
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
File: CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json)
Hash identifier: w2nAn7VSKpMztbuPjtbHpsamJqod1kbX5HSPNQEjPk4=
Subject key identifier: DA:EE:D5:55:E9:2B:B5:5A:FC:21:F2:68:D9:B1:D8:55:FE:14:EE:18
Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F
Certificate issuer: /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
Certificate serial: BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
Manifest number: B9
Signing time: Fri 17 Apr 2026 06:44:40 +0000
Manifest this update: Fri 17 Apr 2026 06:44:39 +0000
Manifest next update: Fri 24 Apr 2026 06:44:39 +0000
Files and hashes: 1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: xD8/wRa1UOCVgYq7J4cvaSnBN8ghngh9tVjkg11WH9E=)
2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: vX3EihROopwpsV3rRJmhMSguNpKACFQ6QBAvo5V5iVg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl
rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:44:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
Validity
Not Before: Apr 17 06:44:39 2026 GMT
Not After : Apr 24 06:44:39 2026 GMT
Subject: CN=69e1d6d7-0022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cb:49:c7:d0:90:69:fd:63:79:26:64:c5:25:
d9:3e:5a:74:34:4a:a4:94:26:8a:a7:be:0b:14:ce:
90:db:6f:3e:df:a9:bb:c6:27:f5:a2:64:04:74:25:
c0:e0:e4:12:77:1b:09:43:01:a6:9c:37:4d:ed:89:
0d:a7:90:f1:15:5a:d2:70:2a:d4:bc:96:83:c9:c5:
a1:09:0f:42:f4:27:2a:e2:52:bf:f6:a3:7c:15:38:
1b:c1:79:c1:23:05:3d:23:a9:a4:f8:a2:67:0f:aa:
79:ad:0d:af:bb:0a:b1:a3:00:4c:b5:27:10:dc:bd:
8b:88:47:63:99:ec:4c:e0:d5:69:01:3e:f4:bc:e1:
6b:72:e3:cc:0d:86:3b:57:18:2e:23:44:e6:0e:37:
6a:78:23:18:8e:11:01:7c:dd:8c:2f:7b:11:87:90:
cf:c7:46:ad:57:35:75:27:c2:a1:b3:2a:00:c7:92:
98:e4:cf:42:b9:5f:5f:8e:bb:f3:5c:47:99:bf:e9:
f5:3e:03:59:61:26:2c:e0:c7:6c:e1:60:e6:11:c5:
2e:e8:13:fe:83:b7:ba:2b:92:2d:3a:8e:21:54:c8:
e7:ff:8f:2a:6e:10:6c:85:d4:58:0f:39:19:ae:5d:
46:e3:5b:2a:59:ea:6e:d0:77:9e:4e:17:7c:b9:25:
26:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EE:D5:55:E9:2B:B5:5A:FC:21:F2:68:D9:B1:D8:55:FE:14:EE:18
X509v3 Authority Key Identifier:
keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:82:e0:45:14:e0:22:06:d8:0c:65:0f:09:15:1e:28:56:76:
fa:6e:63:ac:e8:5d:3a:b2:30:eb:c2:31:f1:66:80:03:9e:74:
50:db:c6:90:92:2e:9b:f2:44:b1:31:c2:b7:df:08:59:c7:db:
e1:e0:21:1d:15:ea:73:4e:c1:b6:d6:62:61:ce:94:d1:0f:67:
63:99:53:8a:c2:65:1e:c7:f2:19:55:c3:74:42:d1:5b:2d:bc:
43:8b:1a:f0:76:6d:7e:30:60:92:b3:f7:93:48:96:ba:24:5c:
ee:31:c4:6d:60:0c:c1:96:f7:92:e1:fe:bd:a7:6a:cf:10:61:
eb:95:48:e4:fa:df:a8:38:b0:80:4c:5c:68:f7:4c:f5:1f:1c:
83:20:8c:c7:e6:49:cd:3c:b9:5c:56:35:e7:bd:57:fe:2f:f6:
8c:63:26:e0:7a:36:4f:7d:dc:c9:69:fa:bd:c9:cb:a2:fa:5f:
03:f0:af:9a:e6:36:0d:1d:d5:ea:02:1c:60:5e:73:e1:d5:4c:
13:db:82:45:22:57:a2:11:2a:9b:cf:ec:de:88:1c:d0:a7:89:
16:6b:49:33:09:b5:67:e3:aa:46:ab:70:d7:8e:56:ad:9a:b0:
49:1d:85:c1:7c:a1:7d:1d:c6:ad:ff:e8:dd:dd:c3:2c:53:55:
7b:0c:6d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:48:25 2026 by rpki-client