
$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json)
Hash identifier: aQ9rYeJ8UH7xZw5bRco2AqT9/3z8Lz38ba3pdjRnX00=
Subject key identifier: EE:5C:68:67:F0:0B:95:73:BA:CA:35:49:AD:75:59:88:40:16:4B:B7
Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Certificate serial: 051A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
Manifest number: 0510
Signing time: Sat 28 Mar 2026 23:32:13 +0000
Manifest this update: Sat 28 Mar 2026 23:32:13 +0000
Manifest next update: Sat 04 Apr 2026 23:32:13 +0000
Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: 7Nu7R+2uKQuLyu0iCgRcCaK5XDBG4e3G7udVuqFRCvo=)
2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: wBK+QyPAeSvy6asg1uEsJFk8VOo4AvH0ZR714TB55hA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 23:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1306 (0x51a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Validity
Not Before: Mar 28 23:32:13 2026 GMT
Not After : Apr 4 23:32:13 2026 GMT
Subject: CN=69c864fd-0da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:fd:64:dc:b4:c3:7f:72:f8:e4:2a:f3:db:
87:d6:2e:69:5d:c3:35:45:6a:e3:cd:77:1e:fe:60:
5b:c4:c9:51:4a:52:42:57:4b:ab:67:4d:b2:96:21:
06:52:5e:62:ea:22:eb:79:d0:33:5d:72:41:f7:01:
98:79:3d:5f:5c:18:a0:10:1f:ae:42:bb:49:79:0d:
e5:f1:7d:f3:a7:c4:d5:1f:e3:c6:c9:67:3d:97:c2:
82:d0:65:52:bc:97:04:7f:57:97:f5:63:58:6a:b0:
4a:28:ca:d3:09:d2:12:74:de:9f:89:1d:73:3f:e4:
de:70:36:69:e4:e6:0f:d7:01:a2:18:83:af:5b:89:
e5:5d:10:fc:2e:5f:58:da:0f:48:bb:30:bd:bf:ad:
6c:15:46:45:c7:6c:1e:70:2a:e8:88:b8:ce:81:4f:
2b:a5:c1:04:77:d3:43:63:51:f1:6b:b9:c5:f8:00:
75:d1:d6:5a:7b:c5:fd:2f:d3:4c:57:87:d1:5e:85:
ed:f0:97:cc:60:05:ef:82:bf:60:ba:5c:24:1e:1a:
10:46:8c:2a:62:1c:1c:29:35:ee:f8:13:15:d4:5c:
98:44:92:01:94:1b:bb:16:1b:3a:25:15:5e:4b:b6:
8c:33:42:cc:51:a4:db:b4:1f:6e:ae:a9:25:cf:f4:
71:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5C:68:67:F0:0B:95:73:BA:CA:35:49:AD:75:59:88:40:16:4B:B7
X509v3 Authority Key Identifier:
keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1e:e3:03:6b:70:5c:72:c2:1f:85:b6:26:6e:38:67:fd:b5:
1c:3e:95:0b:a1:4d:1f:d5:35:4d:e3:03:ce:bb:3f:de:cf:4b:
65:70:ac:92:47:54:b2:f1:42:3f:d3:17:b5:3c:ab:74:2e:bc:
f8:0d:1c:01:c0:9b:bc:d2:7e:58:ef:ad:d8:d4:43:5a:07:fd:
7e:50:d1:3b:d4:52:99:65:e5:e0:03:8d:54:17:3f:2c:98:8d:
15:f6:0f:5c:1e:37:e5:90:3c:81:2b:c5:6c:8a:22:c0:79:07:
5a:99:ad:3b:c1:d5:d0:f7:f5:92:1f:a3:22:b6:dc:bb:7a:53:
9f:80:7d:96:c2:7a:71:71:18:7e:27:91:0c:f8:55:51:46:cc:
da:34:76:f3:bf:e9:39:71:ba:2d:38:01:23:79:c3:4b:f7:67:
d6:3f:f2:9c:dc:fe:a6:89:28:5b:2b:5c:18:c7:03:e1:79:8a:
30:3b:c9:15:34:6a:9b:fc:e2:e4:1a:c6:58:5e:9a:ea:4f:7e:
af:99:5c:e2:9e:d1:e0:cc:f7:dd:57:99:2f:c4:45:13:ef:ed:
c7:4b:b6:6a:dd:e6:e5:df:23:7b:da:b9:87:51:21:d1:bc:57:
70:a9:7f:02:02:23:63:22:55:12:62:39:ce:a5:24:81:6c:34:
d3:62:aa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:07:08 2026 by rpki-client