
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft
File: IKFf0591NMenolMf7YtaFwipP1I.mft (raw, json)
Hash identifier: RRlRfheoSGtx+aZeWKJc9bRoTcwI/R9JvsoDwJ1D5PA=
Subject key identifier: D5:64:8A:03:7C:5B:BD:F8:C0:A6:B1:1A:EC:95:8D:DF:ED:AE:05:7D
Authority key identifier: 20:A1:5F:D3:9F:75:34:C7:A7:A2:53:1F:ED:8B:5A:17:08:A9:3F:52
Certificate issuer: /CN=A9191BBE/serialNumber=20A15FD39F7534C7A7A2531FED8B5A1708A93F52
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft
Manifest number: 24
Signing time: Thu 23 Jul 2026 10:55:31 +0000
Manifest this update: Thu 23 Jul 2026 10:55:30 +0000
Manifest next update: Thu 30 Jul 2026 10:55:30 +0000
Files and hashes: 1: IKFf0591NMenolMf7YtaFwipP1I.crl (hash: RlsZA7H5y+VCTefOUjoHrJOQqRc9kzaGx/c/eK+nbYw=)
2: 01A09AD4529A11F1B2F4C97190833773.roa (hash: LeQAKpSHZPhzl/yDoMV2G62pZQxQb0sxO6TIaMOgO10=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.crl
rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:55:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191BBE, serialNumber=20A15FD39F7534C7A7A2531FED8B5A1708A93F52
Validity
Not Before: Jul 23 10:55:30 2026 GMT
Not After : Jul 30 10:55:30 2026 GMT
Subject: CN=6a61f323-a7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e9:2e:65:f2:85:68:4d:88:75:41:0c:1a:39:
d0:96:53:5f:7c:b2:15:1b:9c:03:d0:ba:cf:a2:86:
83:fc:6a:82:ac:57:3a:d5:75:1d:50:98:73:a8:ec:
1d:44:c4:f9:4c:40:35:36:43:b4:76:1e:dd:65:26:
e4:aa:3a:dd:86:42:18:9d:e1:27:32:07:43:d2:76:
7d:c8:2d:39:53:d2:c3:64:a6:fc:a5:55:ce:f5:b1:
0e:09:5b:3e:10:91:a2:7f:9f:c7:37:ec:75:a0:2f:
5e:10:27:79:0c:b2:fa:5a:f9:31:94:10:6e:13:71:
06:37:60:8c:37:7b:69:35:de:87:17:39:a0:10:0d:
66:ac:3d:b6:de:04:35:f7:34:df:6d:3a:c9:62:92:
30:9c:e3:a7:7d:fb:0e:12:76:67:02:3f:72:e5:06:
11:ee:e6:16:4c:f8:62:be:7e:68:71:9b:6d:6f:5b:
91:dd:87:71:a7:1c:f0:13:c8:90:9d:b8:92:16:4f:
eb:0f:fd:03:75:3d:a3:f7:a8:09:37:b6:12:c4:1d:
2d:3e:32:3b:7d:cb:3b:c2:b7:17:d1:2d:0d:ea:1b:
91:b1:ec:1c:fa:62:d5:fd:00:a2:b1:aa:3d:1e:32:
39:f7:ea:64:87:98:bb:9b:fe:21:c6:38:7d:98:c1:
b4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:64:8A:03:7C:5B:BD:F8:C0:A6:B1:1A:EC:95:8D:DF:ED:AE:05:7D
X509v3 Authority Key Identifier:
keyid:20:A1:5F:D3:9F:75:34:C7:A7:A2:53:1F:ED:8B:5A:17:08:A9:3F:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:c9:9d:d6:5d:4b:43:5c:e9:b7:92:c2:64:aa:f1:5b:8f:b4:
8f:90:e0:da:71:58:ff:b9:79:36:86:a7:bb:6a:25:96:04:78:
06:fc:e6:62:82:42:18:0b:e2:7a:b8:5e:ec:1c:b8:56:9e:aa:
18:e0:b6:f9:a8:c9:09:16:17:e0:e8:7d:41:56:d8:6c:30:ce:
6d:0f:c1:30:35:92:51:46:5d:10:50:d3:80:a2:bf:91:c7:e0:
7e:4d:1a:7a:32:fb:54:18:36:5c:e4:0c:e9:e0:ad:a5:0d:2a:
bc:be:87:e9:f9:4f:24:1e:af:8c:98:39:c5:f8:18:3d:5b:5f:
f5:8a:28:c2:20:e2:a6:9c:d8:58:d8:70:de:27:70:bc:be:cd:
7d:9a:19:72:8d:52:d0:c3:3f:19:cc:b8:66:bf:6f:87:2d:47:
0a:4f:a8:d8:6d:a6:81:f4:15:24:eb:dc:99:61:88:72:e4:a2:
b7:6c:ea:d4:b5:96:1b:bf:eb:81:d1:89:26:48:9f:de:b9:9c:
e6:cc:00:a8:ac:02:58:d1:fc:20:fc:56:1d:e3:29:4a:49:92:
fa:29:b2:58:bb:7a:41:7b:1d:b3:03:7e:a7:48:d4:f3:7e:67:
97:8b:21:06:f2:4b:0b:9f:9d:aa:d2:d2:e7:01:f8:73:a9:3b:
65:e2:c0:82
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MUJCRTExMC8GA1UEBRMoMjBBMTVGRDM5Rjc1MzRDN0E3QTI1MzFGRUQ4QjVBMTcw
OEE5M0Y1MjAeFw0yNjA3MjMxMDU1MzBaFw0yNjA3MzAxMDU1MzBaMBgxFjAUBgNV
BAMTDTZhNjFmMzIzLWE3YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCs6S5l8oVoTYh1QQwaOdCWU198shUbnAPQus+ihoP8aoKsVzrVdR1QmHOo7B1E
xPlMQDU2Q7R2Ht1lJuSqOt2GQhid4ScyB0PSdn3ILTlT0sNkpvylVc71sQ4JWz4Q
kaJ/n8c37HWgL14QJ3kMsvpa+TGUEG4TcQY3YIw3e2k13ocXOaAQDWasPbbeBDX3
NN9tOslikjCc46d9+w4SdmcCP3LlBhHu5hZM+GK+fmhxm21vW5Hdh3GnHPATyJCd
uJIWT+sP/QN1PaP3qAk3thLEHS0+Mjt9yzvCtxfRLQ3qG5Gx7Bz6YtX9AKKxqj0e
Mjn36mSHmLub/iHGOH2YwbSbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1WSKA3xb
vfjAprEa7JWN3+2uBX0wHwYDVR0jBBgwFoAUIKFf0591NMenolMf7YtaFwipP1Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxQkJFL0I3Qjk4RkFDNTI5
OTExRjE4OTkxMTkzRDkwODMzNzczL0lLRmYwNTkxTk1lbm9sTWY3WXRhRndpcFAx
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSUtGZjA1OTFOTWVub2xNZjdZdGFGd2lwUDFJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx
QkJFL0I3Qjk4RkFDNTI5OTExRjE4OTkxMTkzRDkwODMzNzczL0lLRmYwNTkxTk1l
bm9sTWY3WXRhRndpcFAxSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAiyZ3WXUtDXOm3ksJkqvFbj7SPkODacVj/uXk2hqe7aiWWBHgG/OZigkIYC+J6
uF7sHLhWnqoY4Lb5qMkJFhfg6H1BVthsMM5tD8EwNZJRRl0QUNOAor+Rx+B+TRp6
MvtUGDZc5Azp4K2lDSq8vofp+U8kHq+MmDnF+Bg9W1/1iijCIOKmnNhY2HDeJ3C8
vs19mhlyjVLQwz8ZzLhmv2+HLUcKT6jYbaaB9BUk69yZYYhy5KK3bOrUtZYbv+uB
0YkmSJ/euZzmzACorAJY0fwg/FYd4ylKSZL6KbJYu3pBex2zA36nSNTzfmeXiyEG
8ksLn52q0tLnAfhzqTtl4sCC
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:41 2026 by rpki-client