
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
File: LByXEgCqxo6oRewP3YfsjFAS8pw.mft (raw, json)
Hash identifier: IQcoXTKRdYeaW4qpi4nkCYDeb1hJRNAXQwPXpmCqGlc=
Subject key identifier: DF:38:78:97:EF:B2:2B:3A:47:34:A9:66:58:40:B7:1B:40:76:D1:D2
Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
Certificate issuer: /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Certificate serial: 0C5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
Manifest number: 0C42
Signing time: Wed 04 Nov 2026 18:58:28 +0000
Manifest this update: Wed 04 Nov 2026 18:58:28 +0000
Manifest next update: Wed 11 Nov 2026 18:58:28 +0000
Files and hashes: 1: LByXEgCqxo6oRewP3YfsjFAS8pw.crl (hash: DUAcRn9FD1i6MBSSddQrBYzklU4EzE27viQs77pg40s=)
2: 24CEDDAAA05511F1ABADFA964111F970.roa (hash: U8ctAF3B6RY5gFom10YS1YLwzsbLU1R1fY8eYV+NVhQ=)
3: 2C23C084A05511F1924EFF964111F970.roa (hash: +UnNrlvqk9fdI23k97EfwWpG/vnHy/lU/5HBsL5TEvQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl
rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 18:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3167 (0xc5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175290, serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Validity
Not Before: Nov 4 18:58:28 2026 GMT
Not After : Nov 11 18:58:28 2026 GMT
Subject: CN=6aeb8054-0d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:df:1d:07:6c:74:7f:58:10:55:a8:5b:73:
ca:db:ac:ac:90:15:ef:d0:7e:85:12:c7:fe:1d:c6:
a5:d5:37:03:9b:f3:8a:ef:f8:64:b7:21:91:d0:9a:
93:bb:4c:13:20:05:8d:1b:43:e9:2d:47:56:b9:30:
14:91:10:45:c8:30:7a:e6:c2:f5:2e:d2:e2:0c:ca:
16:89:87:3c:ed:36:f3:3f:7e:c7:14:74:f2:7e:14:
5a:2d:aa:9f:ee:38:e3:7e:10:62:28:1d:d4:31:e1:
5c:7e:af:7c:cc:96:cb:3c:5c:bd:74:d1:d0:49:8f:
ed:73:05:54:9a:9e:c6:ae:22:f8:e0:95:f4:29:85:
3a:d3:51:60:e0:d7:3f:79:f0:c2:53:1f:50:ff:31:
54:7f:5d:ba:a6:56:33:63:c8:10:a9:07:ae:dd:85:
d4:64:c9:08:28:07:34:cc:e5:2a:2c:a5:b5:df:4b:
c3:cb:1a:9d:b1:ac:37:25:75:f0:4a:ff:c7:74:e9:
07:c8:71:32:b4:df:f8:e7:a8:d4:7d:06:c1:c7:25:
d2:a6:07:e5:8d:84:f9:70:72:3d:e0:4c:d7:a8:e6:
ed:2e:9e:1d:91:aa:79:c9:63:ac:b6:36:1e:82:e4:
af:10:d7:c1:6d:a8:8c:22:b7:16:a0:b4:23:e7:b1:
b9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:38:78:97:EF:B2:2B:3A:47:34:A9:66:58:40:B7:1B:40:76:D1:D2
X509v3 Authority Key Identifier:
keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:cc:3f:48:cf:3b:db:c6:b2:f2:f0:d9:db:c4:e7:86:a7:d4:
4e:ce:48:58:46:2e:88:4e:0c:a6:3d:b0:ff:88:13:0d:3c:7b:
02:bf:d2:e2:54:e8:f6:da:0a:cd:13:3b:79:f6:f5:17:58:df:
e7:60:f8:14:da:a6:97:71:b0:3c:a9:b4:5b:8a:2e:d5:51:b7:
ae:9a:d5:6e:bf:7e:3d:99:f3:4c:19:52:88:49:92:b7:fc:ea:
5d:01:81:83:7f:9c:ba:43:38:17:43:c9:58:85:d3:f1:33:70:
41:6c:c4:1c:ea:ff:21:f6:ae:89:d2:1f:42:75:d7:52:39:9e:
a9:6d:81:7c:78:0a:ee:6a:4d:67:b0:6c:29:53:d1:75:54:09:
73:2a:63:ec:33:31:3d:e1:bf:c1:90:8c:f6:a9:4b:70:f0:c7:
ce:24:ee:8f:4c:a2:f5:ff:ab:df:be:59:e5:00:8a:12:f0:4a:
7f:5f:c2:e3:c0:bc:b9:c0:0c:28:e0:2f:bb:f9:a2:8a:4e:d2:
f4:78:0a:1e:c0:c2:6c:8f:04:3d:d4:32:11:ba:65:ff:ab:83:
86:89:0f:72:17:f7:93:18:6f:c5:61:18:f2:1c:a7:ba:90:fa:
61:1d:26:ff:65:86:05:b3:7a:b4:4a:91:22:c8:04:e6:d8:96:
96:83:5b:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUyOTAxMTAvBgNVBAUTKDJDMUM5NzEyMDBBQUM2OEVBODQ1RUMwRkREODdFQzhD
NTAxMkYyOUMwHhcNMjYxMTA0MTg1ODI4WhcNMjYxMTExMTg1ODI4WjAYMRYwFAYD
VQQDEw02YWViODA1NC0wZDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsivfHQdsdH9YEFWoW3PK26yskBXv0H6FEsf+Hcal1TcDm/OK7/hktyGR0JqT
u0wTIAWNG0PpLUdWuTAUkRBFyDB65sL1LtLiDMoWiYc87TbzP37HFHTyfhRaLaqf
7jjjfhBiKB3UMeFcfq98zJbLPFy9dNHQSY/tcwVUmp7GriL44JX0KYU601Fg4Nc/
efDCUx9Q/zFUf126plYzY8gQqQeu3YXUZMkIKAc0zOUqLKW130vDyxqdsaw3JXXw
Sv/HdOkHyHEytN/456jUfQbBxyXSpgfljYT5cHI94EzXqObtLp4dkap5yWOstjYe
guSvENfBbaiMIrcWoLQj57G5/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN84eJfv
sis6RzSpZlhAtxtAdtHSMB8GA1UdIwQYMBaAFCwclxIAqsaOqEXsD92H7IxQEvKc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5MC9CRUY0NTkwMjNG
NkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhvNm9SZXdQM1lmc2pGQVM4
cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xCeVhFZ0NxeG82b1Jld1AzWWZzakZBUzhwdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTI5MC9CRUY0NTkwMjNGNkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhv
Nm9SZXdQM1lmc2pGQVM4cHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI8w/SM8728ay8vDZ28TnhqfUTs5IWEYuiE4Mpj2w/4gTDTx7Ar/S4lTo9toK
zRM7efb1F1jf52D4FNqml3GwPKm0W4ou1VG3rprVbr9+PZnzTBlSiEmSt/zqXQGB
g3+cukM4F0PJWIXT8TNwQWzEHOr/IfauidIfQnXXUjmeqW2BfHgK7mpNZ7BsKVPR
dVQJcypj7DMxPeG/wZCM9qlLcPDHziTuj0yi9f+r375Z5QCKEvBKf1/C48C8ucAM
KOAvu/miik7S9HgKHsDCbI8EPdQyEbpl/6uDhokPchf3kxhvxWEY8hynupD6YR0m
/2WGBbN6tEqRIsgE5tiWloNbow==
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:52:44 2026 by rpki-client