
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
File: CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json)
Hash identifier: uYTo03Yb5EzjOCKW9jv5lqhKmCsukkREasRteqPQSoE=
Subject key identifier: C2:B8:6F:4D:A5:1E:07:C5:13:62:7B:E8:0A:99:C9:C8:FC:0D:20:3B
Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F
Certificate issuer: /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
Certificate serial: EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
Manifest number: E9
Signing time: Thu 23 Jul 2026 08:12:04 +0000
Manifest this update: Thu 23 Jul 2026 08:12:04 +0000
Manifest next update: Thu 30 Jul 2026 08:12:04 +0000
Files and hashes: 1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: dMIEF0su+EBJrh1oK/5ZQsnXmEl6b0fbwBjuArhjT6A=)
2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: vX3EihROopwpsV3rRJmhMSguNpKACFQ6QBAvo5V5iVg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl
rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
Validity
Not Before: Jul 23 08:12:04 2026 GMT
Not After : Jul 30 08:12:04 2026 GMT
Subject: CN=6a61ccd4-9118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a7:32:3e:b1:e2:ab:82:03:6a:ca:9c:69:e1:
a5:ee:c6:81:cf:de:1e:25:f1:5b:26:50:49:d2:53:
b3:95:72:cc:83:b8:38:ae:0b:32:3f:d1:af:4d:c2:
1d:69:f0:c4:ee:11:00:83:93:9a:43:25:a4:52:7f:
d3:34:b1:dc:dd:2d:8f:58:f6:20:2b:eb:7a:de:9e:
5f:48:a0:9e:b7:e3:81:e0:ed:0f:5e:82:f9:71:dd:
32:11:71:9b:b1:95:3c:29:9b:c9:bc:02:5c:9c:5b:
18:48:10:f1:78:8d:b4:41:e3:8a:31:bd:7e:76:8f:
78:a0:f1:4e:59:00:de:a5:fb:22:a7:82:4c:3b:a7:
7f:80:67:11:27:a6:6b:85:1e:36:85:f5:fc:4a:81:
c0:01:94:7e:33:7c:41:f6:88:f4:63:d7:67:29:5a:
c1:98:1e:8f:e3:f4:ee:f6:06:9b:d2:dc:12:84:4c:
1b:52:d5:0d:98:f7:73:f6:73:a4:4d:f8:98:b1:f8:
e5:1f:09:6f:62:db:c2:fc:43:7d:f9:75:65:b2:9d:
8e:83:cd:74:97:a4:a7:a5:6d:31:3c:ea:81:28:cb:
f0:aa:b9:c6:8c:b2:a8:d5:fd:6a:97:9d:90:28:6d:
ce:73:30:ab:2a:3e:79:70:39:39:ff:de:05:89:f2:
bd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B8:6F:4D:A5:1E:07:C5:13:62:7B:E8:0A:99:C9:C8:FC:0D:20:3B
X509v3 Authority Key Identifier:
keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:03:d8:56:b1:62:c3:82:91:49:8b:62:75:d5:72:f8:cf:16:
a4:7c:27:15:5c:1b:e6:14:f6:70:b3:9a:27:a1:de:a8:16:60:
63:5c:e1:6e:cb:51:21:61:76:99:fc:56:fc:e1:f9:f6:72:83:
ca:68:40:04:b1:0a:d8:47:6e:90:79:33:d9:20:33:13:68:4f:
fd:ad:9e:87:39:1d:57:f5:12:c6:21:75:d5:98:12:62:41:d1:
0d:e0:fa:33:27:24:0a:c2:ea:a2:82:c8:e6:98:8b:2d:69:09:
ae:4a:90:0c:3d:1a:62:41:0f:32:78:57:aa:ce:e7:9d:fc:86:
48:bd:b6:cd:6c:29:3c:93:73:33:b6:2d:b8:f2:c5:db:1a:e7:
d1:6c:0b:80:e6:4d:65:4c:a9:c9:21:ce:9c:0f:3b:53:9a:6c:
44:19:78:eb:26:e9:70:91:60:2a:9e:af:1f:66:0a:2f:88:a5:
7c:ff:01:6a:a8:ac:26:b9:13:02:3b:63:37:12:e9:44:5f:ff:
40:29:af:29:b7:5a:86:1e:ae:ae:d6:48:24:88:12:c7:99:f7:
84:6b:f4:5e:96:bf:bf:ff:fe:a1:1a:e0:7a:43:54:98:33:91:
7c:27:b9:75:e1:3f:48:c5:66:e6:f9:b5:31:61:3c:81:5a:da:
5e:45:e6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:32 2026 by rpki-client