
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft
File: lyuQ2cUZIlatlkdbOSurGnp5zC0.mft (raw, json)
Hash identifier: aFUEIlg6J311VM0Q2vIoAZkdJX4/f4E+nyAFR/IJAts=
Subject key identifier: 1E:49:90:2A:FA:67:62:36:06:BD:7C:D3:9F:B4:F9:27:2A:7A:83:48
Authority key identifier: 97:2B:90:D9:C5:19:22:56:AD:96:47:5B:39:2B:AB:1A:7A:79:CC:2D
Certificate issuer: /CN=A9132FD9/serialNumber=972B90D9C5192256AD96475B392BAB1A7A79CC2D
Certificate serial: B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft
Manifest number: B4
Signing time: Wed 15 Apr 2026 06:41:13 +0000
Manifest this update: Wed 15 Apr 2026 06:41:13 +0000
Manifest next update: Wed 22 Apr 2026 06:41:13 +0000
Files and hashes: 1: lyuQ2cUZIlatlkdbOSurGnp5zC0.crl (hash: AMtHKH1QxCM9V5YvQ1Mu1N1j+t7BQW5ZXXDboEeDH6Y=)
2: DCC2224A313011F0BE214A64C4F9AE02.roa (hash: QFbRVf66lkbe54l2PG3KMXf9eXUVn8c/LsTJGZHTzRc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.crl
rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:41:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132FD9, serialNumber=972B90D9C5192256AD96475B392BAB1A7A79CC2D
Validity
Not Before: Apr 15 06:41:13 2026 GMT
Not After : Apr 22 06:41:13 2026 GMT
Subject: CN=69df3309-3a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:26:3e:cc:68:05:dc:32:9c:b2:b2:2c:cc:
ad:63:14:c9:64:0e:d0:37:07:2e:51:08:78:b8:2c:
8c:ba:28:26:2f:d2:c9:b6:d1:e1:6a:bc:da:e6:72:
33:db:62:ac:28:7f:c9:cb:b5:bc:d8:60:40:c8:5f:
f0:c8:70:31:d6:70:fc:5e:be:09:29:15:f9:f6:03:
e7:e3:a0:c9:d7:b9:04:45:40:33:47:86:60:d2:79:
fb:05:0d:80:b7:bc:52:e3:3e:14:c2:da:7c:bd:ca:
da:66:c1:1f:54:c8:27:b9:fa:7f:4a:05:a9:3c:e2:
05:6b:76:71:47:98:2a:fa:27:00:3e:5a:58:e2:80:
4d:d9:22:4b:36:3d:4d:6d:cc:35:2c:31:f8:c9:12:
38:fb:ff:31:80:fa:0a:73:5c:b8:18:6f:02:cb:19:
3a:22:62:25:d0:c7:ae:c4:09:59:9b:ad:bb:c6:19:
f6:0c:dc:36:f3:e5:16:32:1b:54:7c:72:43:d7:4c:
28:03:a3:9f:50:ff:40:cd:70:07:91:32:b0:44:9e:
b5:44:41:e8:76:a4:63:79:48:7a:0a:53:1d:f7:84:
ba:b9:3f:73:aa:a3:c0:b6:15:b5:d9:47:08:0c:2c:
68:2b:28:e1:71:8a:dc:f7:6e:68:bc:86:d5:c7:22:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:49:90:2A:FA:67:62:36:06:BD:7C:D3:9F:B4:F9:27:2A:7A:83:48
X509v3 Authority Key Identifier:
keyid:97:2B:90:D9:C5:19:22:56:AD:96:47:5B:39:2B:AB:1A:7A:79:CC:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:93:b9:1f:64:bf:5f:3d:48:5b:41:af:06:d5:de:be:a2:a9:
c6:06:cc:de:b6:02:2f:10:ca:b0:59:63:78:74:65:26:b8:7d:
17:3a:8c:9e:93:65:09:e0:66:c5:a1:80:df:ca:f4:85:23:af:
d2:7c:1c:f5:29:0b:6c:c9:69:5d:68:96:8b:46:90:8c:b1:f6:
a9:d2:d7:55:19:77:26:03:4e:59:19:68:45:96:14:28:43:c6:
0d:a1:93:60:a3:03:cc:29:2e:7d:fa:af:79:6e:24:fe:23:4b:
cc:ce:1b:83:06:61:aa:4b:4a:7c:09:ce:d0:51:41:70:b7:ca:
b9:63:e6:0e:f5:c5:36:bf:a6:7a:0b:03:fd:d0:6a:92:a5:22:
77:92:7c:34:35:a8:f0:e8:e0:89:48:97:f5:73:46:c8:f8:d6:
41:35:f8:d7:b0:97:03:4f:94:16:9d:d0:0a:aa:9a:91:be:e5:
d2:d1:2d:37:2e:09:f0:b2:61:a1:4b:54:91:6f:b1:5e:ef:2b:
a5:31:e7:93:10:d2:96:e2:18:45:9b:81:df:87:99:b0:b1:78:
6c:eb:43:82:f6:c4:55:89:1e:f9:0a:7d:a9:20:69:ac:95:b6:
73:61:08:46:d9:d8:18:8b:8a:4f:89:d8:85:35:60:a7:a3:56:
76:a6:39:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:55:54 2026 by rpki-client