
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
File: CyVhxLV9qB1w85cksN4scQF0n10.mft (raw, json)
Hash identifier: IKL8vn9sDMoKXsydjyxgTTmUZ1b51gLbzzrgJwZKbV0=
Subject key identifier: 23:CB:5B:7A:28:2A:60:03:DA:C9:F3:C6:61:76:74:EA:BF:23:9F:DB
Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D
Certificate issuer: /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
Certificate serial: 0F99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
Manifest number: 0F86
Signing time: Mon 02 Mar 2026 00:52:58 +0000
Manifest this update: Mon 02 Mar 2026 00:52:57 +0000
Manifest next update: Mon 09 Mar 2026 00:52:57 +0000
Files and hashes: 1: CyVhxLV9qB1w85cksN4scQF0n10.crl (hash: psMMswkARP2LU59jnMZdppLP9fpAysqykpheGNZ6wKc=)
2: AC8695B8A60611EE8FEB2160C4F9AE02.roa (hash: vtr7yAZ74kddk2JEZlUucC+/G3kf3cROk0g8PEEHH8Q=)
3: 4B1E3E947EB411E994ED5B25C4F9AE02.roa (hash: kSNCg22bt6PXx3rEaTBPvjpdHaLrIf1YauM4yC/A/tE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl
rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:52:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3993 (0xf99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1155, serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
Validity
Not Before: Mar 2 00:52:57 2026 GMT
Not After : Mar 9 00:52:57 2026 GMT
Subject: CN=69a4df6a-ae22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7b:f5:51:2c:8f:3e:3e:c5:48:50:91:04:f3:
06:88:c2:72:8a:2e:87:55:7a:fe:96:88:82:58:f0:
ab:72:62:0b:18:63:fe:ad:36:ef:51:a9:fb:03:bd:
88:41:b2:55:db:82:32:af:ac:47:82:0f:de:4f:31:
f2:d7:09:b9:10:ba:01:5c:e0:4f:72:c7:76:0c:94:
25:cd:7e:96:3d:fd:65:e8:a0:71:be:d5:3b:31:b7:
cb:4a:e6:38:da:90:d6:7b:56:c1:e6:42:48:2a:29:
81:ef:6d:71:34:de:cc:40:40:bf:71:04:ed:02:e3:
2c:f6:fe:a4:f7:97:1b:72:ef:3c:1e:c5:88:ca:1b:
e7:c7:cd:ac:a2:dc:a2:6a:3e:b9:2c:b0:f2:e3:b3:
43:12:9b:b0:6d:cb:d2:79:4a:44:81:cf:c4:db:59:
46:1a:a5:5f:aa:fa:7d:65:e0:69:3f:0b:ee:8b:77:
e3:98:f6:e6:43:23:ac:94:ba:58:5d:83:d8:e1:6b:
aa:f6:56:d9:09:68:64:49:9f:03:16:bc:70:e3:3b:
9d:c3:81:3d:31:9d:19:76:ea:1e:ec:17:c2:fb:32:
af:e7:6e:59:a7:2c:d2:3c:f6:15:04:86:20:4d:5f:
d4:99:6d:fc:ee:16:98:3f:b3:7c:4c:7d:77:e8:d2:
55:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CB:5B:7A:28:2A:60:03:DA:C9:F3:C6:61:76:74:EA:BF:23:9F:DB
X509v3 Authority Key Identifier:
keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:36:10:80:76:2f:3f:96:34:ce:ac:d2:c4:af:d0:f5:8f:80:
ae:c8:c3:2d:6d:d0:37:98:62:e3:00:9b:c5:a7:68:f0:b6:0a:
85:52:ca:e3:93:bf:11:ec:50:ef:f3:1b:a0:56:ce:d7:ad:e8:
c9:36:2d:bf:cf:12:37:dc:af:24:5e:5d:07:ab:56:f8:53:31:
72:c8:52:d5:21:4d:77:74:eb:ba:21:15:31:5d:66:ee:74:9f:
1b:a8:50:da:e2:8d:bb:e0:78:ca:cf:8c:51:af:18:f1:9e:4d:
91:03:7d:fd:07:ee:60:1e:0d:cf:42:86:05:d4:61:02:d3:7e:
32:00:c0:2a:33:99:40:42:7f:da:1e:85:ff:e2:40:49:27:9e:
a7:ca:ee:04:a9:b6:52:e2:78:1a:31:16:8c:4d:d7:cf:8c:d2:
85:eb:f3:a0:a4:10:29:1d:ae:fc:28:25:ab:3d:2a:3f:10:7c:
57:11:e9:4d:57:d8:93:37:91:ce:29:7c:50:1f:99:c0:6d:6b:
44:69:73:0d:e7:6f:e1:0b:26:9d:98:fb:f6:70:82:4f:73:10:
1a:df:64:40:4c:47:69:ec:7e:70:95:0f:3d:3e:5b:53:43:6d:
69:9b:cc:1f:31:4c:b0:e9:4b:3a:1b:a3:e8:b6:86:49:6f:c1:
6d:c4:1d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:10 2026 by rpki-client