
$ rpki-client -vvf rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
File: z28S295L6RNFgVj1x3hccSkIVVw.mft (raw, json)
Hash identifier: 8UwpfF9x6L2xVBsL/P+IHZsU5tnNJfb2grZrFodivbg=
Subject key identifier: F4:DE:A3:6D:CA:09:A4:DC:AA:15:B6:6E:50:0B:9A:F3:8C:44:5C:F5
Authority key identifier: CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C
Certificate issuer: /CN=A91725C8/serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C
Certificate serial: B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
Manifest number: B5
Signing time: Thu 11 Jun 2026 09:23:03 +0000
Manifest this update: Thu 11 Jun 2026 09:23:03 +0000
Manifest next update: Thu 18 Jun 2026 09:23:03 +0000
Files and hashes: 1: z28S295L6RNFgVj1x3hccSkIVVw.crl (hash: rzC+95yhc3TtEGDEenZ/OBIRFwaPthunzsmiWDKe858=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl
rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 09:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91725C8, serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C
Validity
Not Before: Jun 11 09:23:03 2026 GMT
Not After : Jun 18 09:23:03 2026 GMT
Subject: CN=6a2a7e77-9201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e6:d0:0b:47:fc:f9:16:3b:9c:43:20:a1:99:
46:c1:73:a5:c0:17:c3:ed:82:7a:d4:0b:d2:f2:63:
fb:60:0c:e0:ee:8b:18:78:e2:a2:8b:60:61:75:13:
52:c6:d9:2f:8a:6a:c0:48:39:69:28:9b:51:49:4d:
90:9d:0e:59:6e:9a:d1:f1:62:eb:04:40:1f:cd:01:
56:a3:0d:5a:5a:24:d2:04:82:43:5c:ba:cf:ad:fb:
1c:80:21:59:1e:80:f4:29:4e:e0:2a:58:a7:4f:72:
df:95:fd:25:9d:ac:bc:68:e2:30:b1:10:83:e3:86:
30:cb:ae:d5:12:09:a2:94:5b:d9:73:ee:1b:95:a3:
fe:9d:ab:fb:81:d1:4e:81:1b:93:ee:07:fe:59:16:
c3:cb:2f:1c:90:30:0c:08:33:52:fe:81:86:0a:29:
ba:2e:a2:1b:27:f4:73:0a:2e:0d:70:73:da:40:fd:
80:2b:56:9a:70:4a:88:e6:98:7a:54:96:e5:34:46:
50:3e:03:58:da:fc:b6:46:4c:f9:46:3c:57:1d:72:
81:6f:3c:92:ba:1d:c0:21:0a:9a:ef:5f:60:65:d5:
5b:55:c2:18:52:5b:4a:7b:20:61:58:73:d8:85:48:
c9:db:26:73:c3:8f:d6:91:93:18:dc:02:b3:c4:c8:
06:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DE:A3:6D:CA:09:A4:DC:AA:15:B6:6E:50:0B:9A:F3:8C:44:5C:F5
X509v3 Authority Key Identifier:
keyid:CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:fd:07:9c:9f:13:e1:71:df:5f:5a:ff:32:a5:f1:c3:b2:ba:
88:2c:fe:fa:4e:f2:7d:05:a6:0a:2c:b3:f2:02:5e:4e:e4:62:
0c:5e:d4:2b:93:52:46:0b:af:53:bf:d6:98:27:8d:ed:ab:ac:
1e:1c:4c:16:28:c7:be:46:c3:ae:91:04:49:f7:eb:a3:81:55:
e6:66:de:c6:9b:c8:32:2b:aa:c5:82:3d:6b:6b:a4:a3:1d:54:
3c:4e:73:b7:60:1d:4a:57:c7:3a:39:a5:39:3c:48:e9:e3:e8:
9e:48:bb:48:6f:cf:98:38:b0:a9:a5:d9:2d:56:e2:06:db:a1:
08:89:5b:2c:61:97:89:1e:a6:33:33:5e:6d:27:84:69:71:f1:
9e:33:1f:67:c3:2a:60:1f:4b:d6:d7:59:7c:10:c3:b3:10:9a:
a6:f1:c7:7c:bf:07:10:5f:7b:3e:1c:2a:e8:58:54:4f:42:b1:
61:90:45:76:99:b9:20:8b:48:c1:9d:09:35:24:fc:d6:6e:72:
66:2a:b6:81:04:d6:ff:da:87:32:11:e6:e7:98:97:f6:fb:ad:
d0:03:15:bb:19:b1:95:2d:a7:7f:be:24:b3:c7:a6:00:95:10:
a3:0b:b3:75:b5:79:c2:90:5d:67:aa:47:7b:91:75:d8:04:72:
5b:05:a2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:01:12 2026 by rpki-client