
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
File: CyVhxLV9qB1w85cksN4scQF0n10.mft (raw, json)
Hash identifier: OYCSPOIOvSNRRXfa0oX/X316vTPw2lUEDBdX4Dsl6go=
Subject key identifier: 1B:E3:39:31:F0:98:FD:F5:77:42:88:7A:19:D6:A0:DE:3F:3F:DD:CB
Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D
Certificate issuer: /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
Certificate serial: 0FBE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
Manifest number: 0FAB
Signing time: Tue 12 May 2026 17:33:00 +0000
Manifest this update: Tue 12 May 2026 17:32:59 +0000
Manifest next update: Tue 19 May 2026 17:32:59 +0000
Files and hashes: 1: CyVhxLV9qB1w85cksN4scQF0n10.crl (hash: RFl2mE/D/aNtu0Lk6VzGXmGItHf7b/yN+ErO/VnSdSs=)
2: 4B1E3E947EB411E994ED5B25C4F9AE02.roa (hash: kSNCg22bt6PXx3rEaTBPvjpdHaLrIf1YauM4yC/A/tE=)
3: AC8695B8A60611EE8FEB2160C4F9AE02.roa (hash: vtr7yAZ74kddk2JEZlUucC+/G3kf3cROk0g8PEEHH8Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl
rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4030 (0xfbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1155, serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
Validity
Not Before: May 12 17:32:59 2026 GMT
Not After : May 19 17:32:59 2026 GMT
Subject: CN=6a03644c-4d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:ce:8b:d0:94:34:75:9e:48:2c:1d:f8:f7:
25:7a:2e:a4:de:a1:99:6e:d6:67:09:ce:f2:d0:69:
17:10:82:7b:b7:06:d3:ff:ac:ff:26:6b:81:09:ad:
d6:1d:fb:f6:45:7b:a3:97:b7:ed:35:ba:7e:5f:d9:
07:04:ea:c0:50:b9:dc:41:bc:6d:26:72:62:f6:f3:
4b:54:84:c2:64:bc:2e:a6:3b:7b:12:c8:79:48:6e:
00:31:56:48:b8:e8:70:6e:58:88:1d:ff:71:03:09:
c6:ad:a6:d0:97:67:a4:9b:71:be:44:27:99:6a:ec:
ab:9a:40:e5:5a:e7:00:06:b2:36:17:25:b7:74:c0:
dc:60:c5:b2:a1:06:c1:78:2d:4c:8f:d2:f0:ea:5f:
3c:dc:e8:13:80:09:5f:49:12:6f:23:69:12:76:3f:
11:ce:18:7c:e6:cb:3e:0c:3c:0b:32:0c:f0:03:a0:
ae:31:c9:33:4a:6f:66:b2:c0:d1:18:98:c3:c1:7e:
2a:ef:36:41:98:04:0b:ee:f3:75:b1:a7:90:3b:6a:
14:96:75:aa:fd:a1:da:33:09:e3:c9:56:58:37:91:
8e:d2:fc:cc:c4:76:81:84:d0:a8:fd:99:8c:69:8b:
63:63:dc:93:3a:4e:2e:bc:0b:ac:04:e0:2f:36:29:
a3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E3:39:31:F0:98:FD:F5:77:42:88:7A:19:D6:A0:DE:3F:3F:DD:CB
X509v3 Authority Key Identifier:
keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:c5:7a:39:b6:4b:d0:7d:00:1f:ee:2b:5c:24:a0:5e:ba:e9:
c3:07:53:53:36:c2:5f:3d:6d:c3:e7:8c:c7:35:4d:a8:52:31:
d6:0c:6b:5e:5e:1e:5d:f0:42:63:6a:37:b9:97:92:91:52:db:
d2:a4:fd:fd:c8:d3:b5:1a:8c:df:ce:e5:c5:bf:ae:63:bf:d8:
5a:c2:e6:5b:07:0a:1e:df:f6:81:1e:bb:54:eb:c8:f7:85:81:
32:e9:b9:74:f9:cf:d3:71:2d:8e:6a:45:6c:b7:1e:1e:fc:91:
99:99:f7:0e:b3:45:12:fa:89:50:71:0f:ec:84:a4:f8:50:99:
1b:aa:82:81:8d:6a:0f:66:74:1a:a4:12:98:20:76:67:67:02:
e6:5c:47:42:fe:da:62:7a:0e:65:f9:c2:52:90:ef:c0:44:73:
f4:5f:2c:12:43:f4:71:e5:8f:21:61:3a:ff:db:3d:6a:51:3d:
29:d8:27:7b:28:d9:18:87:64:0b:52:4b:23:25:44:07:68:d3:
53:ae:ba:33:af:c8:59:61:0a:b3:0b:a2:e4:f1:02:20:48:cb:
a7:ed:53:5c:10:78:88:0f:a2:3f:55:4d:2b:75:a1:f9:9f:f6:
2f:77:ec:3c:86:d8:1f:19:95:0b:3d:fa:0d:d9:2e:20:ee:89:
04:25:87:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICD74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTExNTUxMTAvBgNVBAUTKDBCMjU2MUM0QjU3REE4MUQ3MEYzOTcyNEIwREUyQzcx
MDE3NDlGNUQwHhcNMjYwNTEyMTczMjU5WhcNMjYwNTE5MTczMjU5WjAYMRYwFAYD
VQQDEw02YTAzNjQ0Yy00ZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvO3Oi9CUNHWeSCwd+Pclei6k3qGZbtZnCc7y0GkXEIJ7twbT/6z/JmuBCa3W
Hfv2RXujl7ftNbp+X9kHBOrAULncQbxtJnJi9vNLVITCZLwupjt7Esh5SG4AMVZI
uOhwbliIHf9xAwnGrabQl2ekm3G+RCeZauyrmkDlWucABrI2FyW3dMDcYMWyoQbB
eC1Mj9Lw6l883OgTgAlfSRJvI2kSdj8Rzhh85ss+DDwLMgzwA6CuMckzSm9mssDR
GJjDwX4q7zZBmAQL7vN1saeQO2oUlnWq/aHaMwnjyVZYN5GO0vzMxHaBhNCo/ZmM
aYtjY9yTOk4uvAusBOAvNimj5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBvjOTHw
mP31d0KIehnWoN4/P93LMB8GA1UdIwQYMBaAFAslYcS1fagdcPOXJLDeLHEBdJ9d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTE1NS81Mzk5OEEzNDdF
QjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFCMXc4NWNrc040c2NRRjBu
MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0N5Vmh4TFY5cUIxdzg1Y2tzTjRzY1FGMG4xMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTE1NS81Mzk5OEEzNDdFQjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFC
MXc4NWNrc040c2NRRjBuMTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAucV6ObZL0H0AH+4rXCSgXrrpwwdTUzbCXz1tw+eMxzVNqFIx1gxrXl4eXfBC
Y2o3uZeSkVLb0qT9/cjTtRqM387lxb+uY7/YWsLmWwcKHt/2gR67VOvI94WBMum5
dPnP03EtjmpFbLceHvyRmZn3DrNFEvqJUHEP7ISk+FCZG6qCgY1qD2Z0GqQSmCB2
Z2cC5lxHQv7aYnoOZfnCUpDvwERz9F8sEkP0ceWPIWE6/9s9alE9KdgneyjZGIdk
C1JLIyVEB2jTU666M6/IWWEKswui5PECIEjLp+1TXBB4iA+iP1VNK3Wh+Z/2L3fs
PIbYHxmVCz36DdkuIO6JBCWH7A==
-----END CERTIFICATE-----
Generated at Wed May 13 09:05:09 2026 by rpki-client