
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft
File: SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft (raw, json)
Hash identifier: 6hydawFxJL6BQQ5tOxfiVgfh3Ye2bhWiCyGzGbYolkM=
Subject key identifier: E0:3D:CE:F7:70:6D:9E:EB:2E:4B:C5:A5:9E:9D:29:26:40:6A:91:67
Authority key identifier: 4A:43:89:FE:91:F9:A1:24:C7:76:F8:9B:B2:1E:E0:7C:3E:7E:64:79
Certificate issuer: /CN=A916CDAC/serialNumber=4A4389FE91F9A124C776F89BB21EE07C3E7E6479
Certificate serial: 72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft
Manifest number: 72
Signing time: Sun 19 Apr 2026 07:24:29 +0000
Manifest this update: Sun 19 Apr 2026 07:24:29 +0000
Manifest next update: Sun 26 Apr 2026 07:24:29 +0000
Files and hashes: 1: SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl (hash: p59QocV7i7u3S4jOPJVE6sz3RLg4wNs4jukgMBlnmc8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl
rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CDAC, serialNumber=4A4389FE91F9A124C776F89BB21EE07C3E7E6479
Validity
Not Before: Apr 19 07:24:29 2026 GMT
Not After : Apr 26 07:24:29 2026 GMT
Subject: CN=69e4832d-f760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:86:ba:b1:5a:05:f0:1b:3b:4b:88:33:73:
d2:cc:a4:8b:71:52:d5:a7:b4:55:e7:ef:fc:d1:b2:
46:5d:86:bf:02:aa:a1:03:95:82:49:68:a8:8f:ab:
c3:05:5b:33:74:25:24:16:18:68:58:24:f9:25:38:
82:ee:b9:ee:c8:dc:0e:00:f7:8d:a5:05:f7:cf:fd:
dd:1e:d2:d2:97:00:78:45:e7:3d:57:4b:78:e4:63:
62:16:83:1b:50:b6:9d:4e:61:6c:ad:95:18:2d:0f:
ae:8d:e6:23:51:94:a3:a0:2e:c3:a0:b4:a0:ad:38:
3e:2b:c9:b1:4d:e0:3b:3b:af:b1:22:fc:21:5f:ee:
ed:97:c7:a6:cb:e4:08:3e:a4:b5:fe:24:11:9c:5a:
67:99:37:0a:d4:0e:d1:70:33:0a:f4:74:a5:ce:4a:
40:4d:eb:49:99:1f:b2:c1:c9:f0:b7:62:ea:11:b8:
c2:35:c4:64:6c:85:10:cf:e9:cd:fd:05:d4:4c:8c:
16:c2:5a:42:88:b8:90:6e:98:90:f1:57:ed:19:14:
96:9c:85:74:21:3f:a7:1d:c5:7b:ee:6c:b0:06:4c:
78:5c:00:4c:c8:76:14:f4:9d:7b:0b:f9:c1:0b:33:
40:54:db:10:a8:85:a1:5d:90:3d:3f:88:83:17:f0:
5e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3D:CE:F7:70:6D:9E:EB:2E:4B:C5:A5:9E:9D:29:26:40:6A:91:67
X509v3 Authority Key Identifier:
keyid:4A:43:89:FE:91:F9:A1:24:C7:76:F8:9B:B2:1E:E0:7C:3E:7E:64:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:28:6a:48:d9:9d:fe:00:01:a0:20:51:f8:45:86:45:a7:d4:
f8:aa:33:30:e0:ff:71:24:99:11:54:58:76:16:42:45:f9:a9:
cf:27:12:ce:8b:af:a3:3f:87:6f:7d:f5:40:c9:80:4e:b8:7a:
76:06:e5:70:36:f0:41:89:ec:42:3a:ef:3f:e9:e0:61:6a:41:
6d:5c:5d:51:56:b0:98:29:58:7b:25:d7:cf:4d:2d:4e:45:86:
ab:dd:89:a7:6c:ab:1d:14:61:1b:2e:0e:8b:f4:34:ac:af:8c:
4e:3e:2c:a4:da:af:7e:63:eb:f4:76:84:9f:39:d4:b4:4e:92:
d0:be:7f:9d:b8:2b:1c:35:44:1e:81:02:58:82:0d:f5:a5:5d:
67:7b:7c:25:00:ec:46:86:e3:ae:25:19:56:78:9c:a1:a7:c9:
a2:45:9e:3c:eb:51:6a:9d:d1:31:c7:c1:a2:cb:d3:51:b1:7c:
33:b6:2d:76:d3:12:e4:e8:04:0e:84:ea:f1:84:0b:e4:46:a6:
0b:b9:3a:02:f3:27:68:fe:f4:2c:c5:30:7a:98:ca:8c:2e:68:
56:39:11:1a:41:d0:2c:ee:98:da:1a:ad:64:d0:90:57:e6:0a:
94:88:93:84:43:d5:ee:2d:61:99:af:60:63:cd:e3:07:45:8b:
b0:ab:43:34
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
Q0RBQzExMC8GA1UEBRMoNEE0Mzg5RkU5MUY5QTEyNEM3NzZGODlCQjIxRUUwN0Mz
RTdFNjQ3OTAeFw0yNjA0MTkwNzI0MjlaFw0yNjA0MjYwNzI0MjlaMBgxFjAUBgNV
BAMTDTY5ZTQ4MzJkLWY3NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/C4a6sVoF8Bs7S4gzc9LMpItxUtWntFXn7/zRskZdhr8CqqEDlYJJaKiPq8MF
WzN0JSQWGGhYJPklOILuue7I3A4A942lBffP/d0e0tKXAHhF5z1XS3jkY2IWgxtQ
tp1OYWytlRgtD66N5iNRlKOgLsOgtKCtOD4rybFN4Ds7r7Ei/CFf7u2Xx6bL5Ag+
pLX+JBGcWmeZNwrUDtFwMwr0dKXOSkBN60mZH7LByfC3YuoRuMI1xGRshRDP6c39
BdRMjBbCWkKIuJBumJDxV+0ZFJachXQhP6cdxXvubLAGTHhcAEzIdhT0nXsL+cEL
M0BU2xCohaFdkD0/iIMX8F4JAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4D3O93Bt
nusuS8Wlnp0pJkBqkWcwHwYDVR0jBBgwFoAUSkOJ/pH5oSTHdvibsh7gfD5+ZHkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDREFDLzgyQzBBQTIwOEYz
OTExRjA4NjMyQTAzOUM0RjlBRTAyL1NrT0pfcEg1b1NUSGR2aWJzaDdnZkQ1LVpI
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvU2tPSl9wSDVvU1RIZHZpYnNoN2dmRDUtWkhrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD
REFDLzgyQzBBQTIwOEYzOTExRjA4NjMyQTAzOUM0RjlBRTAyL1NrT0pfcEg1b1NU
SGR2aWJzaDdnZkQ1LVpIay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCzKGpI2Z3+AAGgIFH4RYZFp9T4qjMw4P9xJJkRVFh2FkJF+anPJxLOi6+jP4dv
ffVAyYBOuHp2BuVwNvBBiexCOu8/6eBhakFtXF1RVrCYKVh7JdfPTS1ORYar3Ymn
bKsdFGEbLg6L9DSsr4xOPiyk2q9+Y+v0doSfOdS0TpLQvn+duCscNUQegQJYgg31
pV1ne3wlAOxGhuOuJRlWeJyhp8miRZ4861FqndExx8Giy9NRsXwzti120xLk6AQO
hOrxhAvkRqYLuToC8ydo/vQsxTB6mMqMLmhWOREaQdAs7pjaGq1k0JBX5gqUiJOE
Q9XuLWGZr2BjzeMHRYuwq0M0
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:01:47 2026 by rpki-client