
$ rpki-client -vvf rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
File: z28S295L6RNFgVj1x3hccSkIVVw.mft (raw, json)
Hash identifier: K5194yuE2lwv6KQzSVzDl32MqsICTKnky3ESC1YnGyA=
Subject key identifier: F5:36:A6:06:D8:D2:29:86:D1:E4:69:90:9F:D3:4B:0D:DD:97:E2:B3
Authority key identifier: CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C
Certificate issuer: /CN=A91725C8/serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
Manifest number: CC
Signing time: Mon 27 Jul 2026 08:55:09 +0000
Manifest this update: Mon 27 Jul 2026 08:55:09 +0000
Manifest next update: Mon 03 Aug 2026 08:55:09 +0000
Files and hashes: 1: z28S295L6RNFgVj1x3hccSkIVVw.crl (hash: evOiDgePk1juHMhTeoVStwpBeu5h5+odcCici+jn23w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl
rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:55:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91725C8, serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C
Validity
Not Before: Jul 27 08:55:09 2026 GMT
Not After : Aug 3 08:55:09 2026 GMT
Subject: CN=6a671ced-c44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b5:3b:9f:2a:fb:25:8e:4c:1e:a6:77:07:8e:
05:3e:11:28:1c:81:d2:dd:43:61:9b:88:ed:02:0f:
3b:b1:f3:58:0c:71:2b:51:bc:63:49:6b:9e:b5:df:
4f:5f:57:9c:ed:6e:fb:d7:43:af:f0:99:ad:1f:30:
29:f7:ea:2f:af:6a:f0:37:70:79:e4:49:d4:ca:a0:
38:0c:59:45:fc:53:35:44:08:0d:5e:e1:5e:46:06:
16:38:c7:b5:18:f4:fd:44:94:2d:31:a6:cf:66:34:
fa:c4:98:85:0c:5e:c1:ff:c8:07:45:c4:46:71:fa:
e5:28:23:8b:9e:55:bc:6c:42:14:6a:8d:b1:6b:86:
fd:52:0e:f4:17:65:9a:76:d4:2c:b8:c6:e7:77:ae:
43:04:b8:d0:94:5f:be:4e:a2:c0:0c:f1:95:e1:5e:
9b:6c:5a:8d:a5:bc:05:df:06:24:72:42:8e:01:bb:
fb:59:2b:08:bc:46:28:1b:a2:be:34:05:8a:0e:64:
ff:2f:b5:61:9f:49:be:14:1d:bd:cc:48:70:f9:fc:
f5:25:5d:70:b5:e6:43:7a:15:9c:2e:f3:17:eb:5f:
50:da:98:cb:57:92:1b:2e:ed:0e:e5:de:a3:8b:de:
24:cf:1e:fa:45:68:9e:f4:46:34:20:00:87:6c:1d:
9d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:36:A6:06:D8:D2:29:86:D1:E4:69:90:9F:D3:4B:0D:DD:97:E2:B3
X509v3 Authority Key Identifier:
keyid:CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d7:9b:66:7c:69:df:e9:09:17:a8:79:df:f5:17:a7:6a:34:
10:60:93:3c:df:2f:cd:26:df:d6:29:cf:99:26:15:ed:d8:56:
fe:12:9c:a3:e0:25:32:e4:e5:80:c3:84:a8:b7:39:52:a3:3b:
4b:e2:8e:04:39:56:37:e4:6c:c3:f5:f5:6d:a1:66:e3:43:fa:
b3:eb:a0:d2:32:67:0a:c2:6e:83:16:ba:49:d3:3c:ad:ce:3f:
8f:2a:38:a6:ec:9e:10:94:db:3d:53:10:14:f9:cf:35:95:e7:
6a:2f:07:f5:6e:7a:9f:2a:41:f5:da:04:e0:7c:3f:12:7e:0a:
5b:1c:6e:3c:7b:91:48:06:42:30:39:c5:53:4e:9d:88:99:57:
41:96:ff:14:27:e7:65:18:f8:96:01:87:af:8d:4f:94:ca:1b:
34:ab:f3:68:79:1e:30:a0:76:60:da:a4:70:f7:bc:17:5d:12:
7b:03:27:a0:6b:fd:5a:eb:34:07:73:24:96:52:27:2a:82:e6:
e0:f5:83:fd:3e:cf:a7:17:1e:dd:13:2c:c2:8f:3f:af:8d:f4:
3d:a8:5c:f1:0e:cc:82:c4:6d:e7:0a:fc:e3:97:b2:e3:90:f2:
34:49:92:79:53:29:a8:09:3b:bf:c7:8f:74:95:e4:bb:7c:16:
8e:ad:fe:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:22:25 2026 by rpki-client