
$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json)
Hash identifier: fZlVpaoBwPQxtZ1psLZn6LvVQ6NNOnKV1cFeAF9GFXk=
Subject key identifier: 57:95:FD:73:B7:1E:24:9B:BE:00:40:6C:4B:4B:E0:AE:34:B6:49:D6
Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Certificate serial: 050C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
Manifest number: 0502
Signing time: Mon 02 Mar 2026 02:11:26 +0000
Manifest this update: Mon 02 Mar 2026 02:11:25 +0000
Manifest next update: Mon 09 Mar 2026 02:11:25 +0000
Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: RiDHlgRoi/rmfRnTEuK7rrSD3q2sf/rIOiPEug+lgQg=)
2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: wBK+QyPAeSvy6asg1uEsJFk8VOo4AvH0ZR714TB55hA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1292 (0x50c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Validity
Not Before: Mar 2 02:11:25 2026 GMT
Not After : Mar 9 02:11:25 2026 GMT
Subject: CN=69a4f1ce-9ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:76:5f:37:6e:da:8e:cb:25:42:df:50:57:
e0:db:93:2e:86:b8:6b:cb:02:ef:f1:e8:fe:a3:c5:
4e:1f:bf:77:50:e3:bd:b3:a6:89:7c:f7:c8:a6:d2:
a4:9c:2e:e9:36:bb:97:a2:42:97:6e:6c:55:44:d6:
66:7f:f6:a2:0a:25:51:8f:c5:f3:8f:93:a8:08:79:
33:3c:8a:cf:de:4a:41:d8:e5:c0:88:6b:b0:13:4c:
e6:02:81:c3:dd:9d:9f:be:f6:b9:23:09:36:3c:59:
94:7b:52:75:6e:db:e5:21:25:0c:0d:28:05:84:7a:
de:6e:f9:4e:1e:65:96:c6:b8:46:27:6f:08:e1:28:
b9:e1:0f:50:7e:e6:20:28:a5:e8:7e:30:eb:ee:c7:
8c:f1:86:c7:8a:32:f2:0f:e4:2e:fd:e5:7e:a5:43:
c4:bc:be:cf:50:42:ac:1a:b8:56:ab:38:1b:b7:20:
7e:44:bc:c9:1e:3f:8b:06:fd:ab:63:66:d1:f2:0e:
3d:96:ef:84:09:e2:9a:23:7f:63:01:29:ed:b2:35:
39:7d:51:73:f7:c8:9c:ce:e2:f9:04:ce:8d:22:30:
13:7f:d1:89:7f:73:11:10:09:d1:d4:fa:22:e9:e9:
75:32:cd:0b:de:9e:5c:81:7b:6d:b4:30:ab:29:55:
42:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:95:FD:73:B7:1E:24:9B:BE:00:40:6C:4B:4B:E0:AE:34:B6:49:D6
X509v3 Authority Key Identifier:
keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:78:17:9a:5f:fb:65:30:ad:f0:db:e0:bb:7c:e1:bc:3b:61:
db:a0:fc:4e:8e:d7:ee:16:fd:e3:ed:8d:1e:39:68:0d:d3:7a:
c7:72:0b:f1:a5:3a:c7:9f:f7:07:1e:02:0b:21:27:f7:11:34:
01:69:f9:c3:9f:a3:9f:ed:bc:a0:74:bd:ee:cb:d0:67:55:48:
64:16:75:f7:ca:5d:1e:97:35:fc:0f:e4:69:6f:52:d7:c8:01:
66:e0:89:2e:d2:dd:ad:31:ce:60:b9:56:fd:e7:a3:bf:04:61:
25:97:f4:1f:e7:92:74:5b:26:08:56:92:b1:8a:29:f2:4a:ef:
1a:2a:d4:e3:86:e9:f9:da:59:26:83:6d:7f:f3:41:7b:98:f5:
e3:92:2a:18:d8:db:13:f5:2d:b9:61:48:b6:b4:44:99:4d:37:
e8:d6:5d:50:a9:a8:3a:47:2c:a7:9d:72:1c:ac:41:dd:1f:70:
92:06:6e:d4:4e:41:4f:87:cf:f1:54:74:c0:43:eb:a0:1e:35:
a8:b4:b7:15:a5:a2:c9:cf:91:36:c8:e8:44:ee:44:f0:30:50:
c4:d0:48:de:ae:c5:59:9e:eb:1c:02:92:c8:63:32:02:a1:53:
9e:75:ef:1c:21:c3:e3:69:27:f9:c0:b5:1c:41:3d:c7:3f:01:
26:ae:a2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:18:43 2026 by rpki-client