
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
File: CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json)
Hash identifier: 7+KYqo6pDhlp8REmgvHiqwsUwORDqVcHEo/QNFZRseE=
Subject key identifier: BA:F5:76:AA:A5:2F:62:A0:E7:4D:CF:15:DB:34:33:6E:32:0E:73:54
Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F
Certificate issuer: /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
Certificate serial: 010C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
Manifest number: 0109
Signing time: Wed 23 Sep 2026 05:52:33 +0000
Manifest this update: Wed 23 Sep 2026 05:52:33 +0000
Manifest next update: Wed 30 Sep 2026 05:52:33 +0000
Files and hashes: 1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: hf//a/EoDvFC0lTSGEHaL+1Bq66KTQsDlfPECM1eBrg=)
2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: vX3EihROopwpsV3rRJmhMSguNpKACFQ6QBAvo5V5iVg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl
rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:52:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
Validity
Not Before: Sep 23 05:52:33 2026 GMT
Not After : Sep 30 05:52:33 2026 GMT
Subject: CN=6ab36921-8f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:d4:76:2a:81:88:b5:7e:f3:44:45:e7:54:
69:d8:68:63:39:b8:a6:6a:14:83:22:20:3a:f7:61:
aa:db:a8:35:0e:25:f6:01:62:3b:03:92:ca:12:81:
48:fb:99:25:49:d6:42:52:a5:04:b8:69:e6:42:f6:
24:11:88:57:e6:57:64:75:9d:38:96:41:08:11:61:
53:73:64:86:91:85:6e:d4:83:02:5c:3c:e0:19:ee:
b0:ca:d0:91:e5:a6:16:9c:fe:d1:bd:dd:03:24:4b:
59:fe:b2:db:39:ef:1c:35:c6:94:5a:01:83:a9:e9:
ea:25:e4:d7:c1:f0:6d:0f:0e:9a:5a:75:f0:69:d4:
f1:43:6b:43:8a:19:f9:6d:18:78:48:1f:b8:91:80:
32:d6:5c:5c:d9:0a:e0:10:6e:19:fc:8d:17:38:21:
7c:9d:6e:1f:04:3b:50:a5:06:47:d2:db:99:54:f9:
b2:f9:7c:27:a6:90:38:0f:ab:10:c2:4a:d6:d0:42:
d4:22:3b:d1:50:fe:80:95:f3:66:b4:86:d3:a3:90:
a0:0a:d8:a4:46:9c:2e:5b:9c:7a:4d:ed:c2:6e:d9:
a1:41:7b:31:7b:96:30:60:d9:87:9e:7c:dd:bc:11:
c9:9e:df:ed:fa:fd:bf:70:8f:9b:7d:c0:eb:bf:63:
e9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F5:76:AA:A5:2F:62:A0:E7:4D:CF:15:DB:34:33:6E:32:0E:73:54
X509v3 Authority Key Identifier:
keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:65:f4:10:1c:b3:8a:7f:23:af:fb:36:5f:1f:9a:ca:e3:e4:
59:08:c2:98:ec:96:5d:a8:3c:0f:b2:76:53:ec:df:cb:91:e2:
bb:5e:d6:10:ee:bb:57:b9:69:c1:b8:82:cb:2b:b3:ec:0f:20:
5a:4b:0f:73:cb:b1:7b:a4:bc:e4:73:d2:14:e8:2f:1d:2d:46:
cd:6e:29:ac:9a:c5:66:39:55:3a:9c:8b:a2:65:d7:12:9b:8f:
d6:dd:ff:20:5d:fa:01:84:e1:e8:bc:26:41:0a:4c:be:b4:98:
16:aa:7c:b6:ef:61:93:48:bc:8b:1b:4e:61:de:bc:08:11:d0:
a8:6d:12:57:6c:d6:c3:96:7f:ed:3f:c7:d7:26:f9:17:96:8f:
f9:0c:1c:85:d7:1c:fb:bd:0c:2c:1d:f5:91:44:4e:f8:bc:83:
0d:2c:db:7d:c8:88:1e:94:1d:70:51:30:85:79:db:64:94:50:
90:57:30:72:d2:ed:a5:7c:05:9f:aa:10:ac:6c:dd:ef:89:37:
ba:7e:17:1f:0e:a3:a2:92:b9:09:fb:83:d2:b3:33:74:bf:8c:
d2:08:1e:f6:45:08:69:98:fa:ff:39:d9:e2:95:f0:0a:5f:0c:
d7:c5:d3:c4:bd:48:61:3b:73:ab:79:a1:2e:a8:98:03:e5:a7:
63:42:a5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:44:39 2026 by rpki-client