
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft
File: IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft (raw, json)
Hash identifier: tnVMGV90wns6OHeh6OpS0r0EibnOvEjIg2MqzGnvTCs=
Subject key identifier: EA:6E:08:BF:71:C5:F9:8A:63:BD:06:53:2A:3D:73:32:03:C4:CF:0D
Authority key identifier: 21:93:41:98:E8:33:10:61:D2:75:B8:CF:C7:94:58:D3:2F:AB:D6:C9
Certificate issuer: /CN=A91C53FD/serialNumber=21934198E8331061D275B8CFC79458D32FABD6C9
Certificate serial: 01B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft
Manifest number: 01AA
Signing time: Mon 27 Jul 2026 05:50:52 +0000
Manifest this update: Mon 27 Jul 2026 05:50:51 +0000
Manifest next update: Mon 03 Aug 2026 05:50:51 +0000
Files and hashes: 1: IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl (hash: +ylmP3ADhXYHoJpOLlcgWeB1XGmopsiliL2kH7Rl1RI=)
2: B15E8BECFF3211EEA8607454C4F9AE02.roa (hash: L0M83R15EvxuSf1jDp04uRVhbAU3t/uCIwmIug3ad70=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl
rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C53FD, serialNumber=21934198E8331061D275B8CFC79458D32FABD6C9
Validity
Not Before: Jul 27 05:50:51 2026 GMT
Not After : Aug 3 05:50:51 2026 GMT
Subject: CN=6a66f1bc-b992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:5b:ea:e9:6f:96:b9:2a:d8:8b:99:84:16:
40:5d:87:cd:4f:51:14:3d:c4:e9:9b:08:0e:b5:e9:
bf:ed:da:04:33:9d:8f:64:38:f2:e7:4b:89:4d:42:
85:bb:ee:ed:6d:e4:68:c5:24:00:01:bc:64:5a:93:
b1:c7:3a:34:12:a4:3b:f9:af:51:fc:6d:db:31:11:
5c:1c:77:34:cc:87:58:97:f7:0b:18:50:a4:6a:ab:
dc:ab:b9:08:eb:cd:cb:9e:5c:4c:ba:44:89:66:d8:
5c:d2:fe:ac:8d:7c:36:07:30:79:dd:59:87:ee:51:
ab:a8:fc:7b:a7:21:0e:45:b0:7b:d3:db:12:28:6f:
83:7e:de:53:04:d7:22:fe:ec:b1:a5:a8:f2:6c:a0:
af:95:e2:78:da:8f:c7:14:05:e3:6e:72:ed:6c:50:
78:59:e0:18:13:55:f3:03:10:64:c2:5e:cf:bd:cb:
95:04:c8:f5:a1:de:7d:84:39:89:c0:b1:1e:fb:2e:
f2:74:7b:f8:65:4d:3a:77:cc:c0:8f:29:d3:a8:0b:
d8:96:ba:bf:0b:15:37:c4:c1:a4:1f:b7:53:a1:f8:
12:aa:a3:c1:8a:8c:8a:87:41:dd:d8:6a:2c:07:7e:
3a:c6:19:66:d4:c9:78:45:fe:95:b9:33:d6:2d:31:
c5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6E:08:BF:71:C5:F9:8A:63:BD:06:53:2A:3D:73:32:03:C4:CF:0D
X509v3 Authority Key Identifier:
keyid:21:93:41:98:E8:33:10:61:D2:75:B8:CF:C7:94:58:D3:2F:AB:D6:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f6:f7:ee:6f:5f:a4:fc:f3:e1:6c:6c:3a:ca:4a:b3:7e:5d:
ec:c2:a6:9c:d1:c6:b9:cc:40:a0:0a:a3:35:09:cb:da:55:9c:
a0:51:e3:66:73:7d:cb:15:8d:1e:04:f5:57:32:08:cb:2a:80:
21:7b:93:de:4b:8e:8b:43:41:5d:ce:0a:9f:bf:56:ee:f3:f4:
7e:de:ef:47:58:9a:0b:b1:c9:0d:ab:64:12:5a:b6:1c:24:25:
06:c5:4b:fa:01:9a:92:ba:78:3b:ef:de:a7:5c:54:b2:ee:17:
f3:38:74:56:b6:9e:bc:79:97:87:69:b1:ef:46:7e:98:6f:da:
f9:68:16:6e:11:9d:ee:93:ab:d3:af:48:32:81:11:f5:bb:aa:
d7:5b:1a:a1:44:58:b0:e4:a7:47:59:f0:db:8e:de:97:90:ad:
93:02:50:2f:87:83:78:92:ab:79:b0:69:d0:15:a7:d9:22:50:
93:c4:a0:17:19:18:59:b6:29:f7:84:e1:5b:c5:23:8d:4a:9a:
d6:98:93:b9:86:b3:08:f7:bb:77:97:56:f9:a0:85:84:c7:23:
cb:34:f1:6b:02:f5:e2:fe:e5:b4:b4:d6:cb:f0:86:9d:8f:c2:
47:69:53:a8:f0:d4:9d:a5:3c:08:7c:4c:21:dc:bc:80:5b:d3:
e1:6d:29:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzUzRkQxMTAvBgNVBAUTKDIxOTM0MTk4RTgzMzEwNjFEMjc1QjhDRkM3OTQ1OEQz
MkZBQkQ2QzkwHhcNMjYwNzI3MDU1MDUxWhcNMjYwODAzMDU1MDUxWjAYMRYwFAYD
VQQDEw02YTY2ZjFiYy1iOTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsYVb6ulvlrkq2IuZhBZAXYfNT1EUPcTpmwgOtem/7doEM52PZDjy50uJTUKF
u+7tbeRoxSQAAbxkWpOxxzo0EqQ7+a9R/G3bMRFcHHc0zIdYl/cLGFCkaqvcq7kI
683LnlxMukSJZthc0v6sjXw2BzB53VmH7lGrqPx7pyEORbB709sSKG+Dft5TBNci
/uyxpajybKCvleJ42o/HFAXjbnLtbFB4WeAYE1XzAxBkwl7PvcuVBMj1od59hDmJ
wLEe+y7ydHv4ZU06d8zAjynTqAvYlrq/CxU3xMGkH7dTofgSqqPBioyKh0Hd2Gos
B346xhlm1Ml4Rf6VuTPWLTHFZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOpuCL9x
xfmKY70GUyo9czIDxM8NMB8GA1UdIwQYMBaAFCGTQZjoMxBh0nW4z8eUWNMvq9bJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTNGRC82ODhFNTdFRUZG
MzIxMUVFQTU1RDhFNTNDNEY5QUUwMi9JWk5CbU9nekVHSFNkYmpQeDVSWTB5LXIx
c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0laTkJtT2d6RUdIU2RialB4NVJZMHktcjFzay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NTNGRC82ODhFNTdFRUZGMzIxMUVFQTU1RDhFNTNDNEY5QUUwMi9JWk5CbU9nekVH
SFNkYmpQeDVSWTB5LXIxc2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXPb37m9fpPzz4WxsOspKs35d7MKmnNHGucxAoAqjNQnL2lWcoFHjZnN9yxWN
HgT1VzIIyyqAIXuT3kuOi0NBXc4Kn79W7vP0ft7vR1iaC7HJDatkElq2HCQlBsVL
+gGakrp4O+/ep1xUsu4X8zh0VraevHmXh2mx70Z+mG/a+WgWbhGd7pOr069IMoER
9buq11saoURYsOSnR1nw247el5CtkwJQL4eDeJKrebBp0BWn2SJQk8SgFxkYWbYp
94ThW8UjjUqa1piTuYazCPe7d5dW+aCFhMcjyzTxawL14v7ltLTWy/CGnY/CR2lT
qPDUnaU8CHxMIdy8gFvT4W0p4A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:16:23 2026 by rpki-client