
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
File: CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json)
Hash identifier: sSf97oUy6p165fSA1qbIF0Pqs8Q1VO53QsqZWPIp98c=
Subject key identifier: DE:F0:21:53:1D:B1:7E:B0:42:4F:EA:20:00:99:E3:B8:7E:16:9A:0F
Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F
Certificate issuer: /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
Certificate serial: D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
Manifest number: D1
Signing time: Fri 05 Jun 2026 07:05:04 +0000
Manifest this update: Fri 05 Jun 2026 07:05:04 +0000
Manifest next update: Fri 12 Jun 2026 07:05:04 +0000
Files and hashes: 1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: ffdqSem4YrQqYRMfU2fBIr3bveHDwgGyDvIveP/mh2c=)
2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: vX3EihROopwpsV3rRJmhMSguNpKACFQ6QBAvo5V5iVg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl
rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 07:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
Validity
Not Before: Jun 5 07:05:04 2026 GMT
Not After : Jun 12 07:05:04 2026 GMT
Subject: CN=6a227520-2d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:de:5f:aa:19:41:48:e9:91:a9:34:f5:7b:
8e:e6:6d:20:71:cd:ae:db:69:b8:49:19:af:30:2c:
48:1d:a2:09:d4:a6:36:aa:37:06:b4:9c:c8:6f:2e:
c5:3b:6b:09:e9:18:c4:a1:a9:e9:84:ba:5e:02:fd:
4b:a5:35:97:c2:3c:e7:39:a0:c4:3e:98:d4:db:3c:
7e:56:c4:aa:42:98:1c:c5:87:b2:fb:58:7c:c6:b5:
d3:8d:f1:02:2d:e0:e9:63:6d:6f:14:6a:47:03:08:
e1:1a:56:ad:b6:44:30:e8:6c:9e:08:23:c7:e8:d2:
07:7f:78:82:eb:a5:ad:00:10:36:a2:ae:1f:bc:17:
7e:9b:c6:3c:c2:8d:65:f0:3d:c3:a2:01:9e:5d:eb:
d3:7f:35:fe:43:05:67:8c:fb:ea:10:bf:ab:2b:c2:
2b:93:4a:c4:c7:e8:c3:31:3d:ba:07:dc:b1:cf:8f:
d7:68:9d:a7:d2:4a:9b:bd:ee:c3:22:76:48:38:6a:
78:8d:0d:70:2f:f5:90:6f:d3:cd:a4:35:02:0d:fd:
a8:7e:ae:65:8f:d3:6e:6e:0a:78:80:24:7f:97:70:
12:80:50:c5:f9:bb:6f:84:5f:9e:29:6a:b8:c3:57:
8f:cc:22:aa:57:df:70:0d:97:5e:a9:dd:f3:31:35:
7f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F0:21:53:1D:B1:7E:B0:42:4F:EA:20:00:99:E3:B8:7E:16:9A:0F
X509v3 Authority Key Identifier:
keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:92:44:e4:cf:92:b8:57:be:23:91:d2:f0:d5:ef:69:8b:17:
f6:a5:11:24:8f:39:53:85:31:a8:d0:3b:01:75:81:ee:a6:db:
fc:ac:ed:f7:54:0b:0f:d5:fa:73:40:50:10:5a:ca:e4:2e:a5:
14:71:0b:70:4d:7a:2a:ef:ef:d0:20:06:91:1b:5f:43:c5:06:
1c:25:e9:6c:f0:af:1a:19:5c:d0:9c:c5:d2:bb:42:59:2c:92:
d9:5c:52:dd:4f:71:4a:27:44:da:14:53:2e:9e:9f:98:ca:c9:
03:86:fb:db:5a:84:db:35:76:0b:88:e6:01:c3:56:90:99:d3:
93:ee:c9:8b:6b:30:44:69:29:f8:b0:2d:04:2b:24:d8:d9:77:
81:fb:95:15:5a:fd:ba:21:3b:bd:9c:68:51:fe:89:68:ea:83:
6e:a7:7c:37:5d:c0:2d:42:c2:3c:f8:ee:eb:5e:ba:e8:e1:ba:
89:18:a4:38:fa:ec:c9:a9:92:09:ac:36:77:5c:3c:e8:51:71:
eb:c2:0f:f9:b3:97:7d:54:c3:c5:0a:ca:10:24:74:47:f2:25:
c3:5c:db:67:b9:93:70:79:ed:b1:f5:32:09:c9:e1:74:8c:72:
ab:cb:b8:8b:40:72:3d:95:87:f8:25:58:8e:0a:61:84:2d:f8:
0c:66:f9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:21:30 2026 by rpki-client