
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
File: 28ptKqUoxLJFVtsH_LVpw2rC_rE.mft (raw, json)
Hash identifier: IZKoBE6U3nkdxx0HA3LHXZ/96BBdEj0GUQSxvO+C90U=
Subject key identifier: 93:89:71:F7:C1:BE:C2:4B:B0:B9:C0:41:07:F1:31:D5:66:C8:0D:FB
Authority key identifier: DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1
Certificate issuer: /CN=A918C477/serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1
Certificate serial: 030D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
Manifest number: 0308
Signing time: Mon 02 Mar 2026 01:47:16 +0000
Manifest this update: Mon 02 Mar 2026 01:47:14 +0000
Manifest next update: Mon 09 Mar 2026 01:47:14 +0000
Files and hashes: 1: 28ptKqUoxLJFVtsH_LVpw2rC_rE.crl (hash: M2FpHikEJT0o3PvmZH2gH3vO0o9Igd9pRfC8zex9hWo=)
2: FB2262620C3111EDBD0F7137C4F9AE02.roa (hash: pwiKgtogbJLJ/RbRQdDDfmFN4XuwAJG68m5hiv5+D3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl
rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 781 (0x30d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C477, serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1
Validity
Not Before: Mar 2 01:47:14 2026 GMT
Not After : Mar 9 01:47:14 2026 GMT
Subject: CN=69a4ec23-7f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6d:9c:03:ac:e2:98:2e:24:f6:32:66:ab:9c:
b4:f9:ab:01:a9:26:21:e7:64:d7:31:bc:a2:4b:24:
d5:34:8c:33:7f:11:48:5d:32:6f:1b:9a:71:da:4c:
3d:2b:9d:12:ad:0f:f8:d6:46:00:ec:22:6d:f5:e5:
ed:fe:e1:7b:11:52:d8:c8:9e:49:2d:44:26:10:5d:
97:dd:59:29:17:01:ff:d6:26:0f:50:cb:39:11:47:
b4:6b:b0:4a:67:04:f1:7f:ae:ab:0f:d0:5a:ec:fe:
45:8d:61:16:0c:8a:20:65:ea:8a:6d:8c:0c:d0:6a:
a6:7e:97:df:f6:ca:e2:5c:6d:c7:91:9b:d4:3d:b9:
61:a9:7b:91:c1:06:e3:82:80:82:78:1e:1d:60:10:
3c:2a:ac:7c:ba:c7:9e:c7:da:d8:03:72:25:90:e3:
ae:6b:c7:80:43:3d:b2:b6:e9:d9:d4:31:49:ee:5c:
29:91:03:04:86:82:d3:48:1e:e4:73:ff:e4:0c:ae:
8c:bb:4a:80:86:5f:fd:bc:b8:69:7f:3b:96:d1:c9:
0e:7f:c3:aa:66:a6:2a:ff:c4:15:f5:6a:cc:17:77:
85:ac:58:b4:d5:49:43:8c:da:d5:04:d0:e0:a0:15:
43:7c:ce:b4:41:aa:45:8e:d7:d1:80:70:0d:f2:13:
da:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:89:71:F7:C1:BE:C2:4B:B0:B9:C0:41:07:F1:31:D5:66:C8:0D:FB
X509v3 Authority Key Identifier:
keyid:DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fa:67:a7:cc:c8:c5:1b:bc:20:ec:d9:36:58:eb:1c:99:4d:
7b:8f:53:d6:ea:09:84:21:3a:2e:95:c1:b6:1d:62:b2:b8:67:
29:d6:2e:d0:36:31:1e:96:f1:76:a8:a2:ca:a7:88:39:e9:da:
6b:64:a2:0c:41:9f:d5:99:ef:44:c1:cb:06:4e:69:9a:7f:77:
90:95:7d:3f:d4:84:ad:3a:7e:5e:5b:b2:ed:21:d6:90:0a:2f:
b7:a2:cf:1a:12:12:72:f4:18:7e:df:1a:30:81:72:72:d7:4a:
6d:a7:c0:34:b3:24:16:23:1a:b7:43:5c:90:b4:47:0f:f3:72:
34:8f:c7:15:84:f1:23:98:2b:e8:f2:64:45:a7:f2:be:d4:72:
81:15:b0:80:09:9b:8c:1a:0a:67:6c:4c:fc:d6:bb:e3:f6:f7:
27:61:95:5f:76:b2:8b:e6:d2:6a:e7:46:7b:97:57:1d:11:97:
ff:6b:34:72:9f:14:60:1e:6b:4a:50:29:b8:9f:88:00:eb:e8:
21:c5:9a:fe:ab:3a:47:e4:78:cb:56:b9:b9:94:ef:9c:6b:97:
dd:dd:7a:d6:90:55:b1:6a:85:12:33:b8:1b:0b:61:57:d5:40:
78:33:26:54:f0:9e:a8:b8:0f:d7:bd:88:d4:46:a3:45:20:2c:
db:75:b7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:51:37 2026 by rpki-client