
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json)
Hash identifier: Ul79xePXaLQlNu8cstCJqZQSxzabySvnuaP64nNZUTM=
Subject key identifier: 37:D3:C0:37:8E:29:D9:FB:0F:C7:DD:1C:21:C5:E2:D4:30:F5:28:B1
Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Certificate serial: 0573
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
Manifest number: 0567
Signing time: Fri 04 Sep 2026 23:09:18 +0000
Manifest this update: Fri 04 Sep 2026 23:09:18 +0000
Manifest next update: Fri 11 Sep 2026 23:09:18 +0000
Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: /7HAKkF/eestR17J95x04XW8ZzeG+H1HV4lW/bOFzYk=)
2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: YE01TphWRKhaN7OxPWo3dhGFwXfLCHTh3x9i/9X7LhE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 23:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1395 (0x573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Validity
Not Before: Sep 4 23:09:18 2026 GMT
Not After : Sep 11 23:09:18 2026 GMT
Subject: CN=6a9b4f9e-47af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:a9:a5:9f:4c:24:0e:eb:a0:c9:90:be:65:
cb:61:a1:f5:05:d0:f5:0a:50:3a:fc:36:7c:3d:64:
5d:23:98:36:75:2b:6a:3b:68:f9:b3:1a:ea:20:30:
d0:05:26:20:53:d5:92:a4:a4:11:a0:03:f9:0c:61:
e1:2d:4d:31:d8:e9:88:36:b5:d8:ab:82:ac:94:80:
01:0e:1a:2b:15:b7:19:08:d1:0d:df:5c:60:c9:76:
7a:b6:99:97:8e:bc:d3:26:5a:b2:e4:cb:30:92:9b:
65:f5:16:df:d1:1d:1f:10:16:25:25:60:1b:cf:23:
a9:7b:cf:f9:91:fa:fa:0c:47:0a:d2:f8:c7:f8:ba:
5b:a6:da:10:40:4c:24:da:b5:4b:08:50:4f:5e:d8:
a8:56:83:d6:db:51:43:f9:af:fa:6f:66:42:df:0a:
ba:b9:b5:7c:aa:e1:6e:12:80:38:be:1f:2b:6f:84:
4e:7f:a8:0c:ad:50:7e:3a:d8:13:60:df:07:28:56:
71:26:1e:eb:fb:77:bb:64:8b:e9:95:9c:df:e5:f7:
ff:b4:72:f5:65:25:d0:5f:f3:34:d4:ee:9e:ba:fc:
08:10:92:d4:4a:ea:c1:38:46:38:b3:81:0c:41:67:
b9:3b:f9:68:70:b8:58:ea:9e:62:e5:b9:1b:69:f8:
f6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D3:C0:37:8E:29:D9:FB:0F:C7:DD:1C:21:C5:E2:D4:30:F5:28:B1
X509v3 Authority Key Identifier:
keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:56:bf:b9:ec:9b:80:16:52:dd:a7:7b:4c:ae:75:eb:3c:c8:
09:1b:40:18:23:37:33:17:40:66:c9:7d:c8:bf:23:89:91:bc:
b0:61:37:e4:ef:09:0b:78:24:86:26:67:53:d2:67:5f:99:49:
bb:f2:a7:48:31:ee:35:43:5a:68:3a:92:68:69:3d:b9:73:55:
80:4f:57:f7:69:79:20:9c:30:aa:20:03:33:e3:e6:64:0e:b5:
ca:00:f4:5a:d7:bf:b2:38:0b:d9:15:ae:85:38:01:28:ea:a9:
aa:14:9f:7f:e7:22:c6:c3:2a:43:21:ca:37:cb:d2:33:8f:15:
ea:21:12:48:fb:e7:85:c7:53:a6:de:20:cc:78:46:88:4a:e8:
6e:17:92:80:ba:52:d1:99:17:3d:a3:ee:98:96:c7:9c:77:a0:
37:76:42:71:88:16:0a:2e:38:21:f7:dc:23:bc:3d:d9:90:33:
6e:45:13:1d:f6:cd:a2:68:75:43:8e:d3:3c:3f:43:1b:06:9d:
d1:91:5b:07:b3:0c:e6:91:3f:86:5a:f8:ce:16:18:96:92:f9:
a2:0b:67:55:0a:6f:fd:ab:7a:70:0a:cd:58:0a:5a:fb:2c:34:
8f:e5:7a:33:d8:cd:41:94:58:78:63:7d:52:a5:f1:3b:73:82:
de:c7:a5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:50:36 2026 by rpki-client