
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft
File: ck4fZGxFGwGeHNo21DRq25tf2_g.mft (raw, json)
Hash identifier: JpLxELIaTQeN+CoJ7MmfjQsSfraJ4DDu26PbgDtFZUU=
Subject key identifier: 6C:8A:36:0B:8D:A5:39:22:83:E9:AF:A6:01:8C:2F:9C:86:FD:84:E2
Authority key identifier: 72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8
Certificate issuer: /CN=A91B8E38/serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8
Certificate serial: 02C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft
Manifest number: 02BA
Signing time: Sat 13 Jun 2026 01:24:22 +0000
Manifest this update: Sat 13 Jun 2026 01:24:21 +0000
Manifest next update: Sat 20 Jun 2026 01:24:21 +0000
Files and hashes: 1: ck4fZGxFGwGeHNo21DRq25tf2_g.crl (hash: nFMFExIadIoZsuVH4I31Go9+uxLde02TVoutNc6hKUE=)
2: A6789038400211ED808CCF0DC4F9AE02.roa (hash: /OmusQFGUMLnSfPvaQeL+Y1Ye83OM/m03GrlGqmFNO4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl
rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 708 (0x2c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8E38, serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8
Validity
Not Before: Jun 13 01:24:21 2026 GMT
Not After : Jun 20 01:24:21 2026 GMT
Subject: CN=6a2cb146-e3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:64:fb:4b:96:82:4c:9c:1f:58:6f:12:f3:2e:
af:d6:7f:ef:ba:ba:06:5f:66:a2:2c:1b:46:db:5e:
ba:36:3f:a6:84:b6:6e:65:13:3c:e7:b0:1f:23:ef:
ae:02:5a:1b:5b:b2:25:f8:66:7c:12:ce:51:ba:c3:
17:31:05:9c:13:99:ae:2c:32:2a:e1:71:bc:07:00:
64:2f:18:5f:54:25:5a:01:93:a5:02:06:d5:8d:51:
84:78:f9:09:8a:e0:18:3c:72:ee:2a:19:50:b2:ea:
dd:fb:d0:9a:2a:9a:6e:5d:57:23:ec:a1:47:04:b0:
9a:aa:a2:6d:88:84:fe:fe:a1:44:3f:2b:dc:bb:2f:
6f:c3:ef:6f:b6:84:2e:54:29:d1:6c:fc:2c:cd:d5:
5f:42:61:5d:6f:77:d7:c0:42:ca:8f:67:3e:b7:ac:
cd:40:94:f3:37:77:b7:c7:38:cc:51:eb:ab:f7:cf:
4a:b6:e2:03:d4:fa:79:26:89:11:f4:9d:39:21:f1:
b6:5e:94:49:53:ed:71:d9:eb:5a:c1:ca:e5:50:9b:
2e:07:51:54:f3:8d:f3:9c:71:ab:a7:25:d2:b3:3a:
e9:fe:f2:83:5d:b8:c1:db:03:9d:68:b6:5e:e2:e7:
c7:ab:37:ea:f4:a7:fc:ac:c4:ff:0a:dd:e4:89:3d:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8A:36:0B:8D:A5:39:22:83:E9:AF:A6:01:8C:2F:9C:86:FD:84:E2
X509v3 Authority Key Identifier:
keyid:72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:24:33:dc:12:b9:a8:98:2b:d0:d1:47:69:06:ad:13:9c:9c:
13:be:45:5d:84:f0:c0:d2:d7:e1:61:3b:da:c0:e5:dd:f5:92:
46:fa:9b:4d:c1:8e:43:dc:1d:9d:b1:02:df:15:0c:11:7d:9f:
a4:8c:60:15:c3:7c:9d:ba:cb:64:d7:4c:8a:52:6d:5d:d9:24:
36:5e:d6:cd:44:8b:b7:7c:23:af:30:78:8b:50:0f:9b:9f:91:
4f:00:1a:95:c7:78:22:13:fd:5c:5a:dd:fc:cd:5c:27:ef:e9:
9c:55:ad:11:42:b4:fe:40:81:a4:9c:49:13:33:98:c1:1f:19:
4b:0e:43:7f:68:9a:90:bb:5d:17:58:1b:c7:52:d1:0a:6b:5c:
98:75:5e:71:d0:53:72:a9:48:de:d6:ec:2f:41:d4:4c:25:59:
a5:6c:5c:8b:f2:e2:21:c0:55:66:4e:3c:08:27:4f:5e:a8:91:
eb:5e:b7:83:b3:27:72:7d:5d:40:a8:a7:f0:18:0d:d4:98:3b:
93:01:fa:d0:1b:03:f8:15:24:c7:51:8d:f8:5f:84:fe:0a:6a:
51:62:4c:43:51:90:90:5f:44:89:6a:3a:03:ba:e1:d4:3d:1f:
69:9e:e7:a5:9f:e4:3f:a3:3e:90:bb:57:d8:3d:f3:09:08:2f:
50:ca:19:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhFMzgxMTAvBgNVBAUTKDcyNEUxRjY0NkM0NTFCMDE5RTFDREEzNkQ0MzQ2QURC
OUI1RkRCRjgwHhcNMjYwNjEzMDEyNDIxWhcNMjYwNjIwMDEyNDIxWjAYMRYwFAYD
VQQDEw02YTJjYjE0Ni1lM2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5GT7S5aCTJwfWG8S8y6v1n/vuroGX2aiLBtG2166Nj+mhLZuZRM857AfI++u
AlobW7Il+GZ8Es5RusMXMQWcE5muLDIq4XG8BwBkLxhfVCVaAZOlAgbVjVGEePkJ
iuAYPHLuKhlQsurd+9CaKppuXVcj7KFHBLCaqqJtiIT+/qFEPyvcuy9vw+9vtoQu
VCnRbPwszdVfQmFdb3fXwELKj2c+t6zNQJTzN3e3xzjMUeur989KtuID1Pp5JokR
9J05IfG2XpRJU+1x2etawcrlUJsuB1FU843znHGrpyXSszrp/vKDXbjB2wOdaLZe
4ufHqzfq9Kf8rMT/Ct3kiT0gQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGyKNguN
pTkig+mvpgGML5yG/YTiMB8GA1UdIwQYMBaAFHJOH2RsRRsBnhzaNtQ0atubX9v4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEUzOC81MUYwREIzQzNG
RkUxMUVEOUE4N0EzMTVDNEY5QUUwMi9jazRmWkd4Rkd3R2VITm8yMURScTI1dGYy
X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NrNGZaR3hGR3dHZUhObzIxRFJxMjV0ZjJfZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEUzOC81MUYwREIzQzNGRkUxMUVEOUE4N0EzMTVDNEY5QUUwMi9jazRmWkd4Rkd3
R2VITm8yMURScTI1dGYyX2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACSQz3BK5qJgr0NFHaQatE5ycE75FXYTwwNLX4WE72sDl3fWSRvqbTcGOQ9wd
nbEC3xUMEX2fpIxgFcN8nbrLZNdMilJtXdkkNl7WzUSLt3wjrzB4i1APm5+RTwAa
lcd4IhP9XFrd/M1cJ+/pnFWtEUK0/kCBpJxJEzOYwR8ZSw5Df2iakLtdF1gbx1LR
CmtcmHVecdBTcqlI3tbsL0HUTCVZpWxci/LiIcBVZk48CCdPXqiR6163g7Mncn1d
QKin8BgN1Jg7kwH60BsD+BUkx1GN+F+E/gpqUWJMQ1GQkF9EiWo6A7rh1D0faZ7n
pZ/kP6M+kLtX2D3zCQgvUMoZsw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:06:48 2026 by rpki-client