
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft
File: IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft (raw, json)
Hash identifier: gwbGoWs2huqpYZNdQiawMkpZCMFAP/s8dxALptpRlg4=
Subject key identifier: FF:F1:9B:1C:05:82:BD:D3:96:4A:48:5C:A4:9E:A4:55:46:73:9F:9C
Authority key identifier: 21:93:41:98:E8:33:10:61:D2:75:B8:CF:C7:94:58:D3:2F:AB:D6:C9
Certificate issuer: /CN=A91C53FD/serialNumber=21934198E8331061D275B8CFC79458D32FABD6C9
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft
Manifest number: 0192
Signing time: Sat 13 Jun 2026 04:21:28 +0000
Manifest this update: Sat 13 Jun 2026 04:21:28 +0000
Manifest next update: Sat 20 Jun 2026 04:21:28 +0000
Files and hashes: 1: IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl (hash: f8OvGorZcIEpQhOIkfDyfpHHsgz7ic6F7cvn9F3NDIk=)
2: B15E8BECFF3211EEA8607454C4F9AE02.roa (hash: Y5fEICLeeOhc+g47DjMlbbzmzMJMpxb31hRmWJOjwFo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl
rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C53FD, serialNumber=21934198E8331061D275B8CFC79458D32FABD6C9
Validity
Not Before: Jun 13 04:21:28 2026 GMT
Not After : Jun 20 04:21:28 2026 GMT
Subject: CN=6a2cdac8-26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:aa:c7:26:f7:9d:aa:a6:1d:58:71:ba:5c:9d:
02:b3:93:e6:5b:93:8a:f4:f7:23:40:97:24:ff:c7:
e0:25:e2:01:96:5b:a3:57:d5:7f:a4:d7:9c:01:71:
0f:48:cb:12:3f:7a:7e:37:0a:0c:50:c5:f5:62:07:
10:21:c4:a7:53:77:f3:2c:b6:19:a5:33:02:13:13:
0b:d8:17:f4:8b:87:7f:ee:b7:9b:17:ed:4f:84:b2:
6a:a5:f0:95:9c:ba:ea:0b:33:7d:a9:4f:c3:82:bb:
43:e8:90:a6:7f:aa:16:d0:dd:90:fc:f3:14:01:97:
e5:f5:0a:c6:c7:f9:13:92:3d:cc:af:52:15:68:bb:
84:b0:3e:46:80:95:80:e3:ec:26:a0:5b:f9:5e:b5:
32:7b:03:9a:e1:23:11:7a:6c:45:c1:cb:fd:6d:28:
4c:6f:55:19:bb:7f:6b:c8:04:f2:d6:74:2a:62:1e:
0b:6e:ea:1b:63:c0:a2:5f:e8:05:3b:0f:a2:d4:44:
e6:21:25:ed:26:fa:38:47:fa:ee:5b:9b:f7:3e:25:
bb:14:8c:26:83:4e:ee:71:67:19:21:35:5c:03:58:
21:6b:96:7d:ed:4a:a8:e4:65:9e:34:3b:45:80:a7:
43:d4:6b:ed:e3:e9:38:6a:8a:48:54:d4:5c:c2:ff:
f7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F1:9B:1C:05:82:BD:D3:96:4A:48:5C:A4:9E:A4:55:46:73:9F:9C
X509v3 Authority Key Identifier:
keyid:21:93:41:98:E8:33:10:61:D2:75:B8:CF:C7:94:58:D3:2F:AB:D6:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ea:c6:ef:e9:f6:b6:26:12:85:41:8a:66:79:86:e7:07:aa:
f4:21:30:a2:69:fd:6f:93:2e:80:a7:d8:d6:5d:a5:fe:6e:29:
88:18:8d:e2:52:98:73:b8:65:6f:85:5c:62:a4:65:c4:51:ec:
16:bd:d2:1e:0b:61:d7:aa:74:e5:86:67:e2:46:ed:65:d0:69:
5d:ba:ca:f9:fc:29:aa:1d:6a:22:03:b7:e7:3d:f7:b6:d1:18:
28:1b:e2:c0:20:c3:3e:c6:1c:32:20:ba:ed:ce:cc:ab:6f:75:
67:68:9a:36:6e:fa:30:07:ba:38:c1:c8:ba:6b:75:00:92:8c:
0b:bd:0f:43:3f:6e:f9:d9:d5:ec:4f:19:b5:5d:ea:83:83:b9:
1e:75:37:8e:4f:31:b1:c0:8f:82:9f:ad:99:92:63:19:91:f8:
12:47:22:96:46:52:41:68:c2:c7:22:1c:c1:68:e4:b7:03:c3:
3e:75:1e:07:c7:34:8c:52:31:46:5e:1d:b9:26:a4:0a:b9:ad:
4c:c9:df:f7:bf:c6:ec:7c:cb:bb:0a:e1:f1:da:e4:0b:c9:4f:
96:b8:b1:7c:29:94:8b:24:ee:96:0d:30:76:27:f0:bb:c0:fc:
74:75:a3:2e:3d:b1:87:7d:32:5f:88:e1:0d:30:00:3a:4c:04:
d4:a7:99:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:01:48 2026 by rpki-client