
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
File: cClGBbAXy3lsrYhC9e-6P0SHB_U.mft (raw, json)
Hash identifier: u6ZmNnT4vVhFdtgK32X6Cc2qxDPgEzq7WWnQ2J1x0Kk=
Subject key identifier: AA:F6:54:F3:16:C7:C2:91:9A:9A:FF:DC:92:60:AA:63:EA:EA:81:B7
Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Certificate issuer: /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Certificate serial: 069D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
Manifest number: 067E
Signing time: Sat 04 Apr 2026 22:22:57 +0000
Manifest this update: Sat 04 Apr 2026 22:22:57 +0000
Manifest next update: Sat 11 Apr 2026 22:22:57 +0000
Files and hashes: 1: cClGBbAXy3lsrYhC9e-6P0SHB_U.crl (hash: B2vafM7wid7gBW6Gwm/0kPAUZqz3c8ZFpOESUhOoO44=)
2: FA18CEA2F07A11EBBEBB415AC4F9AE02.roa (hash: SJNOZup/UrCByxrNytnlkYSdJsDVWtdVX5+3tE4Gk5o=)
3: 2B6E7D32FC5311ECBCE27247C4F9AE02.roa (hash: sO9jgWfuXt49U8NY50liL44KJyvfnkkcwZOmOl+RZQk=)
4: 4FF82F28045E11EDB581B43EC4F9AE02.roa (hash: eQ771cE1MyFNmzNP+b1zAxMvpLWubN2mVv4gPyjfQoI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1693 (0x69d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1C16, serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Validity
Not Before: Apr 4 22:22:57 2026 GMT
Not After : Apr 11 22:22:57 2026 GMT
Subject: CN=69d18f41-1645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1f:1b:32:8e:80:4a:67:6e:4d:97:ee:cd:b7:
17:5c:7b:39:2a:1e:8c:23:a2:2f:17:fa:0f:5d:37:
b3:08:dc:66:e3:c0:c3:2a:ba:36:3a:58:aa:62:2b:
64:bf:36:be:f6:3f:00:2d:f5:52:e5:f6:28:af:e3:
fe:46:40:12:10:56:43:5e:07:fd:f5:6a:71:19:71:
f6:57:f4:b1:c3:69:6f:f9:69:dd:b5:b8:f7:e0:5b:
08:d8:10:de:dc:93:fb:f5:dd:c1:44:48:2b:ed:dc:
7d:65:45:37:e4:4f:b9:6d:58:95:8c:89:da:32:0e:
47:02:58:f0:3b:46:83:91:94:99:f4:c4:d6:1d:0b:
72:2b:12:5b:17:00:12:e4:ca:be:1d:be:0d:1e:76:
bd:79:be:a3:3f:15:b6:d1:ea:b9:78:c7:dc:bd:41:
74:80:43:eb:55:fc:2b:34:0c:ef:66:35:f8:28:87:
50:b2:90:df:a0:99:16:06:96:fc:54:0b:f8:41:1f:
95:ea:18:d8:f4:05:09:61:5c:bb:53:d3:bd:ee:83:
29:99:49:12:4f:c0:5b:5b:49:ae:bb:e4:4f:e6:e6:
a3:cc:df:74:78:de:51:8a:e6:36:30:f2:ff:b6:3b:
56:b9:b2:d7:62:af:a5:dc:76:7e:f2:f8:d3:69:97:
02:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F6:54:F3:16:C7:C2:91:9A:9A:FF:DC:92:60:AA:63:EA:EA:81:B7
X509v3 Authority Key Identifier:
keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f9:e2:1e:ff:39:2e:4a:36:2f:8e:6e:50:9f:2a:4f:99:f6:
7a:0d:de:1b:0e:73:29:24:90:6d:c3:51:21:7e:29:17:a4:e4:
9f:e8:0a:4d:72:b8:45:c7:f3:09:72:f1:0c:2b:2f:18:9e:81:
b9:48:5d:65:6c:2e:bd:0e:f4:67:a0:a8:cd:d1:d2:69:e3:f5:
ce:74:57:a1:9a:38:07:24:9f:cb:c2:28:08:20:30:72:82:41:
76:d3:2e:08:5e:5e:ad:7d:30:7d:dd:70:97:25:32:0b:76:16:
59:ab:f3:0e:5b:58:a5:ec:63:21:f3:03:bd:8d:8d:ae:53:fd:
95:7c:41:60:e3:a5:e6:94:f0:b0:7e:ff:1e:56:7d:53:7b:a8:
cc:b7:69:83:63:5f:71:54:03:28:61:17:3e:47:63:bb:a4:bd:
42:7a:be:84:42:82:ad:14:7c:85:65:73:fe:2f:42:b0:03:cb:
fe:a6:41:b7:33:8b:4d:a5:82:78:b4:64:41:8b:27:50:50:51:
e1:79:87:71:32:90:d3:62:b5:ae:e8:86:29:b5:e5:35:10:ef:
a8:b4:06:fa:bb:41:9e:52:f4:d7:69:90:b6:d9:3e:dd:4a:f4:
fe:ee:d2:7a:66:41:1e:f4:87:48:d0:c8:8d:ee:ed:18:fb:fa:
8d:6f:12:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:49 2026 by rpki-client