
$ rpki-client -vvf rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
File: cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft (raw, json)
Hash identifier: EElxjJMHzXPb8e7C5nFpStv+hFybaK1XFjEY4vUpkWs=
Subject key identifier: FF:59:D1:7C:85:68:81:07:BC:35:6B:B1:FC:2E:5A:9D:8C:B2:9B:E8
Authority key identifier: 71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7
Certificate issuer: /CN=A917174E/serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7
Certificate serial: 0E98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
Manifest number: 0E97
Signing time: Sat 28 Feb 2026 17:50:06 +0000
Manifest this update: Sat 28 Feb 2026 17:50:06 +0000
Manifest next update: Sat 07 Mar 2026 17:50:06 +0000
Files and hashes: 1: cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl (hash: pv+HKGqZnDQ2ozIjZpsOh9SmxAom2XAjSOAxVDjwsLg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl
rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3736 (0xe98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917174E, serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7
Validity
Not Before: Feb 28 17:50:06 2026 GMT
Not After : Mar 7 17:50:06 2026 GMT
Subject: CN=69a32ace-98cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:01:14:be:fb:da:12:35:fa:3d:be:66:52:
4e:21:65:a2:1c:a2:2c:27:82:fb:7a:ba:97:da:37:
53:e1:27:4c:5c:f8:87:ca:c6:53:94:cc:73:39:ab:
94:30:0d:2b:3f:4a:7c:23:41:3f:3f:bd:cc:eb:36:
3f:a9:ab:95:8c:f0:8d:6f:bd:96:f7:0f:c6:f8:54:
a8:35:00:d6:a0:25:f0:3f:70:61:5d:c5:c5:ff:75:
73:9f:1c:97:7b:50:dd:2b:d2:37:6d:4c:53:68:a4:
bc:cb:0b:1d:8a:8b:ad:3a:1c:06:aa:33:c2:e8:33:
2b:53:04:c1:8f:d1:08:c8:d2:66:0b:11:e9:6c:58:
c4:10:f9:24:35:25:3f:e8:df:e4:6f:b1:c3:f4:98:
98:fe:9d:00:2a:ab:0c:b0:1a:13:00:fd:0c:a1:89:
af:f2:48:8c:a2:84:e5:6c:ee:bf:07:8e:1c:bd:f0:
95:f9:a5:46:68:43:30:2a:e7:af:60:3e:e5:8b:76:
e0:11:0f:c6:46:e6:b9:3f:ae:a7:b0:ef:82:cc:51:
58:28:1b:2f:e0:bf:96:e0:5a:7c:bf:fc:0b:9f:bf:
db:74:aa:b2:1b:ab:a1:86:ec:e4:f4:c2:68:f2:34:
9a:21:d9:34:93:f0:76:46:3f:3f:37:e7:57:b6:76:
45:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:59:D1:7C:85:68:81:07:BC:35:6B:B1:FC:2E:5A:9D:8C:B2:9B:E8
X509v3 Authority Key Identifier:
keyid:71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:12:b9:17:c7:6c:a2:0e:b1:b1:25:1c:90:a1:03:15:f5:5d:
3b:4e:da:ce:e3:fe:95:ba:28:2d:b4:0f:b6:77:a5:e3:f6:0f:
a2:a7:1a:d7:43:32:d4:bf:83:bd:59:67:4e:d0:6e:7d:be:31:
8f:af:67:65:45:83:65:8a:64:d7:3c:67:9b:ba:52:ce:24:40:
02:3d:dd:1c:6d:2b:c0:4f:02:43:0a:af:f7:74:b7:30:a5:69:
5e:f7:f0:e1:f5:68:09:f7:26:28:de:9a:80:42:33:37:6f:20:
52:42:d1:ce:ff:aa:d2:b5:b3:55:a8:2d:b8:ac:d4:76:30:2e:
3e:b5:2f:8e:06:1e:60:cf:3e:5c:6e:ed:88:7a:2b:ff:23:55:
6c:2b:2d:6f:cc:00:26:f8:39:2d:ef:6d:3c:cc:bb:24:15:fa:
a5:76:fa:8c:ae:dd:3e:9f:0e:17:f5:fb:ce:fd:87:d1:89:59:
18:fa:a5:57:d8:36:41:1d:3b:fe:9e:c4:64:e1:68:b3:ff:ee:
4e:3b:93:b5:7f:4a:7a:43:b6:22:1d:3c:cb:cc:aa:3d:00:51:
8b:cc:df:9a:a2:4c:bb:5a:05:db:b6:93:54:9b:f9:dc:d7:32:
93:00:ce:65:f2:17:b0:84:27:22:bc:03:c1:00:01:a2:7f:0b:
6b:25:a4:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE3NEUxMTAvBgNVBAUTKDcxODA3MzA5OEFGMDM5NkZEOEUzMzA5QTFCOUZCNkYz
RUVCMTdBRTcwHhcNMjYwMjI4MTc1MDA2WhcNMjYwMzA3MTc1MDA2WjAYMRYwFAYD
VQQDEw02OWEzMmFjZS05OGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqIsBFL772hI1+j2+ZlJOIWWiHKIsJ4L7erqX2jdT4SdMXPiHysZTlMxzOauU
MA0rP0p8I0E/P73M6zY/qauVjPCNb72W9w/G+FSoNQDWoCXwP3BhXcXF/3VznxyX
e1DdK9I3bUxTaKS8ywsdioutOhwGqjPC6DMrUwTBj9EIyNJmCxHpbFjEEPkkNSU/
6N/kb7HD9JiY/p0AKqsMsBoTAP0MoYmv8kiMooTlbO6/B44cvfCV+aVGaEMwKuev
YD7li3bgEQ/GRua5P66nsO+CzFFYKBsv4L+W4Fp8v/wLn7/bdKqyG6uhhuzk9MJo
8jSaIdk0k/B2Rj8/N+dXtnZFKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP9Z0XyF
aIEHvDVrsfwuWp2MspvoMB8GA1UdIwQYMBaAFHGAcwmK8Dlv2OMwmhuftvPusXrn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTc0RS81NEFBMTQ5Q0FB
RjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09XX1k0ekNhRzUtMjgtNnhl
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NZQnpDWXJ3T1dfWTR6Q2FHNS0yOC02eGV1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTc0RS81NEFBMTQ5Q0FBRjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09X
X1k0ekNhRzUtMjgtNnhldWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHBK5F8dsog6xsSUckKEDFfVdO07azuP+lbooLbQPtnel4/YPoqca10My1L+D
vVlnTtBufb4xj69nZUWDZYpk1zxnm7pSziRAAj3dHG0rwE8CQwqv93S3MKVpXvfw
4fVoCfcmKN6agEIzN28gUkLRzv+q0rWzVagtuKzUdjAuPrUvjgYeYM8+XG7tiHor
/yNVbCstb8wAJvg5Le9tPMy7JBX6pXb6jK7dPp8OF/X7zv2H0YlZGPqlV9g2QR07
/p7EZOFos//uTjuTtX9KekO2Ih08y8yqPQBRi8zfmqJMu1oF27aTVJv53NcykwDO
ZfIXsIQnIrwDwQABon8LayWksg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:39:31 2026 by rpki-client