
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft
File: IKFf0591NMenolMf7YtaFwipP1I.mft (raw, json)
Hash identifier: oRHIWl7CWVQNo2fTaWTj09tn95OKowY7qN07ONIcE6I=
Subject key identifier: 16:0E:C3:EF:C1:A2:E8:F6:A2:8B:40:74:1E:1E:D1:F2:CB:79:A1:BA
Authority key identifier: 20:A1:5F:D3:9F:75:34:C7:A7:A2:53:1F:ED:8B:5A:17:08:A9:3F:52
Certificate issuer: /CN=A9191BBE/serialNumber=20A15FD39F7534C7A7A2531FED8B5A1708A93F52
Certificate serial: 13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft
Manifest number: 10
Signing time: Thu 11 Jun 2026 11:26:32 +0000
Manifest this update: Thu 11 Jun 2026 11:26:32 +0000
Manifest next update: Thu 18 Jun 2026 11:26:32 +0000
Files and hashes: 1: IKFf0591NMenolMf7YtaFwipP1I.crl (hash: 3WAgrTAVqpMCKbqzRi8n2EgsTZVYDyZYU6L5pzbLh2s=)
2: 01A09AD4529A11F1B2F4C97190833773.roa (hash: LeQAKpSHZPhzl/yDoMV2G62pZQxQb0sxO6TIaMOgO10=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.crl
rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 11:26:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191BBE, serialNumber=20A15FD39F7534C7A7A2531FED8B5A1708A93F52
Validity
Not Before: Jun 11 11:26:32 2026 GMT
Not After : Jun 18 11:26:32 2026 GMT
Subject: CN=6a2a9b68-7a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:da:99:37:40:bd:26:47:fc:91:80:94:6d:ac:
5f:ff:7a:51:16:47:85:44:00:85:f8:59:89:3e:2a:
22:0a:b0:33:43:5b:b7:ea:18:48:42:b4:8d:9d:35:
c9:4c:74:78:b8:04:cb:24:c5:df:1a:4a:1b:08:59:
7e:08:89:8d:54:7f:a5:b8:ae:30:66:96:fa:74:2c:
fd:5e:bc:95:81:f2:86:cb:c1:5f:fd:bd:47:94:9a:
4d:f8:7d:05:0c:94:24:28:18:b3:01:64:56:a7:c4:
f0:44:4d:1f:85:e4:34:f3:d6:92:20:90:48:f6:8d:
92:29:0c:40:c7:0c:2c:7a:af:5d:9a:b1:0f:84:7a:
ff:2e:88:09:68:7a:5b:b7:0f:bc:77:5f:1c:3e:be:
19:c7:5c:2e:64:c1:3a:0c:8b:b8:93:b1:94:3d:dc:
3f:2c:25:85:ec:c1:91:32:a9:ec:20:6d:e5:79:b7:
ed:25:c8:c9:1c:46:bc:b5:1e:3b:4f:3e:df:64:b0:
71:41:ea:59:7d:4e:f5:fc:22:20:92:3b:3d:38:72:
82:c3:b6:c5:11:5e:9f:d3:b3:86:34:ed:2a:5d:89:
9a:92:bc:35:9c:96:4c:fc:97:42:64:82:1f:4b:ee:
0e:29:24:dd:00:8f:f6:72:0d:6a:55:db:c4:34:a1:
e6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0E:C3:EF:C1:A2:E8:F6:A2:8B:40:74:1E:1E:D1:F2:CB:79:A1:BA
X509v3 Authority Key Identifier:
keyid:20:A1:5F:D3:9F:75:34:C7:A7:A2:53:1F:ED:8B:5A:17:08:A9:3F:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:88:00:67:1f:23:12:13:9e:4b:a1:8a:91:7c:0d:7f:4a:a3:
52:c2:87:45:d5:1f:21:c7:fd:6f:ac:fe:86:8a:7f:21:5e:ea:
29:0e:d3:91:93:68:13:04:b1:ef:69:ba:af:ed:99:9c:21:15:
50:78:87:59:53:0e:38:4d:1b:c3:df:c1:b6:84:1f:fa:96:cc:
2e:27:6c:ea:c6:e9:a2:da:52:82:1a:47:9c:71:cd:37:76:e0:
e1:3b:eb:64:77:54:a2:8f:4f:3d:2b:64:9b:98:99:ee:13:76:
ae:c8:5c:f9:54:f6:1a:0a:c6:f0:11:47:15:40:7c:ba:22:57:
c4:e7:47:35:82:7c:db:8f:26:7b:2a:c5:27:6e:72:e7:b1:9e:
09:bc:da:93:75:84:c3:6e:07:07:11:7f:03:88:81:48:f9:0a:
37:84:8a:87:f7:8f:fc:8a:d1:bd:7c:a3:a2:f7:e9:6b:23:8e:
01:7d:db:e3:de:62:7e:39:fa:18:82:09:f5:ab:a5:da:cf:24:
8f:ef:ea:a4:52:17:bf:82:cb:eb:8b:02:e6:ae:34:60:4e:86:
29:e8:29:53:eb:87:a9:f3:78:32:ee:08:e1:be:88:2b:70:62:
89:1f:db:7c:27:ee:de:8f:24:e5:2b:25:ff:fc:2e:2c:7e:9b:
2a:24:1b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:08:56 2026 by rpki-client