
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
File: CyVhxLV9qB1w85cksN4scQF0n10.mft (raw, json)
Hash identifier: FOv4N8pe7P9plhYgOzad2Q+felerHD53KtwaH3+UbYk=
Subject key identifier: 5F:5E:84:2B:43:47:B1:4F:5D:E4:A7:84:85:F7:DA:75:CE:A9:B0:6B
Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D
Certificate issuer: /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
Certificate serial: 0FF0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
Manifest number: 0FDD
Signing time: Tue 18 Aug 2026 17:41:29 +0000
Manifest this update: Tue 18 Aug 2026 17:41:29 +0000
Manifest next update: Tue 25 Aug 2026 17:41:29 +0000
Files and hashes: 1: CyVhxLV9qB1w85cksN4scQF0n10.crl (hash: geEnaCOslMjlz5dnvIcouYUcd5cPqTp26wYIQHAm/u8=)
2: 4B1E3E947EB411E994ED5B25C4F9AE02.roa (hash: kSNCg22bt6PXx3rEaTBPvjpdHaLrIf1YauM4yC/A/tE=)
3: AC8695B8A60611EE8FEB2160C4F9AE02.roa (hash: vtr7yAZ74kddk2JEZlUucC+/G3kf3cROk0g8PEEHH8Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl
rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:41:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4080 (0xff0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1155, serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
Validity
Not Before: Aug 18 17:41:29 2026 GMT
Not After : Aug 25 17:41:29 2026 GMT
Subject: CN=6a849949-3e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:3b:d6:62:6f:6b:5a:0e:4b:79:75:a4:98:
27:89:88:03:2a:6d:96:ec:db:9f:77:38:0d:57:49:
2b:97:0f:54:3f:85:48:32:e5:76:a2:df:72:0e:89:
7e:07:c7:80:34:f2:28:0a:6c:74:b0:fb:3a:b9:9a:
5f:2e:76:08:6c:d7:6b:e8:0f:86:4c:95:98:ac:50:
26:72:5d:5b:41:05:9e:dd:fb:6c:0b:f0:64:9f:26:
cf:da:7b:69:7a:08:b6:a6:0e:eb:b8:ed:5e:b2:47:
32:bd:80:0f:36:57:09:14:4d:0d:be:4d:71:4e:c8:
b2:54:45:a2:43:5b:5a:a7:9a:8e:49:b4:67:47:3c:
f4:71:10:b7:9c:09:ab:9e:54:08:08:05:7f:13:d8:
1c:e2:16:34:d1:22:f5:41:1e:5a:56:b6:75:fd:25:
2a:d7:7b:cf:45:12:60:bd:f9:12:a7:dd:e3:53:46:
d8:e9:a2:c2:bb:b8:83:49:54:80:8c:ec:f6:68:db:
0e:51:4c:17:3f:ea:76:67:49:e8:cf:10:63:e0:e2:
0c:83:80:fa:3f:fd:ca:29:80:8c:d1:8d:ad:f3:8d:
0c:d6:52:b4:61:d6:4c:72:e2:bf:d3:11:71:bb:64:
52:e5:c2:51:f4:af:05:7d:d9:ca:5b:b1:ba:17:6e:
b2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5E:84:2B:43:47:B1:4F:5D:E4:A7:84:85:F7:DA:75:CE:A9:B0:6B
X509v3 Authority Key Identifier:
keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:eb:b0:d9:fc:9d:81:f6:2d:20:33:5d:8d:47:50:93:b3:ee:
71:75:52:4c:a9:45:bd:8c:5d:a0:52:0b:b8:96:a3:40:96:1c:
9c:6c:ad:e9:c0:e7:a4:d1:63:b7:e9:d7:36:31:08:f2:bb:20:
f3:80:51:13:5c:88:b0:9d:cb:bf:8b:45:7e:9c:db:11:3c:44:
9c:ca:a9:9b:13:48:80:7f:89:23:53:9c:2f:e4:2b:8b:1d:fb:
3e:9c:9d:09:38:97:8b:6e:c7:7f:50:d6:d1:e6:34:43:55:fe:
a2:c3:dd:89:23:40:08:4f:f8:21:56:fc:d3:d5:db:e9:7a:a9:
17:82:69:7f:f1:40:13:c3:0e:ee:b9:b9:a6:f6:34:c6:5b:a8:
4a:e2:0f:44:59:86:7f:37:34:58:80:a5:fa:3f:37:f6:eb:3b:
c9:a2:2d:c3:4f:31:b6:c9:b3:e8:38:69:45:36:74:1c:37:f6:
a2:9a:5e:98:9c:88:75:4c:1d:d8:1e:93:f1:77:71:eb:66:77:
b0:6d:9c:3d:c9:f7:a4:20:fc:28:c0:d2:91:d0:99:b7:da:0b:
16:6d:90:a1:75:55:1f:92:b9:2d:9b:e7:c7:14:cd:e3:59:42:
49:de:47:46:16:5d:22:b7:eb:ae:9e:5b:6b:f0:3f:fc:b9:76:
55:17:b4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:04 2026 by rpki-client