
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json)
Hash identifier: +KQkzIRxPDsdxwyHDtbPXRnVuJLBWb6APnYleUDeenA=
Subject key identifier: 84:58:FC:A6:B7:1F:91:34:05:00:A0:E2:57:2A:C7:0E:12:6A:B2:CD
Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Certificate serial: 057E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
Manifest number: 0572
Signing time: Mon 21 Sep 2026 02:33:39 +0000
Manifest this update: Mon 21 Sep 2026 02:33:38 +0000
Manifest next update: Mon 28 Sep 2026 02:33:38 +0000
Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: 9kyiXESEwXcer5rRAOg4/FUkR/uNthJBkkoXUln/ERc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1406 (0x57e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Validity
Not Before: Sep 21 02:33:38 2026 GMT
Not After : Sep 28 02:33:38 2026 GMT
Subject: CN=6ab09782-a4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c0:b3:88:1d:2c:e8:28:6d:38:cf:4c:e1:6f:
53:20:1d:5b:b6:2a:c1:c9:ee:1e:53:1c:2f:df:bb:
df:32:ba:fd:06:99:30:56:40:12:41:e4:ee:a9:b5:
15:10:b4:43:3f:5a:5a:82:5e:be:dd:c9:53:a3:58:
72:a8:d3:6e:48:09:70:b1:8c:ef:14:ce:ae:12:9c:
4b:b6:dd:d3:8c:81:c4:b1:67:d6:55:55:bd:df:f5:
a9:81:b0:a8:cc:b1:2d:21:8c:f0:19:cd:0b:94:b1:
8c:e2:d5:33:a8:f1:a6:1a:1a:47:bf:aa:1a:b5:c4:
2b:8f:9d:9d:32:31:1a:a6:64:5d:23:f6:f9:44:06:
75:31:6f:39:79:f5:2e:c4:67:5f:72:c4:ca:00:10:
5e:fc:1f:76:41:e2:b7:19:31:e0:8a:f6:0a:f3:55:
aa:d7:7a:10:d7:eb:91:7f:ae:bb:13:9f:d1:a4:b6:
ad:c5:7f:b1:07:91:7d:81:7c:cc:36:7c:be:4e:02:
f7:15:1e:92:49:1f:b0:99:12:36:72:87:1b:82:7c:
12:dd:a1:1e:25:8d:67:af:1d:29:c2:60:67:24:a8:
99:6e:5d:87:bf:3b:6a:f0:b6:c3:6c:58:88:72:14:
5d:81:00:7e:c7:7d:d0:1f:70:b3:8a:88:7c:5d:6d:
c1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:58:FC:A6:B7:1F:91:34:05:00:A0:E2:57:2A:C7:0E:12:6A:B2:CD
X509v3 Authority Key Identifier:
keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:b3:6c:b8:ad:49:01:61:db:f8:00:ac:c7:07:a1:bb:37:1b:
7b:ea:56:57:46:f1:71:10:6c:81:2c:13:21:5c:86:a0:1e:4b:
b3:97:13:4f:7b:6f:b1:4d:fc:0b:9c:d4:82:e2:a5:24:83:46:
ec:ff:99:f9:0c:06:78:f3:2c:31:fe:bd:c3:ac:71:60:e6:15:
b1:1a:ab:bf:6d:1c:09:a0:23:f9:61:bb:08:fc:17:7d:be:94:
42:fd:66:44:89:7c:3f:cb:61:28:f4:d3:12:8b:25:41:8d:87:
b0:18:42:a6:fe:45:f5:46:da:ea:be:08:dd:cd:dc:05:b8:7d:
90:cc:d1:70:81:e9:0f:89:86:90:fa:b2:3b:92:2c:56:89:28:
98:c2:64:26:6e:02:65:73:81:d8:f7:98:23:10:1e:88:d3:3b:
71:ba:34:45:f9:cb:33:4e:97:89:d1:ae:54:bf:3f:8e:0d:55:
81:99:da:f4:34:63:b5:56:c8:b3:ae:68:ab:4b:b5:9a:f1:c4:
63:59:9f:33:58:1d:29:1b:b2:fa:42:3b:20:a9:81:a6:99:bf:
ac:f5:c0:93:c2:66:64:66:23:f8:fa:49:e3:4a:a4:df:3e:50:
94:0a:1e:9e:b0:d2:94:fe:5a:90:eb:77:50:a9:74:40:e8:6c:
f0:69:ea:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:21:58 2026 by rpki-client