
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
File: cClGBbAXy3lsrYhC9e-6P0SHB_U.mft (raw, json)
Hash identifier: /nAoTKLy8trg9sKa+U6jKlBh2ZUYeWwXW1FSo4Fa6F4=
Subject key identifier: 81:28:09:DD:4B:8B:20:B1:0C:33:D1:1F:D1:74:34:7D:3F:CA:11:DF
Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Certificate issuer: /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Certificate serial: 06B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
Manifest number: 0695
Signing time: Wed 20 May 2026 22:34:12 +0000
Manifest this update: Wed 20 May 2026 22:34:12 +0000
Manifest next update: Wed 27 May 2026 22:34:12 +0000
Files and hashes: 1: cClGBbAXy3lsrYhC9e-6P0SHB_U.crl (hash: EyTVGH1WluMC+Yan0NwaE008dg4AoWbfgM7yP3l/IbA=)
2: 4FF82F28045E11EDB581B43EC4F9AE02.roa (hash: eQ771cE1MyFNmzNP+b1zAxMvpLWubN2mVv4gPyjfQoI=)
3: 2B6E7D32FC5311ECBCE27247C4F9AE02.roa (hash: sO9jgWfuXt49U8NY50liL44KJyvfnkkcwZOmOl+RZQk=)
4: FA18CEA2F07A11EBBEBB415AC4F9AE02.roa (hash: SJNOZup/UrCByxrNytnlkYSdJsDVWtdVX5+3tE4Gk5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1716 (0x6b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1C16, serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Validity
Not Before: May 20 22:34:12 2026 GMT
Not After : May 27 22:34:12 2026 GMT
Subject: CN=6a0e36e4-41cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:2b:79:19:1e:be:1a:16:17:65:19:32:a7:
cd:f5:d8:a1:59:31:a8:fc:6d:90:a0:9f:6c:3c:95:
d0:f6:4b:34:21:93:4d:b8:4a:88:f7:76:97:35:24:
a6:b7:4c:52:44:20:25:d0:06:8d:0f:81:67:09:bc:
1c:7c:75:68:29:cf:2d:4a:c3:a0:99:de:d7:32:ce:
8e:51:9d:ef:64:20:e9:f8:72:b5:34:39:40:ee:1b:
fa:f1:ef:7d:df:76:d3:8a:e5:44:40:d2:c5:51:5c:
3a:1e:3a:b7:42:77:63:9d:8d:38:00:31:1b:8e:27:
7a:21:3b:2c:f7:c0:7c:b2:55:72:29:be:82:2c:ba:
c3:67:68:1c:0f:b9:f7:9b:92:79:0e:8d:9f:56:a4:
b8:d3:9e:18:57:9f:45:05:23:a0:52:1a:38:50:8b:
07:a3:86:69:60:be:7d:3c:0b:17:57:51:98:06:ba:
0e:5e:90:c7:49:5a:e7:cc:19:05:07:14:aa:ce:fc:
dc:36:41:27:bd:53:05:04:11:82:7b:d1:0c:8c:cb:
f4:95:ae:df:80:70:19:59:c8:15:97:e6:fe:eb:85:
8a:b0:dc:9a:53:11:2a:90:70:f5:09:5d:95:2a:87:
d3:50:58:7a:50:d1:a0:08:09:7d:58:8c:70:98:47:
54:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:28:09:DD:4B:8B:20:B1:0C:33:D1:1F:D1:74:34:7D:3F:CA:11:DF
X509v3 Authority Key Identifier:
keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:fa:0e:54:60:40:3e:35:97:39:e4:6b:37:61:95:b8:89:27:
bf:3f:83:76:93:d0:12:d0:b9:46:28:c3:db:0c:e1:68:18:bd:
e0:b5:20:b1:b4:45:2d:21:aa:35:9a:d3:0c:6a:44:91:b5:a7:
6e:34:fb:6c:8e:31:90:d3:39:ba:ff:94:9a:ab:19:5b:dd:42:
95:a3:26:34:a6:02:a1:b9:9d:90:a3:4c:4d:99:fa:06:73:43:
78:cb:f5:11:85:43:07:3f:ed:d6:82:bb:a8:69:39:6c:69:df:
d5:ff:03:9d:4f:1e:ce:d2:d5:a1:08:a7:d0:73:70:9d:52:44:
79:43:e3:e9:01:de:b1:a1:ab:f1:35:b3:72:20:66:5e:b3:0b:
96:31:6f:f9:7f:77:19:d6:8d:bd:a0:93:da:fa:72:dd:38:73:
a1:0d:55:ff:03:c9:7a:0c:40:bc:d1:8d:14:b3:15:95:fa:28:
bd:9d:f4:92:f3:c7:02:a3:9e:11:69:62:1d:e5:77:6b:08:12:
1b:0d:6d:1a:0f:7f:99:bf:9b:4a:46:c1:1e:14:82:ea:d4:db:
dc:d6:6e:4a:bd:30:fe:99:8f:56:00:33:29:ba:d0:f7:a6:41:
91:56:7a:16:6e:4a:41:ff:57:44:bb:1e:57:c2:b3:fc:45:da:
75:42:f0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:14 2026 by rpki-client