
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
File: CyVhxLV9qB1w85cksN4scQF0n10.mft (raw, json)
Hash identifier: 3QShmCE/g2+rwReLChEmDkCywcyfAZ5rOoLMf8IuhG0=
Subject key identifier: 71:C9:6D:25:86:E7:9E:38:2D:F2:55:D3:08:A3:6B:34:0E:41:92:DD
Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D
Certificate issuer: /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
Certificate serial: 0F93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
Manifest number: 0F84
Signing time: Sat 28 Feb 2026 17:39:28 +0000
Manifest this update: Sat 28 Feb 2026 17:39:28 +0000
Manifest next update: Sat 07 Mar 2026 17:39:28 +0000
Files and hashes: 1: CyVhxLV9qB1w85cksN4scQF0n10.crl (hash: V0WP7bP5gHnHyEt7/COrnjzO/OVd8BCFNR7wjs3uAu8=)
2: AC8695B8A60611EE8FEB2160C4F9AE02.roa (hash: ib8nYaY5edetahLOziP3ND06MsQfzy3ex3w6zAk8k2E=)
3: 4B1E3E947EB411E994ED5B25C4F9AE02.roa (hash: UyCHDG2qAGPzolKitsZ8J2AXElrKooslUCGA3T3LeQ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl
rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:39:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3987 (0xf93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1155, serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
Validity
Not Before: Feb 28 17:39:28 2026 GMT
Not After : Mar 7 17:39:28 2026 GMT
Subject: CN=69a32850-6514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a5:44:a8:14:c8:f7:63:65:90:86:c3:01:04:
f6:75:da:81:b7:12:6d:f0:83:83:ae:fc:f2:57:56:
20:33:56:20:f4:10:4b:5e:22:9d:2f:ec:e2:78:e2:
f0:23:4e:62:4a:54:93:91:08:c3:11:ec:36:e6:50:
b6:8b:5f:50:3a:70:63:ac:35:64:22:bd:85:1d:4d:
9b:4d:d3:56:d7:b3:39:3a:ef:58:52:da:70:48:36:
d4:02:0f:23:20:d0:fa:fe:7b:02:34:90:18:5f:0d:
93:60:0d:00:e3:99:8b:9c:0f:86:73:29:c3:16:7c:
f7:ed:97:d6:15:dc:6e:05:90:5e:af:e3:57:4b:5f:
e6:35:c6:93:17:35:e0:07:be:9d:7c:8c:c0:64:d5:
ee:41:ac:77:3d:23:5e:33:3e:22:cf:58:da:a3:23:
e9:06:f5:d4:1d:4d:bf:48:aa:6e:40:28:18:f1:e8:
da:0e:66:11:13:40:45:6b:38:7e:f0:b6:a6:b9:d7:
da:69:c2:bc:d4:21:67:cb:fe:d9:9c:80:04:85:c9:
c2:c8:a8:c7:90:ad:2a:4c:5f:69:51:08:fc:4e:29:
79:f2:d8:57:ee:67:3f:1a:d1:18:2e:52:32:14:60:
b3:09:8e:d4:fe:f2:12:7b:d3:f3:5a:89:ff:73:f9:
1a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C9:6D:25:86:E7:9E:38:2D:F2:55:D3:08:A3:6B:34:0E:41:92:DD
X509v3 Authority Key Identifier:
keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:16:6f:5d:2d:c9:dc:88:c6:03:44:22:ed:95:ad:55:d3:78:
89:58:a9:ec:54:23:5a:8b:de:e6:8b:fb:0d:0a:2d:97:30:08:
0a:b3:a1:45:a1:0c:97:f9:87:a8:33:01:f0:b4:ea:82:78:4e:
4a:b9:d6:fb:73:05:7c:e4:d6:45:53:db:e1:ae:15:b9:2e:3f:
48:d6:da:a1:5a:a3:95:46:00:37:86:36:3b:b1:f9:41:4b:cf:
b9:a3:9b:80:e0:60:e7:6d:78:cd:bd:63:70:70:db:4f:fd:d9:
59:be:dd:09:fb:26:6b:11:df:dd:5b:8c:fd:08:5b:96:4f:49:
fc:97:7e:0e:14:88:87:3c:ca:2f:a3:1a:de:1f:23:7a:8f:b0:
94:5a:1a:94:86:0f:8e:c7:69:21:e7:79:b2:dd:44:fa:6c:b3:
3d:41:a1:5a:ce:d2:43:63:47:97:ec:3d:3c:12:9f:ef:80:3e:
85:c3:8e:fe:44:fd:96:77:c2:ae:f5:b3:1d:d9:8a:9f:4a:6f:
3b:1d:e6:f4:d5:b5:46:66:80:09:0c:1e:e3:a4:20:ab:bf:3d:
7a:8c:af:ff:b5:0b:95:b7:2a:d1:44:27:d0:4c:60:dc:94:af:
61:6c:71:b1:df:a4:58:f6:6f:8a:d0:ab:73:d6:87:6d:d6:0d:
8c:d1:a2:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICD5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTExNTUxMTAvBgNVBAUTKDBCMjU2MUM0QjU3REE4MUQ3MEYzOTcyNEIwREUyQzcx
MDE3NDlGNUQwHhcNMjYwMjI4MTczOTI4WhcNMjYwMzA3MTczOTI4WjAYMRYwFAYD
VQQDDA02OWEzMjg1MC02NTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoKVEqBTI92NlkIbDAQT2ddqBtxJt8IODrvzyV1YgM1Yg9BBLXiKdL+zieOLw
I05iSlSTkQjDEew25lC2i19QOnBjrDVkIr2FHU2bTdNW17M5Ou9YUtpwSDbUAg8j
IND6/nsCNJAYXw2TYA0A45mLnA+GcynDFnz37ZfWFdxuBZBer+NXS1/mNcaTFzXg
B76dfIzAZNXuQax3PSNeMz4iz1jaoyPpBvXUHU2/SKpuQCgY8ejaDmYRE0BFazh+
8LamudfaacK81CFny/7ZnIAEhcnCyKjHkK0qTF9pUQj8Til58thX7mc/GtEYLlIy
FGCzCY7U/vISe9PzWon/c/kaDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHHJbSWG
5544LfJV0wijazQOQZLdMB8GA1UdIwQYMBaAFAslYcS1fagdcPOXJLDeLHEBdJ9d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTE1NS81Mzk5OEEzNDdF
QjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFCMXc4NWNrc040c2NRRjBu
MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0N5Vmh4TFY5cUIxdzg1Y2tzTjRzY1FGMG4xMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTE1NS81Mzk5OEEzNDdFQjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFC
MXc4NWNrc040c2NRRjBuMTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARRZvXS3J3IjGA0Qi7ZWtVdN4iVip7FQjWove5ov7DQotlzAICrOhRaEMl/mH
qDMB8LTqgnhOSrnW+3MFfOTWRVPb4a4VuS4/SNbaoVqjlUYAN4Y2O7H5QUvPuaOb
gOBg5214zb1jcHDbT/3ZWb7dCfsmaxHf3VuM/Qhblk9J/Jd+DhSIhzzKL6Ma3h8j
eo+wlFoalIYPjsdpIed5st1E+myzPUGhWs7SQ2NHl+w9PBKf74A+hcOO/kT9lnfC
rvWzHdmKn0pvOx3m9NW1RmaACQwe46Qgq789eoyv/7ULlbcq0UQn0Exg3JSvYWxx
sd+kWPZvitCrc9aHbdYNjNGi3g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:56:21 2026 by rpki-client