
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
File: CyVhxLV9qB1w85cksN4scQF0n10.mft (raw, json)
Hash identifier: P72x4ufvf5XWssvjJhkqRgO8y/PW1w6K6qjaVj14p40=
Subject key identifier: F6:64:97:B4:B6:4B:24:E5:CC:BB:55:4F:A0:E8:B7:B6:41:A9:95:34
Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D
Certificate issuer: /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
Certificate serial: 1002
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
Manifest number: 0FEF
Signing time: Tue 22 Sep 2026 17:23:02 +0000
Manifest this update: Tue 22 Sep 2026 17:23:02 +0000
Manifest next update: Tue 29 Sep 2026 17:23:02 +0000
Files and hashes: 1: CyVhxLV9qB1w85cksN4scQF0n10.crl (hash: jKK5ZaQNtEXgmq/gd372Zj8oSfz28ISMm6oROksDlyA=)
2: 4B1E3E947EB411E994ED5B25C4F9AE02.roa (hash: kSNCg22bt6PXx3rEaTBPvjpdHaLrIf1YauM4yC/A/tE=)
3: AC8695B8A60611EE8FEB2160C4F9AE02.roa (hash: vtr7yAZ74kddk2JEZlUucC+/G3kf3cROk0g8PEEHH8Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl
rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4098 (0x1002)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1155, serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
Validity
Not Before: Sep 22 17:23:02 2026 GMT
Not After : Sep 29 17:23:02 2026 GMT
Subject: CN=6ab2b976-a1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f3:76:07:82:df:c4:3b:b9:67:e2:8e:76:cd:
aa:16:67:36:a9:69:a1:44:bf:f3:1e:59:d9:3f:11:
86:3b:c4:6d:3c:1e:a6:e5:8c:e1:37:49:dc:41:d7:
1b:c7:78:9a:d6:02:2e:57:a6:3a:7e:f0:ab:45:d6:
64:54:50:25:43:07:46:db:46:4a:65:dc:34:13:30:
b3:ab:43:d0:7d:db:fd:39:96:11:64:d0:c4:6a:92:
c0:16:48:39:2e:31:19:e0:4f:d6:c1:d7:ed:58:60:
73:5a:f4:36:f9:5c:95:21:3e:a5:ed:55:71:80:09:
cc:22:eb:5d:e1:d9:e1:03:98:5d:07:8f:1c:82:6a:
c0:d6:89:28:20:7c:c6:a8:0b:5e:ac:df:f1:63:5b:
cd:8e:1b:d6:99:8e:65:ee:2d:85:7b:8a:d4:16:75:
a9:ef:3c:aa:c7:39:6d:60:0f:0b:a0:45:aa:2f:12:
d7:a2:01:03:f4:da:40:19:ff:d1:8d:c4:c2:d6:d8:
39:4f:cd:af:da:d2:cf:79:61:a3:dc:c9:25:56:f8:
a8:0f:fd:4f:eb:71:33:11:d0:74:4a:36:b3:14:11:
5e:27:2b:79:ab:d8:62:6d:da:e1:09:0e:01:5f:22:
ed:a3:3c:f3:ae:09:15:bb:97:93:65:88:91:ce:94:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:64:97:B4:B6:4B:24:E5:CC:BB:55:4F:A0:E8:B7:B6:41:A9:95:34
X509v3 Authority Key Identifier:
keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:8f:52:3c:7e:0e:5a:f2:c9:dc:27:6d:3c:ea:d8:7c:12:1a:
84:de:52:c5:5a:60:88:23:79:73:75:06:3a:8b:e6:cf:ed:7e:
ac:c1:c0:ac:08:85:b3:a4:24:9e:97:0f:fc:1e:a7:ac:79:7a:
4d:7d:59:8a:3f:23:14:9e:10:c0:3e:dd:e4:fa:a5:12:eb:6c:
a4:e0:0f:52:5e:05:fb:a7:26:b2:f6:71:26:aa:1b:d5:ff:30:
f0:30:10:61:fb:dd:33:4a:fc:2a:f7:c8:1d:69:64:4a:cb:77:
4d:66:e4:2c:bb:7e:69:e7:f6:d5:b9:b9:32:48:0b:46:b2:0d:
b7:1d:e7:a3:57:74:25:bf:a6:36:b5:8a:d4:3a:f5:ae:e3:99:
6f:ee:c7:21:09:fc:b3:b1:3c:37:95:dc:d8:2f:4a:7f:9f:33:
ba:7c:98:9b:af:9a:ff:b0:06:0d:47:35:f0:96:81:70:ac:59:
df:e0:d2:2a:e1:27:fa:0f:f5:23:9a:13:e9:e4:7e:e6:7b:4b:
4e:5a:cd:86:2f:82:86:7e:41:56:57:3b:a0:09:94:47:bd:2e:
81:5e:28:5a:36:ce:14:d0:1b:0e:c5:fa:15:e3:09:33:8f:5e:
e1:14:e9:45:74:1d:44:e3:86:7f:37:cd:6d:5b:c8:62:73:86:
05:70:7f:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTExNTUxMTAvBgNVBAUTKDBCMjU2MUM0QjU3REE4MUQ3MEYzOTcyNEIwREUyQzcx
MDE3NDlGNUQwHhcNMjYwOTIyMTcyMzAyWhcNMjYwOTI5MTcyMzAyWjAYMRYwFAYD
VQQDEw02YWIyYjk3Ni1hMWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5vN2B4LfxDu5Z+KOds2qFmc2qWmhRL/zHlnZPxGGO8RtPB6m5YzhN0ncQdcb
x3ia1gIuV6Y6fvCrRdZkVFAlQwdG20ZKZdw0EzCzq0PQfdv9OZYRZNDEapLAFkg5
LjEZ4E/WwdftWGBzWvQ2+VyVIT6l7VVxgAnMIutd4dnhA5hdB48cgmrA1okoIHzG
qAterN/xY1vNjhvWmY5l7i2Fe4rUFnWp7zyqxzltYA8LoEWqLxLXogED9NpAGf/R
jcTC1tg5T82v2tLPeWGj3MklVvioD/1P63EzEdB0SjazFBFeJyt5q9hibdrhCQ4B
XyLtozzzrgkVu5eTZYiRzpRK8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPZkl7S2
SyTlzLtVT6Dot7ZBqZU0MB8GA1UdIwQYMBaAFAslYcS1fagdcPOXJLDeLHEBdJ9d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTE1NS81Mzk5OEEzNDdF
QjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFCMXc4NWNrc040c2NRRjBu
MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0N5Vmh4TFY5cUIxdzg1Y2tzTjRzY1FGMG4xMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTE1NS81Mzk5OEEzNDdFQjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFC
MXc4NWNrc040c2NRRjBuMTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqo9SPH4OWvLJ3CdtPOrYfBIahN5SxVpgiCN5c3UGOovmz+1+rMHArAiFs6Qk
npcP/B6nrHl6TX1Zij8jFJ4QwD7d5PqlEutspOAPUl4F+6cmsvZxJqob1f8w8DAQ
YfvdM0r8KvfIHWlkSst3TWbkLLt+aef21bm5MkgLRrINtx3no1d0Jb+mNrWK1Dr1
ruOZb+7HIQn8s7E8N5Xc2C9Kf58zunyYm6+a/7AGDUc18JaBcKxZ3+DSKuEn+g/1
I5oT6eR+5ntLTlrNhi+Chn5BVlc7oAmUR70ugV4oWjbOFNAbDsX6FeMJM49e4RTp
RXQdROOGfzfNbVvIYnOGBXB/vQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:57:47 2026 by rpki-client