
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
File: CyVhxLV9qB1w85cksN4scQF0n10.mft (raw, json)
Hash identifier: wmPo0yzhLgq+mLoEaWB0LG+uiceQmdfQ7k3n97taxiQ=
Subject key identifier: A6:23:00:B4:FD:F2:CA:60:6D:75:9B:3D:E5:D2:F0:EB:AD:C6:59:73
Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D
Certificate issuer: /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
Certificate serial: 0FA5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
Manifest number: 0F92
Signing time: Tue 24 Mar 2026 17:24:56 +0000
Manifest this update: Tue 24 Mar 2026 17:24:55 +0000
Manifest next update: Tue 31 Mar 2026 17:24:55 +0000
Files and hashes: 1: CyVhxLV9qB1w85cksN4scQF0n10.crl (hash: /MxNG9pYMUVYY4esweQgrJkbYuQqSPdcMly/ZAov4Pk=)
2: AC8695B8A60611EE8FEB2160C4F9AE02.roa (hash: vtr7yAZ74kddk2JEZlUucC+/G3kf3cROk0g8PEEHH8Q=)
3: 4B1E3E947EB411E994ED5B25C4F9AE02.roa (hash: kSNCg22bt6PXx3rEaTBPvjpdHaLrIf1YauM4yC/A/tE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl
rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4005 (0xfa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1155, serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
Validity
Not Before: Mar 24 17:24:55 2026 GMT
Not After : Mar 31 17:24:55 2026 GMT
Subject: CN=69c2c8e7-311a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:71:42:20:43:c6:d5:a9:fb:91:c3:cb:ef:
37:95:a6:52:2a:09:6d:1f:de:33:88:92:3f:f3:3e:
57:75:c7:de:0f:b7:db:4d:fb:31:f3:fa:a1:00:8c:
83:47:36:99:21:42:9b:0e:33:c5:f0:7b:6d:8a:fe:
eb:51:90:85:84:99:7d:3d:7b:37:5d:0f:5a:a0:67:
48:7c:ee:63:98:a2:09:74:53:b7:f0:b3:43:ea:d5:
be:db:08:ec:a3:6b:96:db:f7:ee:8c:b0:99:3b:e3:
78:4f:38:c1:12:07:44:e6:4a:31:74:db:39:79:50:
fa:d1:2a:73:3f:47:9d:06:c5:c5:3d:1a:7b:d0:cc:
3b:d4:01:8b:8c:6a:5e:93:35:fa:df:52:de:69:7d:
46:a2:39:d1:92:da:13:a6:a1:88:b8:74:b1:b7:58:
7c:21:87:28:bc:50:bc:33:53:a8:af:a2:98:fd:ca:
03:d6:04:c3:c6:71:6c:e0:d5:d0:d4:86:d7:87:8d:
64:6f:d3:d7:73:ec:f5:7c:60:13:dd:c1:31:56:94:
8d:1e:e1:84:51:88:4a:d3:be:48:e1:91:61:f6:29:
87:94:b6:94:3a:44:f3:89:b3:2e:9a:9e:ba:89:4c:
cc:72:55:aa:74:75:3d:14:3c:91:3b:3c:c2:cd:03:
b4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:23:00:B4:FD:F2:CA:60:6D:75:9B:3D:E5:D2:F0:EB:AD:C6:59:73
X509v3 Authority Key Identifier:
keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:b3:df:de:dc:17:60:4b:e1:bd:a6:8b:f8:c1:78:25:40:a5:
84:ac:4b:11:f9:74:52:19:ae:ab:0f:da:c7:e1:c5:ca:35:33:
22:14:c2:58:18:4f:2b:fe:ef:91:1e:75:3d:df:1c:0b:5a:3c:
69:f6:f0:0b:91:38:5a:e9:3d:2f:82:67:f3:70:bf:b6:03:54:
70:c8:58:e0:bb:df:c6:53:f3:61:d0:06:6c:e6:05:ff:84:a5:
7e:5b:b6:ab:77:db:72:94:de:90:92:80:0c:65:7c:9d:96:5d:
02:71:48:59:f2:8c:e1:e7:5f:d5:e6:a3:33:6e:65:da:cd:a9:
bc:aa:5b:0d:f9:95:77:9b:a1:b9:31:17:44:5a:7f:f2:30:c2:
e2:1d:61:61:23:9f:71:bc:77:14:a9:57:29:fd:5a:e1:c4:85:
6d:28:79:ce:4f:1b:ed:92:72:64:70:13:23:45:a8:45:dc:92:
16:d7:35:48:b6:35:86:71:66:0f:fa:5e:94:18:63:4d:56:f6:
b2:01:47:98:47:8b:b1:4a:7f:15:57:47:ca:c8:c1:2a:52:04:
7d:de:92:08:3c:cf:32:11:44:ed:dc:eb:ec:27:56:71:8f:0f:
f0:6e:96:ed:84:53:be:72:18:f0:e3:40:2f:46:c7:e9:d9:b9:
80:48:68:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:46:02 2026 by rpki-client