:
7b:5c:7b:3e:6b:9f:86:0f:ee:57:b3:8f:9d:70:c2:5e:bd:d3:
a5:9f:4d:3e:5c:44:f6:42:fa:4d:dd:f0:9b:86:e5:36:01:b0:
51:b6:1d:9e:00:ce:e4:d6:47:6f:7e:93:32:05:16:52:d4:a2:
dc:cd:97:16:56:2f:76:7d:c9:c0:68:c5:94:7f:2a:ce:76:2f:
ea:9b:8d:01:21:2f:37:65:d8:97:99:57:4a:86:a5:36:53:dc:
1c:4f:f8:3d:36:5a:1c:c8:4e:0d:ea:66:93:a2:29:5a:e4:58:
00:ff:4a:ca:40:35:0e:b3:34:c2:b9:0b:d5:dc:16:a7:be:1a:
5b:12:bb:58:48:28:96:58:da:4d:57:8c:8f:27:ee:14:ed:a1:
45:12:39:a2:3a:17:b0:c5:b9:34:bd:d5:44:c5:1d:2d:8c:95:
26:01:81:f2:0b:ac:34:6e:87:f1:82:13:7a:10:bc:31:bb:d3:
e4:c7:c8:b1:64:79:0d:19:ea:8d:21:21:4d:cc:e6:c2:56:00:
65:db:9a:c5:fc:a2:a6:9a:96:b0:ba:13:3c:f1:54:80:dc:0a:
07:6d:72:f4:da:08:65:70:ea:66:64:aa:d5:09:c0:16:3d:22:
cb:d9:09:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEQwRTMxMTAvBgNVBAUTKERCQzZGMjI1NkRERTVDMkM0NkE4MEVCMjQzMkYyNTcy
RURDNTM3RDYwHhcNMjYwMzAxMDcxMTUzWhcNMjYwMzA4MDcxMTUzWjAYMRYwFAYD
VQQDEw02OWEzZTZiOS1kN2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvgAlBRLg5HXRi7wT/gBxM/Zlx3CAtMHdPv91Up25u6CGYXjetjzCgid3aR3n
l7SWhT/5AZFMrglyxshXv72b8iK4ZTacU6wZYtQ6m/ibfqbUfYYbE8wnGifG7dwT
KMjob+nEnLR2fhHGjaiwqc+6DSeglkz6jIe6Pr/8KMgPjcqseGNL0ZqoQTLX3l42
mBx4cYTlofk9npFsTDIRzr+gHPA+AunFshMGrxQOnUhSk7qPHkVt9ddVpikdxaFW
eLXK0qIuMTEFm9rT6SW5asqk0st9sfSK+r7FLAWw6NxGExOXN4ml7Ri1bzUCupB3
0cHG9CX4BlJKM3BU0pwD1stn8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN26b8rF
NKqb3+BSRi+xgTQVPt6VMB8GA1UdIwQYMBaAFNvG8iVt3lwsRqgOskMvJXLtxTfW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDBFMy9CMzVBQjlGQThD
N0UxMUVGOEU5MkU3MUJDNEY5QUUwMi8yOGJ5SlczZVhDeEdxQTZ5UXk4bGN1M0ZO
OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzI4YnlKVzNlWEN4R3FBNnlReThsY3UzRk45WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RDBFMy9CMzVBQjlGQThDN0UxMUVGOEU5MkU3MUJDNEY5QUUwMi8yOGJ5SlczZVhD
eEdxQTZ5UXk4bGN1M0ZOOVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwgb47wUVVTRGldHUk05vcGgue1x7Pmufhg/uV7OPnXDCXr3TpZ9NPlxE9kL6
Td3wm4blNgGwUbYdngDO5NZHb36TMgUWUtSi3M2XFlYvdn3JwGjFlH8qznYv6puN
ASEvN2XYl5lXSoalNlPcHE/4PTZaHMhODepmk6IpWuRYAP9KykA1DrM0wrkL1dwW
p74aWxK7WEgolljaTVeMjyfuFO2hRRI5ojoXsMW5NL3VRMUdLYyVJgGB8gusNG6H
8YITehC8MbvT5MfIsWR5DRnqjSEhTczmwlYAZduaxfyippqWsLoTPPFUgNwKB21y
9NoIZXDqZmSq1QnAFj0iy9kJ/g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:10:15 2026 by rpki-client