
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
File: LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft (raw, json)
Hash identifier: xuKhJ4YOVfyJohIvwPbYzxDAIglowkptl5JD6Vc81MM=
Subject key identifier: 41:BE:DE:B6:84:0E:AA:6B:76:FD:94:64:D4:A4:F7:6E:ED:AF:F3:79
Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C
Certificate issuer: /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C
Certificate serial: 0743
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
Manifest number: 0730
Signing time: Tue 22 Sep 2026 21:44:01 +0000
Manifest this update: Tue 22 Sep 2026 21:44:00 +0000
Manifest next update: Tue 29 Sep 2026 21:44:00 +0000
Files and hashes: 1: LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl (hash: 0W/ov9rQQAe6xprq4tPNpPWZSg+11wqBQlD6zQIQFI4=)
2: 579FE34A0BF211EF8B0F9C81C4F9AE02.roa (hash: 2QQLdWByWmzyDLm9K7Etw2tEiz/l3b7pU56fbAv1SHo=)
3: 8CBE17540BCF11EF80BE8E0CC4F9AE02.roa (hash: K5LcOR8cOoj1G9hwCRlc2w0NxNadpML+5njvncofuUc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl
rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1859 (0x743)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91203EB, serialNumber=2F265B0C802473094926890A85124E21B109DA3C
Validity
Not Before: Sep 22 21:44:00 2026 GMT
Not After : Sep 29 21:44:00 2026 GMT
Subject: CN=6ab2f6a1-13fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d0:df:01:1b:88:e1:fb:85:09:d8:fc:7a:b4:
63:68:d6:a6:98:ef:68:0f:d0:e3:7e:eb:1c:e2:e9:
36:8b:dc:ac:62:3b:4f:c2:49:6c:06:71:60:97:8b:
84:97:96:19:8b:1a:c7:cc:be:ef:b9:b6:0c:b4:ef:
d2:51:e4:38:d5:ba:ef:b9:80:ae:86:e8:71:3a:56:
1f:44:97:4b:ec:ca:20:d2:83:05:b3:84:ee:0b:c1:
d7:34:cf:a9:ab:27:c0:31:4c:d1:75:64:0d:b7:5e:
7b:4f:8a:1f:14:8f:bb:c6:23:5d:48:7b:9b:54:71:
cc:87:84:e5:88:49:eb:c9:40:58:ac:b9:bb:ca:35:
5b:44:42:36:5a:1e:6b:59:9c:30:13:51:4a:db:6d:
ed:70:4e:7c:38:a2:f3:a6:d5:57:2a:55:53:d7:28:
e9:05:77:a9:99:2f:cc:a2:dc:fb:ea:5f:73:02:cd:
db:54:13:fc:18:5c:bc:1b:a5:4e:1e:fb:e2:02:b5:
dc:02:10:eb:9d:fd:dd:7d:1b:5b:b4:64:f5:f2:33:
b6:69:5b:4f:14:55:03:5d:bc:b7:c8:29:b2:cf:f1:
62:09:f8:1c:ec:1d:1c:18:3d:84:18:25:86:05:9f:
22:9e:b7:1f:27:40:e9:e8:03:34:8a:df:13:c0:84:
7f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BE:DE:B6:84:0E:AA:6B:76:FD:94:64:D4:A4:F7:6E:ED:AF:F3:79
X509v3 Authority Key Identifier:
keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:3b:6b:54:27:10:72:26:eb:43:ca:07:a8:5b:24:f5:4b:50:
9f:2c:d0:7c:58:65:3e:57:d1:17:7e:5f:d4:94:d5:66:b7:52:
95:19:9e:f8:f0:4b:73:4d:65:34:54:7b:81:33:93:c0:b7:61:
0c:d3:dc:38:84:eb:4c:a8:0a:e9:bf:e8:5c:f6:25:ff:c0:3a:
62:de:6a:88:7b:48:2d:71:85:c5:08:d3:ce:3f:ff:03:59:02:
2e:f9:ac:02:9c:eb:f8:71:c6:8d:4c:52:ce:58:f0:9f:a7:31:
01:a7:07:3a:1e:29:19:fa:80:33:85:12:7c:07:a3:5f:eb:85:
5c:cc:74:49:8c:94:12:6f:ec:05:7b:b9:28:e2:14:ad:86:85:
b3:32:a2:cd:3a:d9:d5:1c:fd:f1:90:3e:95:a1:29:95:2b:f4:
d3:9a:ec:80:32:39:6d:43:da:91:e1:d3:2a:fe:9e:90:8c:dd:
80:1d:e1:5d:61:1c:31:e5:67:4e:c3:43:54:43:82:27:8b:23:
48:34:1a:0e:dc:bd:18:52:bc:5e:c2:ea:b3:8d:83:39:b6:4e:
0e:38:cc:90:ed:15:fc:0d:cd:3d:08:b1:b8:73:74:80:0e:b4:
70:99:6c:9e:7d:f6:15:0b:8e:bc:5a:1f:ea:10:2c:64:e9:66:
20:ee:66:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:13:08 2026 by rpki-client