
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
File: Ska_UrGTBkf9JbeWkm28YUBL4-0.mft (raw, json)
Hash identifier: qQRQQVA6tjg9EJL1nDLtvosz3IPtE4vMwHzgxJZXgDE=
Subject key identifier: 17:08:D5:A4:32:FE:FA:4E:AC:5F:60:C7:DB:B8:A2:68:82:CF:57:75
Authority key identifier: 4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED
Certificate issuer: /CN=A91A8859/serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED
Certificate serial: 0D49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
Manifest number: 0D3E
Signing time: Tue 22 Sep 2026 18:02:01 +0000
Manifest this update: Tue 22 Sep 2026 18:02:01 +0000
Manifest next update: Tue 29 Sep 2026 18:02:01 +0000
Files and hashes: 1: Ska_UrGTBkf9JbeWkm28YUBL4-0.crl (hash: lbXekFtH495I1tieOdNYNsqOiDuTYXkn48LOsxbS1jI=)
2: 692ABA5A09DF11EAA6052433C4F9AE02.roa (hash: 1o/k0GFfoHNDOP+txbRSyPkBhEUl5bL6aMEbGrj1NA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.crl
rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3401 (0xd49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8859, serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED
Validity
Not Before: Sep 22 18:02:01 2026 GMT
Not After : Sep 29 18:02:01 2026 GMT
Subject: CN=6ab2c299-5be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7c:e0:40:57:bc:79:77:89:68:d1:d0:7b:a1:
7b:4e:01:d3:a7:0c:14:6e:24:1d:31:00:31:fb:4b:
a0:2f:82:14:09:10:53:a9:80:8d:19:46:54:c1:3e:
e8:d2:bc:0c:70:da:c0:e3:2b:d4:13:3e:1f:57:1c:
b0:22:2a:51:8b:e4:99:69:a2:b4:c2:bf:12:07:4a:
84:ec:38:06:43:6f:cf:31:29:80:da:7e:1b:cd:27:
d1:e0:18:7b:9b:92:28:97:23:8f:b4:1a:41:a6:2c:
5b:09:f8:c1:de:ba:2a:fb:db:55:b3:ee:35:6b:2f:
7f:a2:7d:1f:70:66:0f:1e:c6:49:f9:2f:76:1a:f7:
fc:94:4d:a6:f8:34:d8:92:4d:8d:3a:d6:3a:c7:3b:
f2:de:4e:c0:eb:c0:07:11:77:8a:05:01:8b:bc:f1:
44:e1:f2:d7:1c:0a:91:30:b3:c5:f7:3f:48:b9:8d:
08:e6:83:1d:77:9e:58:51:dc:af:7a:29:23:bb:28:
0e:bf:31:62:19:c9:14:df:1b:22:35:6e:42:ad:00:
d0:d7:c8:ce:ae:7a:3c:46:3e:74:d0:c3:28:36:a5:
8e:d4:19:a1:8d:3f:f4:20:df:96:a0:75:85:14:72:
a3:68:43:83:07:b2:fd:06:e5:7b:98:84:19:07:cb:
f3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:08:D5:A4:32:FE:FA:4E:AC:5F:60:C7:DB:B8:A2:68:82:CF:57:75
X509v3 Authority Key Identifier:
keyid:4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:02:80:56:32:50:af:41:a3:99:8e:77:47:44:26:28:8d:89:
33:53:6f:41:bb:91:50:5e:2c:78:ab:0e:ed:8b:d3:0c:d4:99:
d1:7e:2e:71:6c:ae:48:30:d2:ae:6a:c9:0b:5a:18:83:fb:6f:
77:e9:c6:6e:af:f8:40:ef:c5:8a:ad:3a:a8:63:97:9d:61:64:
f0:dc:81:a7:68:2e:53:45:1f:44:77:89:f3:72:eb:d0:64:27:
5f:8a:72:10:3b:6a:b3:d3:c2:c5:69:5b:ce:a8:a3:68:04:70:
af:86:a1:4f:ed:15:90:64:14:2d:22:3d:50:c4:65:bc:ba:a3:
be:de:0d:2c:39:c5:4b:af:92:fa:ae:04:29:eb:d1:65:27:e8:
58:7c:9a:d9:bb:d6:6a:01:02:cb:32:a3:82:ba:33:f9:22:32:
08:8f:2c:a0:8a:49:f8:9f:17:1f:ca:35:5f:a0:57:69:76:a7:
8f:77:82:a9:b2:2a:22:fe:c8:c2:af:21:52:29:e8:e8:05:24:
04:59:33:bb:12:50:47:14:3c:2e:3d:dc:8a:d8:f9:5f:96:7d:
27:64:7f:8d:3e:d0:e0:7c:f7:ef:9c:08:34:4a:83:75:47:b0:
3b:6a:16:04:ca:ab:63:48:dd:53:fa:4e:a4:d4:9f:59:a2:6d:
ff:bb:9a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:59:37 2026 by rpki-client