
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
File: Ska_UrGTBkf9JbeWkm28YUBL4-0.mft (raw, json)
Hash identifier: OCC8YnuY/oI6Cslm8F18nVOoFo1D3JKYohP/vqCLEaY=
Subject key identifier: FA:70:1A:D0:23:52:25:37:5B:15:AF:43:E5:EF:5D:AB:0B:8B:CF:93
Authority key identifier: 4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED
Certificate issuer: /CN=A91A8859/serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED
Certificate serial: 0CDC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
Manifest number: 0CD3
Signing time: Sat 28 Feb 2026 18:25:28 +0000
Manifest this update: Sat 28 Feb 2026 18:25:28 +0000
Manifest next update: Sat 07 Mar 2026 18:25:28 +0000
Files and hashes: 1: Ska_UrGTBkf9JbeWkm28YUBL4-0.crl (hash: /0UtCwZKKfkpydMqT4PQoESezRfCn7pKPrH+2Xewhds=)
2: 692ABA5A09DF11EAA6052433C4F9AE02.roa (hash: z7dztQ7DzZdRFdx//UJE1q/09aVt1ANcyFecIWkHGQk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.crl
rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:25:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3292 (0xcdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8859, serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED
Validity
Not Before: Feb 28 18:25:28 2026 GMT
Not After : Mar 7 18:25:28 2026 GMT
Subject: CN=69a33318-4397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:58:3f:88:7c:fb:6f:06:c2:37:32:42:98:39:
cf:4f:76:a8:e8:17:4d:2e:11:c5:72:4d:00:df:f1:
a7:89:ed:33:59:ed:e6:9d:22:66:c1:4c:36:dd:ab:
91:a5:c2:aa:6d:c9:57:26:91:d2:12:33:41:44:b6:
05:6e:da:25:bf:89:a6:54:1d:73:bb:bd:42:c1:4d:
8e:8e:e0:eb:9a:fb:f4:90:40:55:68:75:f8:2c:a0:
c0:5c:85:3e:8f:2b:87:bb:bb:3e:2d:34:65:ba:22:
e8:cb:f1:31:27:24:9e:a7:33:ad:59:65:22:d4:ad:
3c:03:c8:52:c4:66:ab:dd:cc:11:91:20:6d:ac:6a:
93:2c:3a:a8:08:ec:9e:0e:28:17:6e:1a:21:f8:ac:
fb:bb:dd:2a:22:18:7d:e1:a1:2e:dd:09:70:7a:b0:
5d:b0:2e:bd:b3:f5:d2:23:17:52:6f:9d:b3:1c:06:
e2:ea:ae:c1:63:e8:43:a2:a4:db:50:3e:c0:07:6d:
b5:bb:d0:5f:c4:0b:c1:03:29:c7:0d:c3:b9:1a:00:
e9:7b:87:1c:84:01:54:22:69:40:81:08:32:6c:d0:
c8:54:69:60:3a:b3:4c:1b:95:63:8d:2f:da:60:37:
10:93:c1:07:99:cd:c7:0f:ba:2d:4d:ac:d8:90:c6:
e3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:70:1A:D0:23:52:25:37:5B:15:AF:43:E5:EF:5D:AB:0B:8B:CF:93
X509v3 Authority Key Identifier:
keyid:4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:b8:08:f1:4e:5b:50:49:0a:3c:57:50:11:36:3b:5d:2c:e9:
9a:3f:bc:06:88:1d:59:e9:09:9d:56:ec:16:fe:d3:7d:53:f5:
77:6c:f8:8c:39:cf:47:84:38:70:74:8b:b1:b5:b5:ba:ce:00:
bb:91:bd:38:94:7b:70:4a:b1:21:d6:66:2b:19:ea:4e:ef:60:
6e:50:2f:05:4b:d4:be:dd:48:4f:e2:c0:6e:4c:86:63:54:99:
63:b1:e1:bf:08:cd:f0:40:e4:1d:4b:4e:23:50:6c:6c:52:8c:
6a:80:f8:60:30:5d:d2:38:45:16:50:22:91:df:4c:d3:0e:2a:
45:0b:93:8f:bc:4c:d4:1b:13:06:71:05:7e:4d:49:8e:2b:00:
cb:a8:a5:91:d8:80:f9:88:31:ca:b1:c9:96:3a:a8:2d:2c:b4:
ba:a3:27:61:a6:46:97:c2:62:e6:bf:e7:2e:28:22:df:59:6f:
07:73:a7:8f:19:16:c5:f5:fb:d7:55:20:6c:67:83:8b:74:84:
37:b3:23:c1:c1:d1:da:6b:63:a6:f7:17:67:8c:dc:7c:e7:9d:
b9:3b:a1:4e:ba:a6:0e:59:d8:b9:d5:20:9b:bb:5c:0f:72:49:
1a:27:56:8c:98:cb:22:4d:84:73:ff:e6:b8:06:e3:5b:29:b3:
2f:aa:b2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:55:30 2026 by rpki-client