
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
File: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft (raw, json)
Hash identifier: NP0Ul1tl0Qzx/K+av0vx9slwmkiSNDX6tNDJlmue4Pg=
Subject key identifier: DD:28:39:60:4C:71:F8:6B:29:BE:02:FA:FC:DD:A5:61:47:92:EB:7A
Authority key identifier: 22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A
Certificate issuer: /CN=A91F83DC/serialNumber=224E668F405601CADC3391383FCA96DF9468D95A
Certificate serial: 0199
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
Manifest number: 0190
Signing time: Fri 17 Jul 2026 05:29:17 +0000
Manifest this update: Fri 17 Jul 2026 05:29:16 +0000
Manifest next update: Fri 24 Jul 2026 05:29:16 +0000
Files and hashes: 1: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl (hash: HNKDm+ZVcO6r6F5RuR+Y7eawmKU4WGIG/5RNwj2de9M=)
2: 097951DC271E11EFA1884C2EC4F9AE02.roa (hash: +hujpBHJUbdedQIkPrbVB4NwPgQUBD595iWd0J45vYA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl
rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 05:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F83DC, serialNumber=224E668F405601CADC3391383FCA96DF9468D95A
Validity
Not Before: Jul 17 05:29:16 2026 GMT
Not After : Jul 24 05:29:16 2026 GMT
Subject: CN=6a59bdac-18a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:39:f9:9d:57:a2:3a:4d:23:63:30:e1:c3:6a:
00:cd:85:3d:04:bd:d9:df:b1:53:dc:8f:15:db:2e:
f0:a5:d5:68:3a:9e:e2:ea:2e:7b:dd:10:b1:9d:69:
d9:0b:c8:0b:5f:96:c8:70:3e:60:8b:70:67:49:26:
f2:45:cb:29:06:75:cf:0f:cc:ba:92:2c:8c:5d:61:
bb:38:ca:31:cd:60:59:e9:5a:13:b5:0b:ee:37:8a:
5c:42:10:fa:07:c6:0d:a2:e6:05:47:46:cc:08:4d:
e9:8c:f3:b0:9b:74:6e:ae:5a:57:26:e4:65:a6:bc:
1f:54:1a:86:e0:ad:94:03:93:d8:dd:35:57:5e:cc:
ae:d2:56:7b:79:e4:c7:d3:55:d2:e6:65:de:bb:f1:
59:a2:74:60:40:20:a3:e3:c2:27:f0:16:33:96:43:
18:50:ca:cc:af:6a:c5:73:ba:37:2b:cc:4e:ce:1d:
c1:53:47:c5:6e:f3:33:2c:80:c9:a2:0c:21:06:e1:
6b:d0:dc:27:be:96:08:02:a7:ad:2f:1f:cf:35:70:
6d:cd:56:78:5d:c2:11:b6:c0:9c:a9:90:7e:17:5d:
ab:a5:bb:6e:f9:3c:57:a2:2b:87:20:a3:62:cb:a4:
f8:ff:0c:bf:d0:cd:5a:02:22:f1:f7:57:95:16:66:
9c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:28:39:60:4C:71:F8:6B:29:BE:02:FA:FC:DD:A5:61:47:92:EB:7A
X509v3 Authority Key Identifier:
keyid:22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:f0:c8:ac:92:32:0c:b1:58:43:5b:14:cb:77:77:f6:d3:53:
71:a9:7d:63:9e:bc:3c:0e:b8:18:55:d6:0d:82:35:cb:86:5c:
e7:ad:de:be:5b:05:71:0e:f5:c4:19:30:e6:c2:7a:ed:82:96:
d9:64:e2:51:b8:21:6b:79:0f:17:95:40:e9:13:33:ba:f2:f5:
6d:25:fe:e6:1f:1c:f0:25:6a:95:69:81:cf:fb:da:3a:42:39:
f7:e9:94:18:17:cd:70:e0:63:69:5e:f5:c6:3d:90:e5:25:17:
9a:60:3f:51:4c:32:e3:c7:8c:90:df:5d:68:f2:b9:ba:88:50:
c1:4d:52:3c:07:ec:a2:c9:b4:34:84:f5:ac:e7:52:0a:7b:3e:
8e:95:3d:38:1d:7e:b5:ba:75:99:11:42:45:ff:24:87:aa:4a:
ee:1e:f5:b6:7b:23:06:75:d4:01:be:d0:bd:e2:73:36:35:8c:
e5:c2:bd:e9:3a:ae:83:5e:cd:22:ac:c3:90:35:0b:b1:5f:7e:
73:ad:ff:5d:11:e2:85:af:27:26:54:73:32:b0:0a:21:67:f1:
93:3a:56:16:ee:56:e9:76:3a:bd:57:53:49:9e:b8:18:3d:ca:
ab:41:88:24:ea:3f:34:c1:1b:b1:b8:2f:3a:e6:75:b6:21:29:
b9:0b:62:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgzREMxMTAvBgNVBAUTKDIyNEU2NjhGNDA1NjAxQ0FEQzMzOTEzODNGQ0E5NkRG
OTQ2OEQ5NUEwHhcNMjYwNzE3MDUyOTE2WhcNMjYwNzI0MDUyOTE2WjAYMRYwFAYD
VQQDEw02YTU5YmRhYy0xOGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmjn5nVeiOk0jYzDhw2oAzYU9BL3Z37FT3I8V2y7wpdVoOp7i6i573RCxnWnZ
C8gLX5bIcD5gi3BnSSbyRcspBnXPD8y6kiyMXWG7OMoxzWBZ6VoTtQvuN4pcQhD6
B8YNouYFR0bMCE3pjPOwm3RurlpXJuRlprwfVBqG4K2UA5PY3TVXXsyu0lZ7eeTH
01XS5mXeu/FZonRgQCCj48In8BYzlkMYUMrMr2rFc7o3K8xOzh3BU0fFbvMzLIDJ
ogwhBuFr0NwnvpYIAqetLx/PNXBtzVZ4XcIRtsCcqZB+F12rpbtu+TxXoiuHIKNi
y6T4/wy/0M1aAiLx91eVFmaccQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN0oOWBM
cfhrKb4C+vzdpWFHkut6MB8GA1UdIwQYMBaAFCJOZo9AVgHK3DOROD/Klt+UaNla
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy85OUM3NDg4ODI2
RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9JazVtajBCV0FjcmNNNUU0UDhxVzM1Um8y
Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0lrNW1qMEJXQWNyY001RTRQOHFXMzVSbzJWby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODNEQy85OUM3NDg4ODI2RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9JazVtajBCV0Fj
cmNNNUU0UDhxVzM1Um8yVm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKfDIrJIyDLFYQ1sUy3d39tNTcal9Y568PA64GFXWDYI1y4Zc563evlsFcQ71
xBkw5sJ67YKW2WTiUbgha3kPF5VA6RMzuvL1bSX+5h8c8CVqlWmBz/vaOkI59+mU
GBfNcOBjaV71xj2Q5SUXmmA/UUwy48eMkN9daPK5uohQwU1SPAfsosm0NIT1rOdS
Cns+jpU9OB1+tbp1mRFCRf8kh6pK7h71tnsjBnXUAb7QveJzNjWM5cK96Tqug17N
IqzDkDULsV9+c63/XRHiha8nJlRzMrAKIWfxkzpWFu5W6XY6vVdTSZ64GD3Kq0GI
JOo/NMEbsbgvOuZ1tiEpuQtiDg==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:20 2026 by rpki-client