
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
File: CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json)
Hash identifier: 27ZSdPPx8Od7baE8v/X639KVwRHUmhpcobSeH1E3kzo=
Subject key identifier: E2:7A:E5:C8:E4:27:9D:7C:FA:C4:CE:FC:1E:A9:68:AC:D0:54:7C:B7
Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F
Certificate issuer: /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
Manifest number: 0108
Signing time: Mon 21 Sep 2026 06:05:08 +0000
Manifest this update: Mon 21 Sep 2026 06:05:08 +0000
Manifest next update: Mon 28 Sep 2026 06:05:08 +0000
Files and hashes: 1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: 7o1W5qrfGXXMuVSenxZ8u+38bkadxGGgBx1NvAk3or0=)
2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: vX3EihROopwpsV3rRJmhMSguNpKACFQ6QBAvo5V5iVg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl
rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
Validity
Not Before: Sep 21 06:05:08 2026 GMT
Not After : Sep 28 06:05:08 2026 GMT
Subject: CN=6ab0c914-9445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:92:98:ea:9f:37:5e:6f:c9:e3:9d:b6:c6:86:
a8:91:88:c1:4a:ef:7c:2c:0a:9a:1f:c4:0f:59:64:
2a:15:9c:5b:cf:1d:ac:5e:99:91:7f:8c:38:ef:8b:
9b:4a:9f:21:e2:c1:6a:ee:70:cf:45:3c:cb:17:ac:
72:a5:67:e5:9a:9b:ac:7a:9c:1e:77:c2:34:61:a8:
74:33:6c:84:80:ef:54:6f:80:5b:95:7b:b5:c4:9c:
7a:f9:7b:44:79:54:23:de:70:30:c9:ef:43:da:fd:
51:47:31:20:c8:dd:0e:7e:f2:05:dc:51:00:53:95:
c0:b9:3f:6e:58:a3:73:19:0d:1a:a1:6b:bd:66:34:
3e:9f:ea:99:5d:e1:8a:e3:ab:65:f6:db:24:c6:22:
7b:63:72:67:20:b2:24:a3:f1:3c:f5:80:4e:3d:94:
27:cc:58:21:17:08:1d:2d:33:7a:32:b7:ed:bc:3e:
78:03:59:9e:95:f8:2c:7f:f2:d6:29:f0:80:77:13:
e7:3d:d4:cd:6c:5f:d6:ed:ee:6f:08:ba:e3:63:57:
de:34:7a:1d:d1:2e:28:9a:4c:4e:fd:a1:3e:0f:b1:
f2:2b:2a:39:b9:2d:b0:1d:f9:2b:b9:df:07:70:1f:
bd:d1:5c:9c:f2:fe:2d:ad:bb:d9:77:ea:b9:60:e4:
b7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7A:E5:C8:E4:27:9D:7C:FA:C4:CE:FC:1E:A9:68:AC:D0:54:7C:B7
X509v3 Authority Key Identifier:
keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:49:76:a1:4a:d0:1a:c3:83:eb:c2:a8:10:e2:7d:9e:34:c5:
7b:e8:e1:95:27:a1:25:aa:d3:f8:a0:5b:08:79:70:d4:e6:2f:
bb:0e:6a:37:a0:d5:21:a7:51:b0:87:e3:fb:ef:d9:65:a9:2b:
e0:c2:69:64:cd:0a:cd:e4:06:ae:6c:9c:32:df:c9:47:f0:f0:
b0:37:c5:2c:d0:c6:f7:0f:e5:42:8d:d0:41:86:e7:c4:26:5e:
d5:72:93:f4:f2:eb:53:8e:b5:85:ae:ca:2f:4a:27:98:2c:74:
2e:74:04:69:ee:81:2f:90:ff:fb:f6:32:44:e7:7f:22:43:ec:
7e:ec:8c:f8:8b:39:1a:47:12:f1:42:40:65:aa:81:dd:41:a8:
f3:0c:ee:f7:03:b2:7f:64:c4:1a:b5:a0:d1:bf:e1:b5:00:b3:
c0:28:4f:2b:f0:c4:d8:cd:93:85:81:73:15:8e:25:b0:dd:60:
7d:3f:1b:25:a8:c9:49:ae:ce:74:12:1c:1d:46:61:fc:3e:28:
a9:28:40:c8:90:dd:e4:4f:8f:20:7b:a4:50:53:72:21:cc:b6:
78:1e:29:30:5c:94:3f:60:3d:42:a7:47:c3:49:34:e3:6a:08:
44:38:04:2c:39:d8:f1:23:f4:93:5b:91:ac:de:9f:e3:f0:ee:
99:bf:89:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:20:39 2026 by rpki-client