
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
File: sK6GHB6-i61uZW1AH391BglAdKA.mft (raw, json)
Hash identifier: Cg9EJoX3M5xffgslM/MJabXH9v1oMTT/zsnHzDJ4R94=
Subject key identifier: 72:AA:DB:62:62:3A:06:BE:1B:F2:18:A1:11:E7:FA:1B:59:1A:48:F1
Authority key identifier: B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0
Certificate issuer: /CN=A91D322A/serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0
Certificate serial: 0DC8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
Manifest number: 0DBE
Signing time: Thu 16 Apr 2026 17:49:25 +0000
Manifest this update: Thu 16 Apr 2026 17:49:24 +0000
Manifest next update: Thu 23 Apr 2026 17:49:24 +0000
Files and hashes: 1: sK6GHB6-i61uZW1AH391BglAdKA.crl (hash: qus2kBToMJmITigmsUNZYz3PnEUEQPezHhoeeIp/Oow=)
2: 98B4FB32DB9011E996483B2BC4F9AE02.roa (hash: 5ZMmyMryQucfNp+56gWj7IUfWmQlJppiEYV0jS6pkCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl
rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3528 (0xdc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D322A, serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0
Validity
Not Before: Apr 16 17:49:24 2026 GMT
Not After : Apr 23 17:49:24 2026 GMT
Subject: CN=69e12124-7acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:33:8a:42:c6:50:0f:31:3e:61:51:8f:ba:
2f:c8:75:7e:0c:f2:5c:ef:51:71:b4:b8:7d:99:5a:
bb:59:17:5e:c2:52:96:03:3a:77:fa:1b:ea:53:59:
6b:96:f1:c9:76:6c:7e:7f:e0:b2:33:36:05:ca:7d:
99:4a:0f:24:cd:84:77:96:3d:23:5c:ba:a1:53:d1:
72:0e:9f:a4:10:10:30:c5:53:cf:a1:2c:61:8e:15:
84:34:b2:e2:5e:2a:67:18:75:eb:24:9d:ef:9b:d6:
f3:02:88:92:29:c9:db:50:dd:af:96:d8:68:13:26:
89:15:10:7d:de:4f:3b:42:60:7f:9b:53:b7:b5:05:
49:3f:40:65:06:28:18:00:a6:71:74:f6:2a:09:5f:
23:9e:81:69:b6:f1:fe:a8:61:f0:fa:81:30:84:46:
cc:8b:dc:fc:01:b0:cb:e6:8b:cc:d3:91:d9:45:f3:
fa:39:95:f7:f0:1a:4a:06:e0:6f:84:9b:07:a1:8d:
dc:eb:17:74:ec:05:a4:f7:2a:3b:52:96:23:20:a7:
6f:90:9a:10:00:03:d1:56:74:51:e1:c5:63:87:5e:
79:3a:ff:43:62:10:27:0e:67:ad:03:b4:0c:98:95:
c9:de:f4:73:84:f0:d6:9a:d9:fb:4d:51:eb:f8:aa:
80:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AA:DB:62:62:3A:06:BE:1B:F2:18:A1:11:E7:FA:1B:59:1A:48:F1
X509v3 Authority Key Identifier:
keyid:B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:6a:69:d2:5c:72:1f:a1:fd:22:80:9b:b0:e1:4f:a1:64:3f:
ef:0a:83:03:2c:01:71:85:42:0c:15:c7:6d:5a:f0:1f:ca:ae:
5c:90:4c:29:7a:6d:4a:d3:1e:a2:f7:b9:2b:49:aa:d6:76:f6:
81:83:b4:75:e9:71:a0:78:cd:a4:6a:35:6d:85:fb:09:28:c7:
49:e1:7a:b9:bc:c6:a3:d7:73:5b:59:5b:24:5f:7b:b7:ed:25:
3d:92:83:0b:8a:8f:f4:44:ce:c4:8c:23:05:8e:14:54:be:7d:
b2:1b:e2:b1:50:c8:ea:88:37:5a:f8:82:54:fd:e4:6a:7d:00:
39:db:70:4f:31:33:05:03:cd:e8:a0:c3:05:4b:7b:b9:c4:31:
ae:75:97:c9:44:39:ad:91:47:f0:6d:87:da:e2:8e:f3:9e:e6:
81:ce:dd:c3:d8:a7:ec:20:9f:aa:0d:25:ca:71:58:67:f6:2e:
3c:23:67:61:d3:f5:6c:5a:44:71:e4:5d:bf:51:b4:41:d8:e5:
9d:84:51:94:b1:73:73:ac:07:cd:17:c9:10:7d:04:12:b3:24:
30:75:6f:7f:ae:a3:9f:73:9e:c8:b0:14:99:39:eb:e6:16:c0:
65:28:69:d8:07:f0:8d:a7:cf:f7:2a:1f:5f:cd:26:9c:15:7f:
b5:72:ef:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDMyMkExMTAvBgNVBAUTKEIwQUU4NjFDMUVCRThCQUQ2RTY1NkQ0MDFGN0Y3NTA2
MDk0MDc0QTAwHhcNMjYwNDE2MTc0OTI0WhcNMjYwNDIzMTc0OTI0WjAYMRYwFAYD
VQQDEw02OWUxMjEyNC03YWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvwYzikLGUA8xPmFRj7ovyHV+DPJc71FxtLh9mVq7WRdewlKWAzp3+hvqU1lr
lvHJdmx+f+CyMzYFyn2ZSg8kzYR3lj0jXLqhU9FyDp+kEBAwxVPPoSxhjhWENLLi
XipnGHXrJJ3vm9bzAoiSKcnbUN2vlthoEyaJFRB93k87QmB/m1O3tQVJP0BlBigY
AKZxdPYqCV8jnoFptvH+qGHw+oEwhEbMi9z8AbDL5ovM05HZRfP6OZX38BpKBuBv
hJsHoY3c6xd07AWk9yo7UpYjIKdvkJoQAAPRVnRR4cVjh155Ov9DYhAnDmetA7QM
mJXJ3vRzhPDWmtn7TVHr+KqAYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHKq22Ji
Oga+G/IYoRHn+htZGkjxMB8GA1UdIwQYMBaAFLCuhhwevoutbmVtQB9/dQYJQHSg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzIyQS8wREMxREY3Q0RC
OTAxMUU5OUMyNUM1MkFDNEY5QUUwMi9zSzZHSEI2LWk2MXVaVzFBSDM5MUJnbEFk
S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NLNkdIQjYtaTYxdVpXMUFIMzkxQmdsQWRLQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MzIyQS8wREMxREY3Q0RCOTAxMUU5OUMyNUM1MkFDNEY5QUUwMi9zSzZHSEI2LWk2
MXVaVzFBSDM5MUJnbEFkS0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIGpp0lxyH6H9IoCbsOFPoWQ/7wqDAywBcYVCDBXHbVrwH8quXJBMKXptStMe
ove5K0mq1nb2gYO0delxoHjNpGo1bYX7CSjHSeF6ubzGo9dzW1lbJF97t+0lPZKD
C4qP9ETOxIwjBY4UVL59shvisVDI6og3WviCVP3kan0AOdtwTzEzBQPN6KDDBUt7
ucQxrnWXyUQ5rZFH8G2H2uKO857mgc7dw9in7CCfqg0lynFYZ/YuPCNnYdP1bFpE
ceRdv1G0QdjlnYRRlLFzc6wHzRfJEH0EErMkMHVvf66jn3OeyLAUmTnr5hbAZShp
2AfwjafP9yofX80mnBV/tXLv5Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:27:12 2026 by rpki-client