
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft
File: lyuQ2cUZIlatlkdbOSurGnp5zC0.mft (raw, json)
Hash identifier: Gi1hhm67wSQPQnFOGoX9srOoD5Pu7hYBkwd0GgUTmeM=
Subject key identifier: 48:70:DA:7C:B1:43:E0:29:A7:71:37:C0:EC:61:71:D7:76:E5:9C:69
Authority key identifier: 97:2B:90:D9:C5:19:22:56:AD:96:47:5B:39:2B:AB:1A:7A:79:CC:2D
Certificate issuer: /CN=A9132FD9/serialNumber=972B90D9C5192256AD96475B392BAB1A7A79CC2D
Certificate serial: 010C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft
Manifest number: 0106
Signing time: Mon 21 Sep 2026 06:08:36 +0000
Manifest this update: Mon 21 Sep 2026 06:08:35 +0000
Manifest next update: Mon 28 Sep 2026 06:08:35 +0000
Files and hashes: 1: lyuQ2cUZIlatlkdbOSurGnp5zC0.crl (hash: 9OXG7M2kXYICGWWEhDqNaZ834uTLPm+9zJ5YxOIjZJg=)
2: DCC2224A313011F0BE214A64C4F9AE02.roa (hash: Yx+85CHClvGSKZhhotbyNhG5+qEsDCcgpA+sR6zn7rc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.crl
rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132FD9, serialNumber=972B90D9C5192256AD96475B392BAB1A7A79CC2D
Validity
Not Before: Sep 21 06:08:35 2026 GMT
Not After : Sep 28 06:08:35 2026 GMT
Subject: CN=6ab0c9e4-a24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:69:e3:50:ef:73:0e:f4:9e:eb:52:26:22:d0:
3b:8d:4e:91:74:d9:e8:d0:a1:ac:65:f4:71:84:85:
82:9d:8a:ed:56:79:c9:4a:50:9d:3c:0a:e6:ac:a7:
bb:36:5b:fe:41:ec:71:07:9e:94:09:c4:ec:ff:ae:
94:a4:d1:0e:e9:fe:4d:1c:70:e5:8b:3b:ef:08:f4:
ab:53:d7:f6:af:9b:4a:bb:d6:be:f6:99:43:10:9b:
a5:b2:5f:aa:5c:37:df:d6:f2:86:ca:c4:32:06:a6:
0f:14:be:d8:55:69:53:49:9d:4d:4c:e2:a7:7e:b2:
21:6f:f7:54:d8:e5:eb:f8:d6:56:6f:6b:ba:80:fa:
ca:6a:e2:4c:07:d7:7f:1b:dc:8e:50:93:a6:e1:90:
41:79:7b:60:05:4d:85:88:d9:e9:7f:2f:97:36:c6:
45:ef:a2:80:9a:ba:18:c2:56:9c:42:d3:71:79:fe:
ca:4e:f1:04:74:09:e5:5f:e0:97:66:dd:75:3b:14:
23:ce:ae:86:13:27:93:b3:54:be:35:c8:8d:55:7a:
e5:cc:59:89:1c:99:18:3e:32:3c:c0:c2:8a:3d:ee:
7d:f6:2a:8a:79:cc:be:e4:10:86:6c:ed:03:cb:9e:
4f:01:43:18:50:5e:12:37:c7:eb:a1:76:f6:02:74:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:70:DA:7C:B1:43:E0:29:A7:71:37:C0:EC:61:71:D7:76:E5:9C:69
X509v3 Authority Key Identifier:
keyid:97:2B:90:D9:C5:19:22:56:AD:96:47:5B:39:2B:AB:1A:7A:79:CC:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:54:b8:21:41:99:8b:3b:60:2c:7d:0d:8f:73:a8:80:87:ee:
b5:b2:05:dd:9b:25:fc:fa:26:91:6c:55:c6:93:a4:06:0d:2e:
6d:7d:74:a4:b2:65:7b:d7:91:ad:c8:18:ee:4c:05:54:6f:75:
0c:73:88:c0:98:4d:df:c8:16:45:c7:8a:a2:b3:e5:5e:e3:a7:
cf:dd:e9:25:36:f1:0f:67:0a:9f:41:09:4e:6b:38:36:10:10:
a9:54:fa:1b:da:32:37:62:13:29:75:d6:37:cb:07:a6:81:25:
b2:14:b7:df:ef:34:4f:06:38:fa:59:d7:6f:f6:63:ff:b1:82:
b0:65:c4:a5:e4:a2:b5:84:fc:64:14:ec:cf:f4:32:e7:9e:a6:
ff:d4:16:6b:3f:5e:65:14:b8:c3:12:f7:b7:ae:ea:45:52:f7:
7d:7e:e0:65:fe:6c:f7:c0:bb:03:bb:1c:be:23:a8:57:79:f6:
c7:ea:dc:72:ed:a3:37:7b:23:b3:54:fd:db:ce:3c:1b:b4:f6:
4a:a9:ba:64:cf:e8:80:98:4c:65:b4:8c:dc:9c:a1:32:58:91:
c5:d7:24:2c:56:71:ca:65:6c:98:5d:28:c4:e8:36:26:b8:33:
f1:23:6b:f6:15:a0:d6:58:10:b9:d0:62:14:f2:a8:6b:33:83:
55:5f:76:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:43:30 2026 by rpki-client