
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
File: CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json)
Hash identifier: yliN0dKrG4ihd1EFXQoOHPfr0w0i6WP3mwyqGHHoiqU=
Subject key identifier: 3A:67:57:3F:8A:B0:DE:AC:8C:D4:8C:91:25:36:5E:16:4B:B0:A5:0D
Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F
Certificate issuer: /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
Certificate serial: B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
Manifest number: AD
Signing time: Wed 25 Mar 2026 06:23:23 +0000
Manifest this update: Wed 25 Mar 2026 06:23:23 +0000
Manifest next update: Wed 01 Apr 2026 06:23:23 +0000
Files and hashes: 1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: UfNN3nS/hQzuMZRMCVuGE8Y/PzVuW+xCRksGcAeHsaQ=)
2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: vX3EihROopwpsV3rRJmhMSguNpKACFQ6QBAvo5V5iVg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl
rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176 (0xb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
Validity
Not Before: Mar 25 06:23:23 2026 GMT
Not After : Apr 1 06:23:23 2026 GMT
Subject: CN=69c37f5b-a223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:b9:3a:a0:ae:b9:29:51:84:64:95:fe:13:
76:5e:af:b5:4d:90:88:c3:cb:d7:97:76:60:83:04:
17:5d:4d:1d:9e:73:3f:06:95:eb:22:dd:aa:ad:4c:
9a:fc:b3:5e:01:74:86:2e:89:04:57:3a:92:2e:ff:
1d:7e:58:00:49:ef:25:2e:7f:2c:14:3e:0a:23:2c:
9c:ea:91:55:d0:44:93:ec:d2:ed:74:18:da:4f:a7:
6a:62:e8:d6:6c:b9:14:e2:cd:4e:75:d0:52:3e:59:
36:88:c7:4c:8a:d2:64:b8:f7:98:50:7e:79:c9:37:
57:7a:48:28:47:ea:39:e9:5d:d9:ad:90:05:f8:01:
12:81:2b:12:84:f5:08:93:c5:ec:e0:65:88:f2:6a:
cf:bf:21:02:7e:a5:17:59:0a:bd:78:7a:b4:aa:8f:
3b:47:aa:3c:7c:c2:1d:7e:1c:75:94:6c:4f:a5:5c:
a5:a9:56:91:ea:79:59:98:b9:aa:82:be:c0:6d:5f:
d4:98:d9:e7:de:01:ef:20:f6:08:5c:d6:1a:05:60:
01:de:9a:03:1e:52:9d:d5:3b:38:58:ff:68:91:2a:
1c:60:51:44:2e:8f:f2:69:40:08:d1:26:bb:32:d8:
07:cb:96:b6:69:55:db:9b:26:d8:d1:a1:22:76:cd:
f6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:67:57:3F:8A:B0:DE:AC:8C:D4:8C:91:25:36:5E:16:4B:B0:A5:0D
X509v3 Authority Key Identifier:
keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:58:17:f0:76:97:0d:d2:35:e6:f1:7d:38:1b:a5:95:2a:84:
b4:c7:b9:6d:81:af:1d:23:02:88:17:34:0f:c6:05:11:83:f8:
89:46:5e:f7:e8:80:c4:d1:a3:01:d4:60:52:5d:ab:a8:64:64:
31:a7:71:f7:d8:3f:46:b0:e6:88:b8:28:c9:e0:00:45:2e:f4:
59:79:58:2a:00:92:2d:b5:b5:cb:9c:52:09:d4:0d:fd:95:4c:
26:fc:4e:90:5f:16:92:5b:ba:5f:bf:9a:31:38:98:60:c1:e2:
e3:b1:c0:e5:fe:ed:c7:4a:14:fe:3c:65:fd:6a:3a:2b:0d:75:
f9:6b:e4:1e:47:18:5a:6c:6c:61:ff:a1:a1:a1:27:23:5a:fd:
df:3a:ec:0c:93:42:97:a1:32:e6:52:6a:ec:e1:78:bd:68:26:
d5:ce:09:70:45:79:33:97:11:38:75:1d:2f:95:47:d9:b6:04:
3e:68:df:91:90:8b:a6:24:cb:84:48:c1:48:92:d1:92:c7:8e:
30:9e:5b:c0:60:30:13:bc:8b:c2:aa:f8:f6:02:71:e5:ce:9f:
ba:81:f8:7a:3f:40:68:3a:6b:44:78:b0:a8:31:f8:50:7a:b0:
27:99:75:50:7f:8b:4f:b4:70:6a:7d:99:87:c1:df:43:25:5d:
ca:95:93:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:59:56 2026 by rpki-client