
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
File: LByXEgCqxo6oRewP3YfsjFAS8pw.mft (raw, json)
Hash identifier: rHINRHoTyKGFwpGuF5rrh7n8RehimJbxnXIFnbE0fBs=
Subject key identifier: A8:C6:37:D3:9B:EA:AA:C1:DC:D3:7E:CF:F1:1E:DB:9B:99:F6:20:7C
Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
Certificate issuer: /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Certificate serial: 0C28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
Manifest number: 0C0D
Signing time: Tue 28 Jul 2026 19:07:08 +0000
Manifest this update: Tue 28 Jul 2026 19:07:07 +0000
Manifest next update: Tue 04 Aug 2026 19:07:07 +0000
Files and hashes: 1: LByXEgCqxo6oRewP3YfsjFAS8pw.crl (hash: g8IFfSL4M3DRjnd6P9JptNM1tdwPa5l5656mhGEH3cI=)
2: E57CEB8E15BC11F0B0C4DA24C4F9AE02.roa (hash: KSLYVs16SK4lbuhA+tQMeKNyI28wiMaASlGHFe6M7ro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl
rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3112 (0xc28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175290, serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Validity
Not Before: Jul 28 19:07:07 2026 GMT
Not After : Aug 4 19:07:07 2026 GMT
Subject: CN=6a68fddc-dc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:78:3b:18:7c:1e:1a:bf:61:c7:29:b9:f9:2f:
31:d5:fd:16:38:d7:63:14:26:e0:bf:b0:9b:bc:8c:
f4:f0:ce:b4:f2:78:0c:75:1c:ab:b2:b2:e3:9f:f9:
52:7e:ec:e4:8d:42:42:db:c3:9d:f9:b8:6b:30:63:
fc:3a:61:55:a2:d4:8c:fb:aa:72:e9:13:e9:e5:c7:
aa:8c:77:a6:6c:24:61:83:97:ab:84:93:29:23:0a:
69:83:f0:d3:44:10:e4:c9:f5:b8:1b:89:7d:46:f6:
e3:f6:03:01:ac:f3:1b:18:07:40:4b:22:7c:f4:7f:
9d:51:91:27:7f:77:6e:e0:4a:d8:44:0c:c7:25:d6:
15:02:0b:03:89:b7:ab:dc:c3:43:4d:33:bb:76:ce:
1c:f6:9d:98:44:c7:70:e1:f1:17:fc:1e:a5:a7:b2:
b9:76:2f:73:c9:b9:08:bc:9f:ac:7f:0e:9d:59:f6:
92:de:86:d9:c8:31:66:47:17:b7:6e:ad:89:2c:e4:
6f:fa:c5:a9:91:94:3f:dc:7c:26:5a:fe:44:7d:69:
ef:8e:b6:61:e7:cb:40:78:8e:f4:eb:fc:45:7f:64:
84:58:bf:61:7b:5a:10:da:09:98:bf:0d:40:0a:74:
0d:b9:f2:29:2b:52:4a:c4:04:ac:b6:ba:66:c4:89:
b0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C6:37:D3:9B:EA:AA:C1:DC:D3:7E:CF:F1:1E:DB:9B:99:F6:20:7C
X509v3 Authority Key Identifier:
keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:42:f7:a3:6b:d9:33:f3:b9:6a:c9:ef:7a:38:3b:10:ab:06:
7a:1e:03:77:56:6e:12:89:85:33:c0:a7:f8:42:bb:2f:00:b0:
24:44:2d:2c:22:26:62:c5:c2:dd:1d:5f:e0:0a:7f:f2:99:61:
22:e1:3c:56:ff:88:3c:8b:2a:91:fb:72:50:de:52:e9:06:06:
11:7a:49:48:d1:8d:d6:39:92:f3:b9:a2:aa:dc:a3:ba:01:ec:
cc:bd:30:f1:53:18:c1:21:d6:97:cc:65:b1:b2:08:74:f3:e7:
44:eb:2a:b7:a8:58:fd:39:b2:ca:d0:da:c6:fd:7c:e8:bc:b9:
ca:d1:76:ce:38:23:fc:1c:6d:b5:61:e7:bf:dd:8b:dd:1a:f0:
0d:b0:fa:d9:73:19:94:33:cd:35:a7:59:32:6e:cf:ea:5f:a0:
1c:1d:67:9c:f7:57:84:d9:61:4c:e9:d4:49:f8:d3:e6:f5:77:
ef:7b:7b:4d:12:9f:5c:50:d1:5d:27:ff:4f:c1:05:52:6e:10:
3a:cc:a1:47:b1:a4:b6:f5:87:ba:31:c4:14:7e:06:30:c1:2a:
a7:24:9c:a4:39:84:4c:99:42:3c:28:35:13:cc:37:de:e4:6f:
50:41:de:7e:50:84:de:79:19:bb:88:70:0c:79:92:83:b0:c2:
c3:75:f5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:39 2026 by rpki-client