
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
File: 1c9c-LTYDyITBPNliOOVYERH93o.mft (raw, json)
Hash identifier: BMaYXOiJpSZUdqjGziO3I3q7w2OsTuIx7TFeV4OCEEA=
Subject key identifier: D7:9E:4A:EF:F7:FB:B4:9A:04:27:D2:CD:F2:8F:C4:B0:93:27:B6:82
Authority key identifier: D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A
Certificate issuer: /CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
Certificate serial: 0295
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
Manifest number: 028E
Signing time: Sun 05 Apr 2026 01:16:53 +0000
Manifest this update: Sun 05 Apr 2026 01:16:53 +0000
Manifest next update: Sun 12 Apr 2026 01:16:53 +0000
Files and hashes: 1: 1c9c-LTYDyITBPNliOOVYERH93o.crl (hash: Gqg9HfSrXlmNrzdkpihkwnOY8foLMagXIVO2B2OVUo0=)
2: A83E51EC45F611EDBA9D6062C4F9AE02.roa (hash: SogM+aLq7TtnKTXVbg7l5lBGj90QzbOdIzdMdOy5LlU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl
rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:16:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661 (0x295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A5BB, serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
Validity
Not Before: Apr 5 01:16:53 2026 GMT
Not After : Apr 12 01:16:53 2026 GMT
Subject: CN=69d1b805-7ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:db:d4:48:1b:03:8a:6e:47:0a:24:31:1b:90:
91:30:9c:1e:7e:e9:0a:4a:d6:1d:ae:84:12:83:07:
b8:e5:a1:cf:8b:51:d7:96:9a:95:8a:0f:93:9a:56:
9d:ac:c3:4c:0c:2b:8f:47:70:f5:b0:fe:23:dd:92:
1b:93:61:73:6c:e9:d5:7c:fd:ca:1c:82:72:30:9e:
13:5f:17:23:ac:88:ee:65:14:d3:9d:05:6e:57:4d:
d8:7e:d6:68:8c:b6:80:a0:ec:90:2c:55:1b:ff:01:
ea:24:a2:a2:d0:99:b4:9b:ec:10:9f:e5:25:c2:fd:
51:c6:2e:9f:02:d8:af:c6:62:11:40:f4:df:9a:24:
eb:7f:ce:6f:cb:6c:59:6a:eb:d3:fc:ba:7d:13:ab:
32:93:7c:60:07:cf:84:0a:3e:fa:2b:55:6f:6d:89:
65:57:91:10:d3:6b:e6:e9:50:2a:3d:c9:ae:ae:46:
b6:59:ff:75:74:9e:8b:57:1f:4b:00:33:ce:77:b8:
4c:0d:67:aa:4c:aa:4b:eb:72:d4:91:b4:2c:f6:c9:
20:d4:35:1e:0e:98:75:1c:17:61:49:76:b4:6d:77:
2c:87:f2:84:b1:f2:e9:0c:ef:d4:0d:f6:a7:d0:0a:
1a:f7:8e:48:f8:80:5a:c9:4d:d5:36:22:4c:7d:8b:
14:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9E:4A:EF:F7:FB:B4:9A:04:27:D2:CD:F2:8F:C4:B0:93:27:B6:82
X509v3 Authority Key Identifier:
keyid:D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:ce:d6:b7:df:3c:7b:54:e9:44:fc:fe:f7:fd:65:90:17:88:
65:9d:0b:c7:a3:9f:ac:fa:f6:2c:01:5b:4c:bf:8c:09:a7:19:
9b:b9:82:25:54:1f:31:f3:26:15:54:78:47:62:2e:f9:ce:92:
2f:ca:36:9e:01:b5:28:ef:9e:55:4a:c0:c5:14:fa:e3:7d:7a:
7e:70:e2:f0:ba:74:4e:ad:a9:15:97:d0:9a:31:b1:99:04:28:
55:a6:c0:f2:9f:98:25:04:84:bf:9a:f6:7d:ff:bf:82:9c:24:
5d:9a:4f:74:4c:08:87:7b:75:eb:68:85:0e:0d:ca:cc:c3:d4:
0b:41:32:55:c4:93:9b:80:be:e5:35:b6:d3:c8:c9:8d:6f:17:
5c:29:ce:b6:41:69:bb:5e:dd:35:20:0d:60:68:12:53:71:4e:
c4:3d:44:9d:2f:2b:42:62:9e:c9:fc:4f:a8:e3:e9:03:54:9f:
c7:96:3f:4f:a1:0e:84:b8:0f:86:96:00:cd:25:b2:93:b4:a6:
fd:ab:0b:2d:8c:ed:f2:91:f8:6f:83:db:3f:93:a2:ea:8c:fb:
03:8c:e6:53:7f:90:ef:77:14:f4:1e:0d:14:78:8e:71:20:e0:
39:2f:24:4f:86:ff:36:4f:bb:c5:6c:60:1f:1b:f5:ef:9e:b2:
21:af:c3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:59 2026 by rpki-client