
$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json)
Hash identifier: MgBbqXfsAWYby4mThRU+VmSlkFDfJGsqiWCcKSu+fSg=
Subject key identifier: 7A:2F:1E:44:44:2F:96:2C:65:02:42:1E:4E:E8:E3:60:95:D3:A8:6B
Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Certificate serial: 0544
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
Manifest number: 0539
Signing time: Fri 12 Jun 2026 23:33:57 +0000
Manifest this update: Fri 12 Jun 2026 23:33:57 +0000
Manifest next update: Fri 19 Jun 2026 23:33:57 +0000
Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: yi93Cqk8ERAIBeaNk5m2fjNBycHouFQuzo67yatQdtE=)
2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: TDZ9GRT7CbtPoByROT6gvRqDQKkISdui8U28+wGu2U8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1348 (0x544)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Validity
Not Before: Jun 12 23:33:57 2026 GMT
Not After : Jun 19 23:33:57 2026 GMT
Subject: CN=6a2c9765-2ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7a:20:82:c4:fe:74:01:a2:99:34:69:d2:13:
c9:dc:bd:8f:b6:bd:56:7c:4b:db:b8:27:36:d9:44:
a4:af:2b:ce:a4:48:18:2a:7a:16:67:43:39:ba:ed:
66:27:9b:a7:0c:8d:00:6c:1e:c5:e1:d9:5d:70:e8:
66:1c:04:7d:78:d6:da:1e:00:02:77:0d:3d:ab:94:
98:f3:67:b6:6c:26:6a:80:74:f7:bb:d7:d9:8c:3e:
6f:3e:76:50:c9:57:51:5e:97:71:e0:51:ba:af:7a:
d6:2e:9b:1a:7e:61:26:9c:70:1d:bc:69:47:d8:09:
a8:2c:fb:ca:ab:d3:9e:ed:57:94:2f:8d:0f:ba:1f:
07:f3:98:de:e9:de:53:48:b5:cf:48:f3:56:f8:60:
c6:ba:98:43:78:33:12:cc:f1:94:c8:fe:ad:89:6c:
c3:84:23:f3:45:ba:ef:7b:77:ad:33:bf:01:25:70:
67:18:7c:92:70:76:3b:88:46:b8:a8:e6:17:59:61:
4b:8c:4c:ed:7a:97:5b:62:5f:b8:a2:41:05:61:da:
75:35:0e:07:a0:7e:f4:a9:5d:47:07:8c:dd:2d:bf:
53:d6:24:c5:6e:e7:cf:e9:74:dc:79:e5:9d:5c:bd:
99:24:02:76:26:17:71:b9:bd:8a:82:91:63:3b:e6:
65:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2F:1E:44:44:2F:96:2C:65:02:42:1E:4E:E8:E3:60:95:D3:A8:6B
X509v3 Authority Key Identifier:
keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ac:67:1e:03:31:b9:48:9d:88:bf:42:4d:15:3c:5d:34:89:
a3:ce:4a:04:e5:1c:a2:2c:ed:10:32:c9:1e:e5:7d:2b:1a:a5:
c3:f2:54:cb:1b:e4:07:f0:4c:a2:4e:36:86:6d:2b:0d:f4:a3:
ff:f7:51:34:d3:81:f7:b2:a7:8a:7e:49:d4:a8:87:07:33:71:
6e:76:f7:2b:74:5d:f8:f4:02:cc:98:81:78:7a:af:dd:44:80:
4a:2d:59:97:c1:43:94:33:89:8c:69:98:46:f6:be:d7:ae:63:
c9:17:64:96:2f:85:f9:f2:18:62:6a:6b:6c:ee:2c:45:b4:cc:
2a:66:58:de:8a:da:42:20:7a:b6:25:85:a0:a3:2d:fd:27:a8:
e0:bf:d1:28:55:80:b3:2d:8c:00:0f:19:e4:d6:89:33:00:17:
17:55:3a:4f:f4:19:6b:5c:b4:b3:92:d5:6a:29:78:cf:7c:4e:
58:ef:7e:5b:10:a9:a3:38:cc:c1:6c:00:84:61:71:32:50:3c:
99:fb:ed:6e:f5:e1:91:cc:b6:c0:49:ce:f5:1c:37:e0:d0:05:
f0:6d:50:19:59:30:77:f8:60:e2:0d:40:ce:df:3d:e6:1e:97:
8d:c7:16:82:ab:33:55:c8:5b:1f:9c:b7:aa:7e:78:01:cc:81:
dc:7f:4b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:24:45 2026 by rpki-client