
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
File: CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json)
Hash identifier: VrAneVeHyHvpQfToGN9s90l7j10OajvNl/LzcJ45WhU=
Subject key identifier: 45:34:FB:66:EF:8F:4F:F4:FC:70:29:FA:B4:7E:58:7D:A6:CF:86:93
Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F
Certificate issuer: /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
Manifest number: D5
Signing time: Sat 13 Jun 2026 06:46:49 +0000
Manifest this update: Sat 13 Jun 2026 06:46:49 +0000
Manifest next update: Sat 20 Jun 2026 06:46:49 +0000
Files and hashes: 1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: QIMJR0U671oECXqY8wOLfaCMAVUyzYw1DUvT6+N5SPA=)
2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: vX3EihROopwpsV3rRJmhMSguNpKACFQ6QBAvo5V5iVg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl
rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
Validity
Not Before: Jun 13 06:46:49 2026 GMT
Not After : Jun 20 06:46:49 2026 GMT
Subject: CN=6a2cfcd9-f5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fd:88:03:43:4c:bd:46:64:20:45:7d:b7:03:
47:c2:38:9e:aa:d8:94:f9:eb:1c:27:55:8d:2a:67:
64:94:4c:fd:a2:6f:01:ff:bc:dd:14:a3:45:c1:62:
78:7e:7d:b9:b6:5f:c7:44:f3:5a:7d:8c:79:1a:86:
76:12:78:11:32:bd:d5:ed:e7:96:db:14:27:24:c2:
95:70:3a:b2:dd:21:e9:b3:95:05:d0:55:89:db:70:
90:b6:28:a6:57:77:fb:5b:2b:fd:e1:dc:be:16:b6:
1f:5a:36:17:db:1e:cf:01:6d:b9:37:b5:aa:95:80:
bc:6a:8d:c8:09:3c:cf:50:bd:db:af:4b:6e:b8:5d:
87:8a:bf:db:f5:3c:5f:ef:3e:3a:4b:5a:24:ec:70:
d3:fe:9f:95:65:66:b1:f4:c1:9e:77:c1:83:a4:1f:
23:bd:ee:42:35:c3:5b:35:84:d8:c0:aa:7f:26:4c:
4a:89:f0:94:18:37:29:60:89:b0:6f:d5:8c:de:ef:
93:4a:cf:bc:96:3b:1a:4f:c4:55:2d:24:15:ae:a0:
21:5a:24:71:6f:fd:0b:50:c3:f1:2b:ca:94:80:7a:
db:ae:23:0d:5c:83:0f:26:a2:a8:39:da:46:f2:0d:
39:f3:2f:1f:49:de:cc:65:46:d5:50:e8:3c:d6:ef:
59:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:34:FB:66:EF:8F:4F:F4:FC:70:29:FA:B4:7E:58:7D:A6:CF:86:93
X509v3 Authority Key Identifier:
keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:03:02:cb:ee:8c:c2:40:ae:6f:ae:84:77:63:53:1b:87:0c:
91:05:6c:f9:a4:69:9c:91:a6:15:25:6d:3f:8c:97:87:e8:9f:
a6:3f:42:4f:d9:20:29:2a:24:ed:c1:56:f8:87:23:a0:b5:b0:
93:44:c4:70:e6:72:c6:cb:bf:3f:7b:39:55:79:f3:74:b2:ed:
29:a0:2e:2b:13:5b:ad:bc:11:1c:ed:34:df:8f:82:43:a1:67:
50:6b:5b:fa:79:42:bb:61:6d:83:2e:ec:d0:e2:be:0e:a4:d3:
86:eb:d8:46:a0:e6:41:d3:65:03:3a:30:27:ff:4e:2c:2a:86:
70:33:62:3a:22:c6:d9:40:aa:0f:53:cd:74:f5:f4:30:82:02:
fc:94:2d:2f:bf:4d:f4:cc:d6:6b:05:31:59:a7:ff:21:bb:50:
6f:29:0b:42:5a:e5:0d:9f:cb:53:17:6c:2f:47:9e:b4:d3:dd:
f1:49:4d:ee:03:cf:10:41:ce:2a:37:6b:10:b1:17:9a:1d:28:
e6:90:bf:05:81:93:83:0f:93:03:fd:26:7e:69:66:b5:d5:bf:
dd:79:03:43:18:a9:54:26:24:5a:c9:2d:0a:0c:85:f8:21:13:
ad:06:43:df:f1:fa:4a:bc:c9:8e:0e:6d:44:3c:3e:a6:c3:ad:
46:b7:f0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:25:25 2026 by rpki-client