
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
File: z28S295L6RNFgVj1x3hccSkIVVw.mft (raw, json)
Hash identifier: O1Z7MN1U2ztvHyudXaQdz4T95m2ONQX6NydYs/Lza+k=
Subject key identifier: BA:FA:6D:5D:B1:C1:2C:10:11:48:25:A3:F4:04:2F:90:CB:6E:BC:2E
Authority key identifier: CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C
Certificate issuer: /CN=A91725C8/serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
Manifest number: EB
Signing time: Fri 25 Sep 2026 06:29:42 +0000
Manifest this update: Fri 25 Sep 2026 06:29:42 +0000
Manifest next update: Fri 02 Oct 2026 06:29:42 +0000
Files and hashes: 1: z28S295L6RNFgVj1x3hccSkIVVw.crl (hash: ss69LcVvO65HEN8nZMf1M1Q6AQpsjN1Mtx8+RmH4Vd4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl
rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91725C8, serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C
Validity
Not Before: Sep 25 06:29:42 2026 GMT
Not After : Oct 2 06:29:42 2026 GMT
Subject: CN=6ab614d6-554c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dc:c6:e5:7c:1f:6a:46:af:4f:f0:b0:f4:b7:
13:7b:6d:cd:86:ea:b5:bf:b2:67:9b:ee:a3:10:aa:
dd:ec:ee:48:d1:6f:41:15:8f:3b:e6:4a:c1:14:19:
90:aa:ef:90:60:3a:b3:03:de:11:d8:14:62:af:48:
38:e3:a5:8e:8c:66:b5:c9:1e:03:a9:26:29:2c:41:
45:df:61:33:b7:f0:89:60:71:d1:6b:21:8a:da:82:
de:d4:91:83:dd:51:e9:3e:29:b2:19:e5:ad:05:70:
dd:68:48:16:80:e7:78:62:40:0e:3e:8d:fc:14:1f:
13:a7:54:08:0c:0f:eb:f5:9e:d6:ed:ea:69:f4:6a:
c5:df:1a:d2:2b:c5:1e:c2:31:5b:e0:56:99:af:4e:
bf:1c:22:65:96:4b:62:20:57:61:2b:66:49:3e:3d:
25:18:9b:91:55:10:ea:89:dd:5a:06:c0:82:30:f9:
5f:ec:ba:67:25:40:63:99:58:48:ca:4d:f9:47:8c:
84:4c:60:fd:a4:87:95:cf:04:16:00:35:8d:34:1c:
89:a6:0b:7f:b5:b6:ac:36:1f:24:9d:1f:d0:f2:9e:
14:1c:bc:df:d7:97:18:9b:96:14:0e:07:b2:8b:2a:
4b:5e:7a:69:f8:a9:77:79:3c:7c:22:69:04:7b:70:
c5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FA:6D:5D:B1:C1:2C:10:11:48:25:A3:F4:04:2F:90:CB:6E:BC:2E
X509v3 Authority Key Identifier:
keyid:CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:84:0e:4f:84:28:31:f8:63:40:53:e9:bc:28:37:87:26:c9:
26:af:9f:7e:d7:0d:bd:7c:7d:3d:99:2e:af:bd:85:86:b8:0f:
2a:01:71:cf:f2:1b:d8:71:eb:39:67:0e:68:ba:71:d7:94:af:
ff:96:9f:4e:ee:73:be:f4:ab:03:06:b8:8b:bf:8d:7d:33:7e:
a1:6c:63:ca:79:55:63:f5:39:60:f8:03:d0:2a:34:c7:f2:02:
38:a7:0c:dc:07:2a:ad:e5:b9:48:a8:7b:ad:04:df:33:0b:fb:
c6:53:7e:4f:05:08:bf:57:b9:a4:70:c1:4f:ba:71:6c:c2:cd:
f7:35:61:5e:f3:bf:07:91:03:5a:8a:3a:3f:6e:76:ab:ff:b5:
e3:4c:78:50:42:51:cd:5c:f5:8b:3a:f6:da:70:09:ab:1c:ba:
db:be:21:13:cf:73:c7:01:f1:2e:bf:aa:88:0f:a8:7c:31:70:
08:c4:32:47:00:4a:96:75:c5:21:9f:9a:80:9c:dc:e7:ad:78:
cc:79:04:a4:d3:40:67:62:a8:61:ba:77:74:6a:9c:7d:4f:5c:
96:a3:14:44:02:01:cf:69:76:b5:7f:b3:dc:b5:0d:e9:23:d3:
6e:d1:e5:c1:b2:8a:f3:4c:6e:32:ae:74:d7:f5:11:d2:d7:62:
2e:74:c9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:32:44 2026 by rpki-client