
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft
File: 28IYSbtMFwTSMZPEG3DGaxqWVi8.mft (raw, json)
Hash identifier: PGBpaBEuFWWIkYuRTl6XbzFACyobHSf0+Q/Hpn8Vskw=
Subject key identifier: E1:2F:64:C9:5D:A5:B4:B2:EC:14:C5:3F:F6:DC:7A:5F:04:22:0C:B1
Authority key identifier: DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F
Certificate issuer: /CN=A919C233/serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F
Certificate serial: 15D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft
Manifest number: 15C4
Signing time: Sat 28 Feb 2026 16:48:34 +0000
Manifest this update: Sat 28 Feb 2026 16:48:34 +0000
Manifest next update: Sat 07 Mar 2026 16:48:34 +0000
Files and hashes: 1: 28IYSbtMFwTSMZPEG3DGaxqWVi8.crl (hash: RQ9E/ZvzF16orF0w+rwePn05bi0kHCCTrFbay83rhso=)
2: 13EB2806503611F0AE9ACE86C4F9AE02.roa (hash: 5U+qNAcyg11e1mcFFeSSmJQHAt3E5ngFjCNuSAbr96I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl
rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5584 (0x15d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C233, serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F
Validity
Not Before: Feb 28 16:48:34 2026 GMT
Not After : Mar 7 16:48:34 2026 GMT
Subject: CN=69a31c62-5932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ad:f8:cd:3b:7b:de:15:f6:87:d3:06:2f:02:
1c:4d:8b:c9:2a:59:d6:15:6f:bc:cc:ad:b2:32:8f:
e2:bd:b0:6e:00:ab:f4:5f:fb:20:e4:f8:9a:7e:f6:
01:f4:e6:15:c8:61:57:1c:f8:e9:15:04:a5:49:41:
34:af:6b:d5:54:cb:bb:da:1b:9d:e6:bf:c3:1c:57:
6e:8d:9f:af:93:9a:a2:e8:d6:0d:15:d2:2b:a1:0d:
14:2e:54:a5:a5:42:72:17:d2:d1:ae:e1:fe:52:7c:
1c:39:9c:e5:97:27:9b:8e:4c:b1:e9:e0:79:ad:33:
6a:7d:c8:76:ca:41:f1:19:68:67:bd:58:bc:88:86:
e5:45:7c:e3:99:7c:1b:2a:0c:a9:a0:e2:ff:26:51:
41:8e:6e:30:e2:2a:a2:bc:3e:d6:a9:d7:47:26:47:
c6:e7:8b:e4:b9:4f:4e:70:86:3c:48:43:b6:93:5d:
2b:cc:62:e7:72:13:8f:b2:8e:17:32:e6:4f:a3:17:
4f:a0:ce:79:8a:6b:b0:15:2f:26:4e:75:9a:95:69:
bb:c5:7b:07:19:80:dc:55:84:af:f1:0b:ae:03:ca:
ed:f7:04:ec:21:98:fc:33:16:b0:2d:da:e4:d9:56:
bb:1a:67:78:52:6d:03:cd:01:96:d4:c8:c7:46:fb:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2F:64:C9:5D:A5:B4:B2:EC:14:C5:3F:F6:DC:7A:5F:04:22:0C:B1
X509v3 Authority Key Identifier:
keyid:DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:7a:c7:f8:2d:10:d9:07:0b:70:4f:03:8d:2c:68:98:c5:92:
22:19:78:cb:3c:f1:66:64:f4:0e:0b:fd:e8:fe:5d:f6:60:18:
54:6a:e4:29:96:95:3e:82:79:00:5f:02:c0:0f:b6:4e:4d:38:
7b:f6:11:c2:6a:80:cb:6f:37:0b:3a:62:c3:3b:24:23:40:af:
26:f1:f8:08:e8:f1:6b:82:f9:3a:75:a4:6d:e8:c5:54:70:af:
b8:97:d4:1e:0b:7e:08:d5:d2:e2:33:39:d7:97:55:c3:37:61:
9f:2c:f7:f0:fc:fc:d6:d8:96:f0:26:00:ce:01:cf:df:50:27:
8a:66:03:10:40:ce:a6:58:67:04:fc:07:37:9d:34:96:e7:e4:
88:da:1d:6e:7d:d0:7f:cf:b2:18:13:b9:20:32:ea:eb:f7:3d:
cc:1d:21:97:bb:83:e1:1d:32:97:c5:f0:56:e7:e9:58:ce:7b:
5c:b3:50:0d:93:23:54:a5:41:90:e8:9f:14:34:3a:b3:dd:b3:
8d:12:fb:19:de:c8:fb:e4:c1:93:79:d7:46:46:96:61:13:a4:
de:05:7c:e9:a5:da:f7:8c:1f:4b:ee:80:77:01:44:34:5d:db:
e1:2e:03:9f:92:2d:b9:e6:1e:fb:78:ab:4c:2f:37:34:c6:90:
42:6a:77:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:38 2026 by rpki-client