
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft
File: cleSPWdwxWeJGbB8vPqK-LnFBT8.mft (raw, json)
Hash identifier: 5UTHS4nA6PE3hTEeLO2eXd9MyRiBWai5SlAW0E3/BFc=
Subject key identifier: 2F:6C:AB:87:94:80:92:37:C9:A9:94:78:6D:72:C8:BD:BC:E4:1A:C7
Authority key identifier: 72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F
Certificate issuer: /CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F
Certificate serial: 0135
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft
Manifest number: 0123
Signing time: Tue 03 Mar 2026 05:22:13 +0000
Manifest this update: Tue 03 Mar 2026 05:22:13 +0000
Manifest next update: Tue 10 Mar 2026 05:22:13 +0000
Files and hashes: 1: cleSPWdwxWeJGbB8vPqK-LnFBT8.crl (hash: PCskdXhgGxw4EVhHUclo2xFdOox7Ea26CL1YETiVHFc=)
2: 65783A3A68FE11EFB904E587C4F9AE02.roa (hash: aFQ7bX8ytAFiMpuE9k/08/sRiHmY/0AMmDItTStdXqk=)
3: E0FC9A944D3111F08F258733C4F9AE02.roa (hash: fi9JcGfoU/wiK7429QM9k1iyc8WV3c5GwUrIVHqsYuM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl
rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:22:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309 (0x135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7175, serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F
Validity
Not Before: Mar 3 05:22:13 2026 GMT
Not After : Mar 10 05:22:13 2026 GMT
Subject: CN=69a67005-5eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:0c:3a:ce:30:32:7a:80:d2:ee:8e:63:c9:
50:5c:82:a6:6e:e6:ab:61:d0:4b:95:68:7e:a1:95:
01:86:bc:d5:32:43:e1:d1:a6:00:9c:28:82:a5:33:
5e:9a:ae:eb:d4:f8:3f:44:41:55:58:3a:2c:1d:0b:
4d:7e:07:f6:d6:fe:fa:a4:b6:f6:66:36:2c:5f:0f:
d3:d9:43:52:72:f8:9f:20:95:6d:62:a9:2f:e6:2e:
b0:36:1c:e6:80:3d:34:ea:9e:e7:cc:dd:a6:52:34:
73:2c:d7:68:cb:ba:bd:45:0c:d0:64:5b:cb:4f:68:
58:1c:6e:44:0c:58:af:9d:7e:df:9d:94:a0:b5:77:
a1:06:b6:48:2a:d9:88:81:b3:30:21:27:18:7c:77:
47:1f:97:0c:50:74:3d:b1:ef:1b:53:17:ff:8e:6f:
55:f1:79:56:60:65:2c:0b:fc:53:82:80:eb:ea:a8:
d2:3f:bc:10:e5:31:6a:d6:00:dc:45:f2:ba:43:8e:
93:10:02:5e:77:1c:37:b5:94:03:c5:ad:7c:56:9b:
83:c2:06:6d:3c:79:2f:74:c9:4a:3c:eb:49:2c:e8:
8a:15:6f:48:d7:08:c3:61:16:74:76:3b:e8:2f:f6:
30:33:44:33:3c:89:34:1e:b4:e3:9d:07:09:e4:42:
f7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6C:AB:87:94:80:92:37:C9:A9:94:78:6D:72:C8:BD:BC:E4:1A:C7
X509v3 Authority Key Identifier:
keyid:72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:79:e0:c9:2c:bd:61:46:01:c0:ea:bb:52:e9:55:55:a4:1c:
7d:1c:5b:0e:da:d9:63:03:de:a8:3b:fc:ec:b1:e6:78:c2:cb:
bf:c4:f9:87:ab:b1:0d:d0:6e:14:36:92:1c:32:b3:3e:dd:14:
50:c0:d8:cc:d9:89:3a:71:8d:8a:22:4b:f3:e7:e2:d2:04:1f:
4c:f9:9f:b2:2a:26:a5:13:91:c6:47:5b:09:11:75:40:4c:8b:
87:d6:db:e1:19:76:66:8c:02:29:97:7d:83:c5:d5:06:8d:af:
46:bb:56:34:95:f0:a3:e8:3f:34:18:ce:6c:ba:4a:7e:31:f0:
e3:d9:98:9b:36:41:b7:f0:9b:d2:6b:68:33:6c:a0:b6:2e:da:
cb:11:91:b7:2e:ea:7a:00:8b:74:5a:e1:cb:d0:27:bb:b5:8c:
63:ed:c3:c0:c4:27:8a:13:91:d7:e6:0e:8a:e6:32:d4:64:a6:
22:1b:74:54:e3:5a:36:95:62:40:30:30:d6:0c:cb:25:ef:40:
2d:50:34:47:1e:b7:02:82:56:61:b9:db:de:a7:00:2d:bb:2b:
57:ef:b3:c5:ac:58:07:cb:c3:bd:69:a3:f4:1c:c3:77:3f:3d:
33:e9:6d:48:e1:3e:49:05:52:a9:77:79:cd:2a:57:cc:7b:19:
d1:ef:eb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:21:05 2026 by rpki-client