
$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json)
Hash identifier: cdnMnlMZjuvkzWIArlFaG0I7+a0dJcjwvlSEukD1cmQ=
Subject key identifier: AF:43:94:BB:7D:4B:B8:5D:B8:3B:4B:AB:6B:77:63:BB:89:EC:86:47
Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Certificate serial: 0557
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
Manifest number: 054C
Signing time: Tue 21 Jul 2026 00:16:17 +0000
Manifest this update: Tue 21 Jul 2026 00:16:16 +0000
Manifest next update: Tue 28 Jul 2026 00:16:16 +0000
Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: Z8UxBg+jqmuf5PptoQP2UnYJKH12Vo/q3rEmIIwDJb8=)
2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: TDZ9GRT7CbtPoByROT6gvRqDQKkISdui8U28+wGu2U8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 00:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1367 (0x557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Validity
Not Before: Jul 21 00:16:16 2026 GMT
Not After : Jul 28 00:16:16 2026 GMT
Subject: CN=6a5eba51-db89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6c:12:e1:37:a0:d6:2c:a6:5a:3e:9e:6a:6b:
d0:5b:e8:44:c6:eb:4a:eb:2e:45:c4:cb:84:28:73:
d6:41:74:25:87:51:57:9b:04:f6:a0:cd:a6:1b:39:
8f:20:dd:07:a6:e8:31:98:cb:cb:e8:a9:cf:0a:c6:
8d:b2:21:ce:e2:06:dd:af:d1:c8:ec:83:52:13:c1:
18:58:0e:53:d1:af:c2:f8:1a:16:b1:39:7c:71:5e:
a3:b7:49:11:38:15:97:b1:40:4e:57:55:c9:09:80:
45:08:f9:03:33:99:bf:1c:65:65:ab:83:00:b0:b8:
63:b6:b0:15:b3:a4:c1:a4:84:32:35:d4:6f:9a:35:
4b:28:18:f5:55:d0:c7:a9:63:89:11:13:b8:65:99:
b1:7e:6a:cd:a8:70:2f:47:29:8a:10:d0:99:1b:33:
b6:ad:3d:1a:08:d9:ef:39:a1:26:10:53:07:d6:55:
a3:79:c7:06:83:ac:49:40:ec:72:99:63:cb:11:32:
fb:e5:16:4c:7b:96:83:a2:63:de:c5:07:18:b5:a4:
c7:d3:af:ce:87:ce:d2:ef:8b:53:cf:f6:a5:9b:7b:
4a:df:be:00:37:10:05:ec:63:97:67:64:ea:a7:0b:
f4:1c:c5:60:ab:c5:18:f6:3c:fd:f3:76:f9:d2:01:
83:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:43:94:BB:7D:4B:B8:5D:B8:3B:4B:AB:6B:77:63:BB:89:EC:86:47
X509v3 Authority Key Identifier:
keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:02:44:22:9b:e2:cd:a9:77:ab:fd:2e:cc:56:f5:5a:a3:96:
1b:ba:70:06:23:98:d5:56:93:f5:d8:6a:61:14:f4:95:b6:3d:
4d:d4:e4:0b:df:07:c8:06:38:b4:8a:dc:c9:25:79:8d:33:d8:
61:a9:74:de:f1:f6:a8:f4:05:05:1a:e5:3e:17:9d:39:41:23:
fc:79:cf:b4:cb:4d:cd:fd:fd:93:7c:05:72:ef:9c:d8:b3:01:
c5:f4:08:3d:3a:12:68:08:8c:d7:9f:53:05:46:a5:20:2b:cd:
db:a1:99:ea:79:c5:86:31:3e:35:7f:ce:3b:09:37:cc:00:03:
ee:02:26:b2:f6:f2:cd:94:37:6f:39:26:92:d0:c8:96:e2:45:
eb:20:6e:98:22:a3:e5:4d:34:05:05:96:a0:2f:ea:e4:22:6c:
56:47:d3:37:ff:0a:2f:91:ea:51:73:f5:33:a0:19:f2:2d:c0:
c9:43:2a:77:59:1a:de:95:d9:4d:4a:7a:97:2f:55:d5:9c:aa:
e4:13:f0:bd:d9:48:e0:0b:0e:d2:d3:78:d6:f4:54:6a:1e:21:
70:b4:61:63:53:60:ac:9b:4f:5d:bb:a8:6d:c3:dc:f2:70:9f:
d2:1b:ad:2e:8d:9e:d4:ce:63:51:e0:8c:6b:72:ea:38:72:c3:
8f:3e:6e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:42:41 2026 by rpki-client