
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
File: LYDKYjgbJHmcBConufMnPeEiLO4.mft (raw, json)
Hash identifier: zDullAPHr/0tEyQTjxiP1lUrCWc2W6J1ga2/sP4LOCk=
Subject key identifier: AA:07:B8:5F:DD:42:CB:33:39:6B:CD:6F:BA:97:FA:E3:4D:21:00:86
Authority key identifier: 2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE
Certificate issuer: /CN=A9163272/serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE
Certificate serial: 02B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
Manifest number: 02B1
Signing time: Thu 05 Nov 2026 02:06:10 +0000
Manifest this update: Thu 05 Nov 2026 02:06:09 +0000
Manifest next update: Thu 12 Nov 2026 02:06:09 +0000
Files and hashes: 1: LYDKYjgbJHmcBConufMnPeEiLO4.crl (hash: 9rcHFIupaAqERrzssTv9D11f7nTd/RlQ+FMGlL39Big=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl
rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 02:06:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 689 (0x2b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163272, serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE
Validity
Not Before: Nov 5 02:06:09 2026 GMT
Not After : Nov 12 02:06:09 2026 GMT
Subject: CN=6aebe492-9b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:66:2d:9b:e5:c8:2e:5a:eb:a4:a2:6a:99:a9:
49:12:a5:80:c1:60:13:9e:26:79:2e:39:21:2c:2c:
4a:b1:a1:b3:1a:9f:d0:3b:1a:47:a1:d5:cc:1f:6f:
6a:44:3f:28:d3:8d:2f:cc:8e:61:8d:d9:da:08:67:
32:6c:76:d8:81:55:d7:f7:f8:94:94:29:a1:65:8c:
24:c5:89:92:bc:73:91:b6:14:1c:b4:ad:ce:24:08:
01:2f:f7:83:4d:58:31:25:4a:2e:c5:45:47:48:fe:
cb:71:12:f9:28:e9:a3:46:e6:1a:b0:f0:d9:aa:b9:
ea:a5:4a:ad:05:b4:c3:21:d3:c2:a0:a4:22:a1:40:
7d:80:03:b7:1a:27:64:82:d7:49:08:ed:b3:0a:dd:
91:7b:4c:5a:87:d5:c3:03:5d:ce:86:fb:67:f8:b4:
f6:fd:52:24:ba:ef:e5:51:8e:1b:b8:1a:22:56:a5:
54:29:22:bd:cf:ff:eb:a3:77:8d:ff:f9:64:24:25:
ad:15:91:fd:b4:8f:83:c4:08:76:b1:f0:3d:28:91:
77:57:dc:51:55:93:f8:8e:af:16:dd:e9:5a:1c:f7:
c6:79:78:9a:3a:ec:98:57:93:b2:a4:82:0b:ee:ac:
ed:dd:ab:0a:4d:c0:b0:72:7d:f3:0b:16:6d:4f:0a:
72:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:07:B8:5F:DD:42:CB:33:39:6B:CD:6F:BA:97:FA:E3:4D:21:00:86
X509v3 Authority Key Identifier:
keyid:2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:00:7f:14:7c:fd:94:37:f9:81:e7:7a:6d:d2:86:b8:b4:8d:
c0:25:03:2e:0b:df:d3:03:44:a3:24:f8:32:03:bf:6b:cd:1a:
49:3e:d8:39:11:01:4c:db:81:38:f9:47:e2:f5:8e:4c:b2:ee:
a4:a9:f8:35:6d:22:a9:fd:d8:b1:49:97:2d:0a:dd:8d:de:b9:
6d:fc:89:3b:3c:f1:ae:ca:99:b8:12:c9:99:39:38:84:7a:fa:
4d:2c:db:17:00:56:ee:2e:03:81:53:d1:0b:25:df:db:3d:0f:
ce:1b:e6:7e:bb:e4:2f:1d:d1:0a:04:f5:79:58:00:c5:d6:e6:
7a:e9:ef:19:b0:b6:0e:62:e5:1d:86:9c:f5:05:40:44:e9:0d:
f7:ce:ac:89:13:c1:77:fa:d1:8a:e6:20:9a:fb:38:65:8f:41:
d0:57:25:aa:ef:f7:63:63:f3:2c:e3:b7:e5:5e:3b:19:e7:f9:
18:4f:3f:7e:19:29:77:d1:59:e1:65:b5:06:34:c5:8b:20:cc:
c4:fc:73:3a:a4:74:e2:1a:5b:ef:b4:21:99:fa:90:8e:61:0f:
e3:ac:be:f7:e5:50:67:c9:c8:8b:a3:03:ee:c3:57:36:c4:00:
fd:89:2a:de:71:2b:44:46:f9:eb:18:d4:33:31:8c:0a:66:b1:
15:8e:4f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:30:26 2026 by rpki-client