
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
File: CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json)
Hash identifier: i/VR+COxJwwzEBIUzGbEm14gwDEPDKoPpU7HYXNJ148=
Subject key identifier: 99:70:7A:79:3F:23:4E:87:E1:28:9B:DD:38:F5:11:6A:FF:03:EA:2D
Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F
Certificate issuer: /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
Manifest number: BB
Signing time: Tue 21 Apr 2026 06:48:05 +0000
Manifest this update: Tue 21 Apr 2026 06:48:04 +0000
Manifest next update: Tue 28 Apr 2026 06:48:04 +0000
Files and hashes: 1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: sEN4gHFUjaL1iGXozdoobey9K7/4dbGW9/LnrPHsRyk=)
2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: vX3EihROopwpsV3rRJmhMSguNpKACFQ6QBAvo5V5iVg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl
rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
Validity
Not Before: Apr 21 06:48:04 2026 GMT
Not After : Apr 28 06:48:04 2026 GMT
Subject: CN=69e71da5-3861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:9d:f8:6d:52:33:99:c9:57:f7:4f:fc:50:
54:80:3b:a8:73:e1:e4:d9:ed:1d:2d:2c:15:bc:8d:
f8:ba:ca:90:52:39:42:53:e4:90:3e:3e:12:56:23:
2f:9d:30:33:a9:07:29:ba:10:63:08:67:b2:7f:d4:
da:3d:61:e7:98:0e:9e:78:37:d6:80:26:5d:d3:fd:
e5:bc:d0:f6:37:6f:0d:f0:3e:43:66:96:6a:3a:3e:
e8:3f:e7:7c:8d:33:ee:f3:96:14:01:44:de:f6:51:
fe:2d:a3:f9:c1:41:82:2a:6f:e1:b4:99:ec:f8:1e:
3e:92:41:ab:c9:3f:32:60:27:8e:a1:c1:6f:d7:c4:
04:b8:d6:66:38:9e:1e:12:f3:cf:69:42:2d:a7:94:
f7:b9:a2:ca:05:66:3a:e7:55:cc:a8:f5:97:e1:f0:
8a:a6:0f:0b:b2:46:90:e3:28:76:31:b4:f9:3b:88:
9c:3b:ac:08:79:ad:53:41:d6:a2:a9:48:5b:0e:f9:
0d:a5:3a:ef:6d:17:9a:d6:68:47:19:c2:1e:8e:2b:
c4:0a:2d:1f:d4:05:ff:9b:ee:3f:65:66:e7:a8:9b:
c7:58:32:de:f3:61:77:01:ad:80:64:9e:0c:4b:a4:
c4:ec:38:63:35:7d:54:ca:fe:49:26:2d:95:f6:9a:
b9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:70:7A:79:3F:23:4E:87:E1:28:9B:DD:38:F5:11:6A:FF:03:EA:2D
X509v3 Authority Key Identifier:
keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:59:f7:03:c4:52:c2:8c:cd:e3:06:5b:bd:6d:3f:23:ec:e7:
b9:d6:bd:df:af:ce:d5:2c:8d:e6:9d:d9:e3:f2:6a:c4:c5:85:
52:31:87:9d:cf:80:1b:58:11:ca:b3:02:e1:74:39:1e:8d:eb:
7f:d3:3d:ac:f3:72:f1:62:e0:57:78:8f:61:61:f7:18:8d:24:
c2:39:95:3b:5a:6a:07:89:25:05:1d:7d:29:ac:ad:53:ad:da:
df:a4:f8:34:77:6c:0d:d1:aa:b1:39:73:c3:ae:ce:1a:53:fb:
6a:5b:4d:68:23:a3:a3:ab:0f:d0:fe:eb:3a:97:ea:ac:66:5c:
2a:02:f0:f0:b8:ab:80:5d:04:45:a7:8f:59:1c:22:49:3a:be:
b3:34:12:c3:d8:e5:ff:21:af:0a:8b:a7:50:99:cf:98:32:76:
eb:4a:4e:cb:e4:8f:f1:f2:c6:87:eb:b6:ac:4d:6a:a1:c3:e2:
98:a9:fc:da:74:66:f5:22:33:a0:1d:37:3f:84:35:e2:95:98:
d3:8f:f9:db:0e:f5:4d:df:4a:ee:9f:bd:4f:59:8c:f8:24:e0:
12:fd:42:9f:82:c1:b4:7b:94:3d:5a:b5:04:49:65:49:5d:6b:
a9:b4:5f:4c:28:44:46:f2:95:8a:ad:9b:da:c7:d9:1d:2d:a8:
96:62:b4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:37:50 2026 by rpki-client