
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
File: cClGBbAXy3lsrYhC9e-6P0SHB_U.mft (raw, json)
Hash identifier: k4xhHXTKnjRgLijDesE6Jyy31tCjnAkuvFYNE8m1HPA=
Subject key identifier: 91:96:34:73:85:7F:D7:C4:A3:18:2B:2E:5E:3A:82:05:F8:EC:BD:AA
Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Certificate issuer: /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Certificate serial: 06FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
Manifest number: 06D8
Signing time: Thu 24 Sep 2026 22:14:10 +0000
Manifest this update: Thu 24 Sep 2026 22:14:10 +0000
Manifest next update: Thu 01 Oct 2026 22:14:10 +0000
Files and hashes: 1: cClGBbAXy3lsrYhC9e-6P0SHB_U.crl (hash: nG5xLFjwohfQJSYioNi1kjZYXu8KsqyQzGQy18UnhTo=)
2: 2B6E7D32FC5311ECBCE27247C4F9AE02.roa (hash: Skr0BIqgNbqGmYbN7MA85Axet7ydGxb2eGkyCl3TFGI=)
3: FA18CEA2F07A11EBBEBB415AC4F9AE02.roa (hash: 2L3Tb4rDsaNmcqHcYeYiYV5gtwJ30QtShtvqrny13MU=)
4: 4FF82F28045E11EDB581B43EC4F9AE02.roa (hash: ejcyL0oSDqRWe2HMcGqiIn+j/ef3ZgzWGe2NHUrNWd8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 22:14:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1786 (0x6fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1C16, serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Validity
Not Before: Sep 24 22:14:10 2026 GMT
Not After : Oct 1 22:14:10 2026 GMT
Subject: CN=6ab5a0b2-1089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a0:28:29:e1:fa:f0:42:ed:19:90:fe:33:24:
c6:6a:21:81:d4:52:a9:9d:53:ec:e5:14:81:f0:c0:
89:d4:e1:cb:67:22:ff:5e:55:2a:3c:4f:6a:0d:9b:
31:c4:8b:7e:07:db:0a:ee:dd:0e:34:6e:2d:26:59:
25:14:00:6d:18:45:32:6e:5c:ef:80:43:75:54:5c:
37:39:be:8c:3f:5f:8e:50:09:11:b4:86:49:a4:db:
70:54:1f:55:21:d3:c4:e3:ee:94:c3:bd:69:5c:81:
84:50:21:38:8d:8e:c4:f5:a4:db:aa:73:47:5e:24:
4f:15:23:cc:7a:cc:52:7b:8d:05:1c:4c:7a:a0:84:
4f:df:04:7f:bc:ee:dd:99:4d:f5:32:bf:1f:b5:51:
c8:70:bb:21:9a:40:0d:b2:80:cf:32:d6:8a:c6:cb:
d3:10:b0:2c:10:6b:56:3a:5a:ea:62:b4:2b:d0:bc:
57:9c:3b:2d:f5:b9:59:ae:ff:23:f9:37:4a:a0:e2:
f7:bb:df:22:0c:52:6e:b3:3d:70:1b:d1:e0:78:10:
78:f1:30:c0:67:6e:10:d4:42:ef:62:16:cf:fe:bc:
c5:c5:41:06:be:a2:cd:a1:94:22:6a:ef:6b:73:85:
e7:29:c8:e2:e2:6c:e2:1e:05:db:fe:4e:e0:b2:f1:
32:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:96:34:73:85:7F:D7:C4:A3:18:2B:2E:5E:3A:82:05:F8:EC:BD:AA
X509v3 Authority Key Identifier:
keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a1:64:5e:45:73:c6:12:c2:9d:d0:7b:fe:b9:bf:d0:95:46:
e5:0d:bf:1f:22:03:04:9a:db:a3:2d:a5:79:99:3a:74:4e:fd:
51:3e:99:d2:7c:0c:5d:ce:da:2b:9d:34:08:53:40:cf:40:0e:
fa:1c:22:62:fe:9f:62:47:9a:0d:f7:53:4f:98:d5:b7:07:5f:
e1:a0:3b:c3:55:81:b0:bc:54:1d:66:7c:e7:76:e0:4f:7a:45:
d9:b6:20:1b:34:81:f9:8e:e9:37:77:15:1c:2a:6f:2a:1c:ad:
7e:63:35:98:a3:a9:d1:a7:31:a1:8f:3a:4a:dc:dc:93:07:e9:
a0:09:b3:40:a8:ae:7c:45:a6:3f:de:ae:73:10:28:a2:ce:6f:
82:6a:dc:39:26:00:a6:0a:67:90:b2:1e:86:66:a2:a4:ca:b0:
87:0d:1f:85:06:87:5b:f1:af:98:b3:76:c0:ec:32:01:eb:bc:
f2:b0:92:9a:06:b8:1a:d0:27:ea:f0:5b:1b:1b:f6:0b:28:71:
10:8c:f4:16:fb:c4:ad:22:3e:1c:1b:e7:1a:85:51:d5:b1:45:
8e:63:5b:76:0c:f7:d3:85:16:8f:29:cc:b6:b2:3c:f6:8b:97:
58:1c:77:7b:71:80:f8:85:15:72:d5:24:dd:a9:8a:1f:59:8c:
f6:b8:da:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFDMTYxMTAvBgNVBAUTKDcwMjk0NjA1QjAxN0NCNzk2Q0FEODg0MkY1RUZCQTNG
NDQ4NzA3RjUwHhcNMjYwOTI0MjIxNDEwWhcNMjYxMDAxMjIxNDEwWjAYMRYwFAYD
VQQDEw02YWI1YTBiMi0xMDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1aAoKeH68ELtGZD+MyTGaiGB1FKpnVPs5RSB8MCJ1OHLZyL/XlUqPE9qDZsx
xIt+B9sK7t0ONG4tJlklFABtGEUyblzvgEN1VFw3Ob6MP1+OUAkRtIZJpNtwVB9V
IdPE4+6Uw71pXIGEUCE4jY7E9aTbqnNHXiRPFSPMesxSe40FHEx6oIRP3wR/vO7d
mU31Mr8ftVHIcLshmkANsoDPMtaKxsvTELAsEGtWOlrqYrQr0LxXnDst9blZrv8j
+TdKoOL3u98iDFJusz1wG9HgeBB48TDAZ24Q1ELvYhbP/rzFxUEGvqLNoZQiau9r
c4XnKcji4mziHgXb/k7gsvEyTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJGWNHOF
f9fEoxgrLl46ggX47L2qMB8GA1UdIwQYMBaAFHApRgWwF8t5bK2IQvXvuj9Ehwf1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUMxNi84RjBDNkIwMEJF
NjExMUVCQUVGMzVBNjFDNEY5QUUwMi9jQ2xHQmJBWHkzbHNyWWhDOWUtNlAwU0hC
X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NDbEdCYkFYeTNsc3JZaEM5ZS02UDBTSEJfVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MUMxNi84RjBDNkIwMEJFNjExMUVCQUVGMzVBNjFDNEY5QUUwMi9jQ2xHQmJBWHkz
bHNyWWhDOWUtNlAwU0hCX1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwaFkXkVzxhLCndB7/rm/0JVG5Q2/HyIDBJrboy2leZk6dE79UT6Z0nwMXc7a
K500CFNAz0AO+hwiYv6fYkeaDfdTT5jVtwdf4aA7w1WBsLxUHWZ853bgT3pF2bYg
GzSB+Y7pN3cVHCpvKhytfmM1mKOp0acxoY86StzckwfpoAmzQKiufEWmP96ucxAo
os5vgmrcOSYApgpnkLIehmaipMqwhw0fhQaHW/GvmLN2wOwyAeu88rCSmga4GtAn
6vBbGxv2CyhxEIz0FvvErSI+HBvnGoVR1bFFjmNbdgz304UWjynMtrI89ouXWBx3
e3GA+IUVctUk3amKH1mM9rjanQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:15:43 2026 by rpki-client