
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft
File: CygSqDkChy-62yLLBA3ssw_v9Ww.mft (raw, json)
Hash identifier: rDuGU3+248YsPsXKnjr+4V95Y5hG6YnRzpdMb08Rr4Y=
Subject key identifier: 1F:A7:FE:A1:A0:8F:7A:67:E1:45:52:D7:6F:40:84:01:B5:0D:21:E3
Authority key identifier: 0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C
Certificate issuer: /CN=A91EAE0A/serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C
Certificate serial: 014C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft
Manifest number: 0148
Signing time: Sat 05 Sep 2026 05:09:43 +0000
Manifest this update: Sat 05 Sep 2026 05:09:43 +0000
Manifest next update: Sat 12 Sep 2026 05:09:43 +0000
Files and hashes: 1: CygSqDkChy-62yLLBA3ssw_v9Ww.crl (hash: soRqvTjNY/KsHGTldfnjqz3NZvC0C+kGH2gtl5kZppE=)
2: 54D1F77EB84611EFB170E471C4F9AE02.roa (hash: hqd1IWEEQ15NpnicK1cKDed4buwLUEv1gnSNh0RZ/T4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl
rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 05:09:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332 (0x14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE0A, serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C
Validity
Not Before: Sep 5 05:09:43 2026 GMT
Not After : Sep 12 05:09:43 2026 GMT
Subject: CN=6a9ba417-944f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:50:a2:bb:78:a2:9f:04:1a:61:c0:e4:5a:
fb:98:aa:3a:1e:23:3d:75:53:d2:53:3d:cc:00:a3:
ae:d0:bc:4d:41:9a:06:c2:20:e7:8f:d4:5a:5e:36:
4f:c4:a8:e7:40:ac:33:8c:26:5a:19:27:d7:a8:15:
c0:eb:94:9f:b9:28:eb:43:97:64:11:be:ec:b2:f3:
dd:0e:7f:a4:d1:3f:11:af:53:05:1a:03:6d:51:42:
2d:29:e4:66:f7:5e:df:fb:a4:32:80:11:81:c1:b4:
24:68:14:61:8e:b3:d0:7d:54:0d:d4:6a:b2:27:3f:
7e:3a:e3:ce:f8:e5:28:62:e4:46:db:40:e5:e5:cc:
bf:b8:57:47:2c:93:72:6a:26:b4:ea:17:5e:b3:47:
35:b3:57:31:31:a0:54:1e:ae:50:85:29:af:c0:fd:
9a:6b:39:d9:58:e3:36:a3:85:27:ea:ae:1c:78:6f:
cf:c4:98:c0:68:81:d8:ed:26:2d:c4:a7:ff:8a:ec:
6f:d0:16:1d:b1:c2:ad:6f:95:e8:87:2c:54:f1:9f:
34:bb:b3:42:40:99:d0:49:8a:ed:65:85:26:7c:52:
58:2c:8a:af:33:8d:a9:da:3d:9a:d3:07:3e:c0:8e:
fa:5d:d4:5e:21:57:3f:be:52:c7:c3:33:05:f5:59:
1a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A7:FE:A1:A0:8F:7A:67:E1:45:52:D7:6F:40:84:01:B5:0D:21:E3
X509v3 Authority Key Identifier:
keyid:0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fb:08:25:e2:39:29:9b:de:7f:8b:27:b7:e3:35:20:8c:66:
88:45:ba:34:0a:71:48:c8:91:ea:24:9c:88:f2:66:9e:37:a7:
a0:18:5a:02:c9:b3:e6:c7:ad:e5:5c:b5:85:77:dd:09:1f:f0:
f3:25:e5:c2:4b:b3:52:d3:00:df:f5:f6:e4:53:08:91:ca:46:
7d:2d:72:8c:6a:93:e0:bb:77:c9:9f:60:c7:64:c1:ee:3c:54:
d8:50:55:87:46:46:12:ac:a2:3d:0f:13:8b:f4:d0:8c:70:ae:
00:4d:57:41:05:99:1a:d4:56:46:a6:bf:2e:0c:ea:b7:9b:1e:
3c:0b:18:fc:cd:21:e7:1f:eb:36:f7:5e:a1:75:e7:94:3e:9d:
90:90:f1:00:14:8f:3c:ef:4a:51:2a:07:db:dd:0f:f5:23:a7:
6f:3e:4e:f4:da:fd:43:37:05:18:be:16:46:5b:d5:c2:b7:41:
9d:82:38:35:e6:93:91:23:a4:93:e0:fe:ae:21:16:8c:6c:61:
ac:53:70:86:87:a9:4d:6d:d7:9c:2e:04:e3:47:f2:a2:88:a7:
0e:3d:5b:4b:54:e0:03:1c:16:ae:36:78:99:80:03:38:80:e0:
7e:51:b3:29:d3:ba:55:1d:e1:05:cc:17:a3:49:d5:82:6c:1c:
c3:2a:7c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:54:29 2026 by rpki-client