
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
File: cClGBbAXy3lsrYhC9e-6P0SHB_U.mft (raw, json)
Hash identifier: p1vujH1p0T/Gkd2vS7nVdnPtA0RASqQ74ZMT7CwxfFk=
Subject key identifier: 3B:5B:91:95:D7:D7:E5:4A:8C:F5:6F:34:5B:DC:D7:D6:B8:B8:13:2F
Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Certificate issuer: /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Certificate serial: 06DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
Manifest number: 06B9
Signing time: Sun 26 Jul 2026 23:15:01 +0000
Manifest this update: Sun 26 Jul 2026 23:15:01 +0000
Manifest next update: Sun 02 Aug 2026 23:15:01 +0000
Files and hashes: 1: cClGBbAXy3lsrYhC9e-6P0SHB_U.crl (hash: PGhOuUg9RjKZ7/4JEJtJFjpgcRvehCOudBxvqizLLhQ=)
2: 2B6E7D32FC5311ECBCE27247C4F9AE02.roa (hash: Skr0BIqgNbqGmYbN7MA85Axet7ydGxb2eGkyCl3TFGI=)
3: FA18CEA2F07A11EBBEBB415AC4F9AE02.roa (hash: 2L3Tb4rDsaNmcqHcYeYiYV5gtwJ30QtShtvqrny13MU=)
4: 4FF82F28045E11EDB581B43EC4F9AE02.roa (hash: ejcyL0oSDqRWe2HMcGqiIn+j/ef3ZgzWGe2NHUrNWd8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1755 (0x6db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1C16, serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Validity
Not Before: Jul 26 23:15:01 2026 GMT
Not After : Aug 2 23:15:01 2026 GMT
Subject: CN=6a6694f5-215a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3f:cc:85:76:c7:d4:71:10:0b:a3:97:63:f0:
23:7a:2c:f2:00:c1:6e:2a:b4:53:dc:40:ac:4c:cf:
c5:62:c3:d0:25:66:2e:53:b2:6e:39:cf:7a:ab:da:
99:b9:14:62:55:37:15:af:f0:1e:eb:a2:33:41:ed:
31:23:61:ff:5b:e8:df:f4:15:a3:93:1b:a5:4d:12:
5d:6c:64:a0:2f:e2:bb:79:19:21:d9:f2:80:f9:39:
68:3d:bb:01:d1:c0:55:10:04:8e:bc:28:84:f0:3a:
9d:c9:8e:86:33:f5:ed:73:64:ac:c8:52:d3:90:88:
87:18:8e:17:ee:9b:e4:8d:4f:42:a0:7b:76:c2:03:
6d:8d:e9:c8:42:20:db:7f:e8:28:96:cd:b3:6e:4a:
d5:bb:27:27:9b:47:45:31:1b:71:df:ce:87:62:a3:
7b:f8:d2:3b:90:7a:91:53:63:26:53:f2:54:00:54:
35:4f:78:be:0a:e9:e9:24:29:04:b6:16:6f:40:36:
a9:c0:cc:40:3a:0b:24:64:a2:18:92:d3:e7:0e:1e:
5a:14:9c:d5:fe:04:ea:60:3b:42:1b:02:4b:0f:dd:
47:af:4d:28:a4:f0:c4:d3:95:b0:a6:31:69:eb:09:
6c:c1:42:b8:85:f5:32:35:b9:12:55:f3:b1:95:c7:
30:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5B:91:95:D7:D7:E5:4A:8C:F5:6F:34:5B:DC:D7:D6:B8:B8:13:2F
X509v3 Authority Key Identifier:
keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:1f:ad:a0:56:ee:dd:9e:f4:01:1a:76:23:d6:c5:ec:0f:4b:
30:14:57:8d:b7:d8:6d:7f:29:5b:ff:be:09:22:ef:ff:d4:38:
b9:39:e3:e5:b6:ec:ce:81:60:c8:3e:d4:f7:ea:59:71:23:ce:
2b:f4:f3:ed:b8:5c:8a:c7:cb:36:69:dd:95:5d:b5:1c:8a:6d:
37:6d:5c:43:24:9f:1e:65:b4:b6:65:ac:51:4c:91:68:85:e3:
45:52:8c:47:52:7b:a8:b2:86:e4:47:0e:2f:8b:73:84:df:81:
8f:c8:20:9b:3a:5c:a8:83:bb:98:1d:bc:64:af:a1:ca:26:3f:
cb:70:f4:14:33:aa:79:6a:07:80:ac:db:cd:a5:2f:7f:a4:72:
6d:e3:c3:e1:59:fe:36:6c:8c:ee:dc:5a:cf:a4:45:6f:3f:72:
4a:18:1a:1b:5e:54:dd:73:88:94:de:ff:c8:4b:07:ea:49:94:
59:cf:d2:b8:03:af:3d:8e:18:b6:f8:69:00:c9:7e:98:da:75:
e6:af:03:f3:24:a8:bd:2c:86:bf:d1:45:85:2e:6e:84:10:c7:
2a:b4:84:e3:0e:90:d4:1f:c7:a2:09:3d:b1:72:6b:33:25:f4:
9b:87:13:f0:3f:6b:ed:45:82:40:fc:c2:c3:da:f5:64:56:7c:
c6:04:28:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:41:35 2026 by rpki-client