
$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json)
Hash identifier: IBv6m+u4A8qKZONfLBIxTiHZXSiZniA5aqSXC2IDDG4=
Subject key identifier: F4:CB:34:24:54:BA:19:BD:BD:FF:A1:F9:D4:88:5D:04:AB:F5:2F:42
Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Certificate serial: 055B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
Manifest number: 0550
Signing time: Wed 29 Jul 2026 00:06:50 +0000
Manifest this update: Wed 29 Jul 2026 00:06:49 +0000
Manifest next update: Wed 05 Aug 2026 00:06:49 +0000
Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: IbkMiZWa9B+xVe3T0y1S/ZnCcQaguRZT/bTuqUdClow=)
2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: TDZ9GRT7CbtPoByROT6gvRqDQKkISdui8U28+wGu2U8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1371 (0x55b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Validity
Not Before: Jul 29 00:06:49 2026 GMT
Not After : Aug 5 00:06:49 2026 GMT
Subject: CN=6a69441a-22fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:89:20:db:fd:99:0b:7a:c5:20:8c:a6:89:
c1:78:36:53:62:7b:99:1f:40:af:58:f7:8a:14:2b:
35:6d:91:19:9a:94:c5:9e:ef:56:67:54:d1:a8:c6:
18:af:2b:27:e4:ac:a8:e4:f6:d9:1d:49:85:1a:f7:
be:2a:85:80:f2:dd:dc:ab:42:b0:b0:fb:6c:d1:85:
6d:b6:86:39:f5:49:6b:c1:4b:d0:a2:9c:fd:6c:ca:
5e:50:a5:dc:79:8e:23:93:8b:9a:1f:f2:00:57:98:
06:91:29:da:02:18:7b:62:a6:cf:6b:96:fe:f8:49:
c4:a1:bf:d2:dd:ff:55:dc:74:ca:25:30:d2:86:5d:
42:42:18:5e:08:4d:66:96:c1:6c:c0:c4:25:49:a8:
ae:54:2e:c0:c8:2d:ae:ca:18:58:bf:25:09:ee:c8:
a2:43:5a:c6:25:70:90:e0:6f:4b:2f:9a:85:d4:ea:
ad:85:15:cf:0b:13:63:3b:62:aa:3b:79:19:a6:c6:
97:48:3c:21:b1:84:23:74:34:07:d2:e9:aa:fa:fe:
8d:fa:6c:02:61:f4:d2:61:9a:f8:83:80:2d:08:55:
f2:36:3b:3e:ad:70:12:b7:1b:98:d9:40:61:42:00:
d6:2b:c3:a2:8b:45:7b:30:e8:72:1a:bb:f5:e7:65:
fb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CB:34:24:54:BA:19:BD:BD:FF:A1:F9:D4:88:5D:04:AB:F5:2F:42
X509v3 Authority Key Identifier:
keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:75:c6:49:fe:39:8b:0c:82:b8:58:5c:2e:d6:34:87:b4:55:
84:2b:ad:07:6e:dc:51:16:6e:c3:9f:11:6a:9b:39:04:24:51:
26:7c:fd:12:7f:f6:18:aa:54:fc:06:02:1b:5c:ec:7b:4e:be:
6b:a4:50:4d:68:17:c9:1e:a2:7f:55:90:f9:7b:22:ed:77:de:
0f:b7:e8:e5:de:71:14:ee:2e:7e:77:d0:d3:8f:92:e8:51:17:
a7:70:f9:1b:87:1e:05:5c:7f:2e:d4:00:90:fa:e1:96:b2:65:
18:bf:38:f2:c5:96:46:04:e3:62:9b:63:81:c7:67:96:86:d3:
f6:eb:7f:18:42:06:ec:0c:5a:dd:2d:ee:b6:3f:74:b3:71:6c:
b2:26:e6:78:96:85:9e:6b:d3:24:77:3a:f2:38:98:bd:dc:69:
d3:ef:c8:84:c1:45:76:7a:01:76:0d:78:cf:d4:7e:b7:c9:93:
5a:55:ce:43:26:d2:0e:6c:47:74:de:c7:be:fc:2d:b3:c3:71:
d6:3f:43:1e:b6:3b:d2:ab:1d:62:9c:d5:02:92:56:46:0c:d2:
77:97:ed:1f:62:36:1c:43:16:b8:0b:74:3d:af:bc:18:51:63:
e7:e1:47:d4:09:13:53:80:6d:9f:d0:f3:11:a0:92:ce:1c:7a:
35:07:88:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:19:17 2026 by rpki-client