
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
File: 1c9c-LTYDyITBPNliOOVYERH93o.mft (raw, json)
Hash identifier: QdSV/fK2s7uaqTcWfuPK70Ps2kzuwd1IhWJBdfgTNe8=
Subject key identifier: F2:B6:BE:EE:75:01:56:9F:B5:C7:EE:B8:6A:FA:46:99:91:3D:F0:6D
Authority key identifier: D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A
Certificate issuer: /CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
Certificate serial: 028F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
Manifest number: 0288
Signing time: Wed 25 Mar 2026 01:11:15 +0000
Manifest this update: Wed 25 Mar 2026 01:11:15 +0000
Manifest next update: Wed 01 Apr 2026 01:11:15 +0000
Files and hashes: 1: 1c9c-LTYDyITBPNliOOVYERH93o.crl (hash: I+RN7Bf3RDfFt3G7DRYanoPDTvdjAmEAK2+WX7JRrvg=)
2: A83E51EC45F611EDBA9D6062C4F9AE02.roa (hash: SogM+aLq7TtnKTXVbg7l5lBGj90QzbOdIzdMdOy5LlU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl
rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655 (0x28f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A5BB, serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
Validity
Not Before: Mar 25 01:11:15 2026 GMT
Not After : Apr 1 01:11:15 2026 GMT
Subject: CN=69c33633-e9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:70:23:61:48:03:cd:58:8e:0e:9a:83:50:90:
08:2f:87:aa:bf:c5:de:b0:e0:af:1c:bf:f0:e2:8a:
d9:7d:e3:e6:6f:1a:52:82:55:a0:66:72:99:9d:4d:
a2:f1:b5:c0:ee:a0:a4:b1:23:bc:b7:e7:28:dc:f7:
06:83:f6:a1:53:78:4d:67:16:2a:07:44:ce:e8:e3:
ff:31:f9:32:09:57:9d:53:0a:2c:f2:da:49:e5:6b:
2c:6f:25:5d:36:67:79:01:9d:0f:02:e0:41:bc:02:
b4:d7:54:49:05:b8:09:11:69:e4:07:a9:0b:69:34:
29:69:2d:43:34:6c:95:a8:09:d5:85:f0:6d:25:63:
5d:b1:3a:d2:96:bb:66:13:7d:f0:72:53:a3:d1:5f:
d8:a5:08:08:11:37:15:d2:f2:14:16:34:a9:0c:48:
b9:1c:7d:a3:8a:cb:5a:6a:bc:05:bb:c9:e7:64:f6:
d4:ff:18:b9:26:0a:e2:0b:2b:c6:73:68:9f:8e:61:
0f:f2:f0:fe:0b:e9:9c:73:d1:cc:30:cf:85:76:6f:
82:87:bc:cb:5e:20:7c:de:7e:85:91:73:f1:ab:16:
fa:a1:7e:66:c3:4b:4a:d1:b8:59:91:2f:21:b7:fa:
05:3e:1b:5a:bc:ce:c9:b5:a6:36:8c:15:69:a5:82:
ee:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B6:BE:EE:75:01:56:9F:B5:C7:EE:B8:6A:FA:46:99:91:3D:F0:6D
X509v3 Authority Key Identifier:
keyid:D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:a9:a6:c1:77:79:b1:f6:c7:63:62:ec:7d:87:70:3d:24:c4:
f7:8f:c9:0c:93:32:6a:0b:8d:4a:9b:7f:6a:b1:d9:c2:dc:59:
2d:22:bd:3b:e1:c7:6d:22:1f:54:9e:09:27:3a:1e:26:9a:f3:
b3:dc:7c:96:ea:31:16:c1:a6:e2:1e:aa:48:60:91:19:f4:f3:
ba:cc:8d:84:47:44:51:2d:8c:f2:7a:85:a1:4e:a4:c6:a4:27:
a4:24:a5:4c:30:b1:30:a8:bc:4a:9e:87:aa:ca:ec:5a:e2:59:
99:9b:fd:9b:cc:36:19:2a:08:5c:0f:b0:0a:d0:51:ce:02:4c:
39:79:51:3c:c7:88:b1:7a:bf:77:b6:56:93:f9:ed:ea:d8:fb:
8d:b5:46:11:3c:5f:b0:66:37:af:2b:38:2b:ca:98:aa:74:ae:
97:a9:a0:2e:7f:db:1d:90:84:2a:2f:d1:83:3f:41:65:ff:68:
69:46:fb:3a:1d:9c:1e:08:6e:62:8b:79:93:16:cb:4d:92:e4:
55:e4:70:37:63:09:f4:e0:fa:28:7c:15:6d:96:7e:18:d3:b7:
1d:3d:9a:6f:18:44:3b:60:08:5d:53:32:bf:43:b4:bd:42:03:
fa:46:12:19:03:47:e6:f7:f7:ec:e4:f2:da:5b:02:f0:dd:d5:
4b:9e:ae:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:23 2026 by rpki-client