
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft
File: cleSPWdwxWeJGbB8vPqK-LnFBT8.mft (raw, json)
Hash identifier: iPmD5MW3oTWZu6AaJX+XcM2KabpAEiFikWstexXl7kY=
Subject key identifier: 5F:50:31:37:03:30:18:EB:C3:0F:59:1B:6C:30:D8:64:4D:C6:DD:7D
Authority key identifier: 72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F
Certificate issuer: /CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F
Certificate serial: 01A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft
Manifest number: 0197
Signing time: Mon 19 Oct 2026 05:02:51 +0000
Manifest this update: Mon 19 Oct 2026 05:02:51 +0000
Manifest next update: Mon 26 Oct 2026 05:02:51 +0000
Files and hashes: 1: cleSPWdwxWeJGbB8vPqK-LnFBT8.crl (hash: 6JofCcGSQjdfw+DYmCR20/5gvRokaUBKdV6LsVKjSQs=)
2: E0FC9A944D3111F08F258733C4F9AE02.roa (hash: fi9JcGfoU/wiK7429QM9k1iyc8WV3c5GwUrIVHqsYuM=)
3: 65783A3A68FE11EFB904E587C4F9AE02.roa (hash: aFQ7bX8ytAFiMpuE9k/08/sRiHmY/0AMmDItTStdXqk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl
rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 05:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7175, serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F
Validity
Not Before: Oct 19 05:02:51 2026 GMT
Not After : Oct 26 05:02:51 2026 GMT
Subject: CN=6ad5a47b-c070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:45:b0:1b:e8:0b:63:9a:d2:5e:80:dd:d7:93:
00:bf:83:2a:a5:32:11:93:a0:cc:30:db:9d:59:3d:
29:cf:c3:74:54:0a:c2:b0:a5:f0:a9:7d:f4:70:cb:
5a:ce:fb:55:4d:be:37:3d:99:09:0c:97:20:27:b2:
d0:ce:c5:23:f1:43:2f:39:72:af:d4:f8:c5:49:5d:
fc:99:e8:52:aa:ff:d6:94:b1:b1:c2:3f:d7:1d:d8:
0c:ad:0e:8d:83:78:80:91:9e:14:cc:18:49:b5:f6:
e6:75:6a:4a:fd:9b:e5:b7:94:b1:62:61:f4:a3:e4:
74:1f:e3:67:19:48:ca:32:24:d1:56:16:1d:dc:9e:
c6:ec:2a:5c:23:7d:85:02:c3:15:d7:ca:00:ba:d3:
32:94:ec:e9:2a:0c:48:aa:18:3c:96:69:4e:1d:6a:
9b:25:5b:2b:14:ce:15:14:46:28:ab:27:b1:b7:2c:
7f:ee:a5:d6:19:09:33:61:60:0f:fd:e6:30:0e:76:
c6:14:c7:fa:80:1b:12:7b:e5:1a:e1:4d:ad:78:81:
4c:45:0d:4d:26:7a:86:f8:82:bd:8a:63:96:b0:e1:
bc:40:11:42:94:5a:5d:0e:9d:e9:06:2e:65:f3:bc:
76:69:5c:bf:4b:22:bd:8f:ff:b8:a0:04:88:d2:3f:
f0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:50:31:37:03:30:18:EB:C3:0F:59:1B:6C:30:D8:64:4D:C6:DD:7D
X509v3 Authority Key Identifier:
keyid:72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:18:f5:12:f6:bd:3e:4d:77:25:72:f9:c4:19:3c:28:b7:41:
14:07:30:1f:76:65:8d:c8:27:f6:eb:5a:ad:00:8c:4f:b4:56:
db:f7:88:57:6c:89:e9:48:e6:6c:c4:a5:3b:9c:07:ae:83:99:
dd:14:ff:ea:54:a4:cb:23:87:6d:0c:00:d7:57:5f:7e:6d:34:
cf:b7:7c:84:4b:ab:7f:57:68:ff:6a:d3:cf:63:69:f1:b0:2e:
80:93:ec:82:91:76:ad:12:4e:bc:c7:eb:47:e1:05:70:9c:dd:
43:8f:33:b8:f9:59:f1:48:a9:2b:a4:10:75:83:1b:e6:48:54:
47:b9:94:68:ca:6f:47:59:01:30:42:ac:96:42:88:ea:a1:6a:
d0:79:73:dc:23:0f:37:13:1e:bf:4e:ee:23:74:eb:cf:f0:22:
d9:ce:75:da:6a:2e:b3:23:e8:a0:50:f6:28:e8:4c:c1:f9:43:
df:70:d2:ea:b6:d2:cc:b6:1c:0b:cd:9c:1d:85:35:b7:af:f6:
e1:5f:08:88:b7:a9:fe:af:f2:81:86:b8:87:74:7c:8c:6d:12:
a3:3f:e1:ca:3b:63:68:8f:f8:8a:01:b3:61:e0:d5:1d:44:82:
53:40:e1:51:ce:a0:ca:f0:62:72:9d:dc:c6:ac:43:4e:b5:b8:
7b:bf:76:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:57:20 2026 by rpki-client