
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
File: LYC7UpVYC-No2mj7jQPqtI16xss.mft (raw, json)
Hash identifier: vJLEvJh+5wgFcMw64zRonnPW5Uj7Vqq7gQB8kFNoROw=
Subject key identifier: 33:29:A9:DD:35:19:BA:88:7E:B9:DD:95:67:81:CB:38:49:01:B4:53
Authority key identifier: 2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB
Certificate issuer: /CN=A91B7948/serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
Certificate serial: 01C2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
Manifest number: 01B9
Signing time: Thu 05 Nov 2026 04:44:31 +0000
Manifest this update: Thu 05 Nov 2026 04:44:31 +0000
Manifest next update: Thu 12 Nov 2026 04:44:31 +0000
Files and hashes: 1: LYC7UpVYC-No2mj7jQPqtI16xss.crl (hash: nJKxy6MMRLMlBzrh/4RDDouryEEBocZDqeT4JPGcqD0=)
2: 70ED9D2837D111EF99A8011CC4F9AE02.roa (hash: FAxnQBc3ut1xOAAP0lVz2GuEsUZQVko/q3fQ7UeXms8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl
rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 04:44:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450 (0x1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7948, serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
Validity
Not Before: Nov 5 04:44:31 2026 GMT
Not After : Nov 12 04:44:31 2026 GMT
Subject: CN=6aec09af-38a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:86:18:7c:7c:d0:ec:74:b4:62:34:31:69:d7:
d1:40:4f:5e:87:ae:8e:f7:4f:ee:c1:db:92:45:37:
3b:f0:22:18:04:eb:0f:db:8a:ad:10:aa:69:a3:eb:
2b:f7:c2:33:3c:da:a0:c5:43:31:33:91:b9:b0:ed:
6b:0e:08:7d:28:ff:06:79:8f:2e:d7:b6:2d:b9:06:
19:cf:19:c1:bd:87:40:94:b4:27:45:4d:a7:11:e9:
54:59:d1:24:85:b5:5f:96:3b:dc:84:af:bf:25:00:
fd:be:fa:29:30:ad:14:c6:f2:4a:c6:b7:8e:79:82:
00:60:b7:c7:b8:62:c8:6b:b5:d3:1c:7a:22:30:8a:
6c:cf:62:e1:b0:7c:ad:b8:e7:2d:67:ed:65:8a:00:
1e:50:76:37:93:ae:3b:7e:78:98:71:90:20:f1:80:
43:ad:da:2d:d8:f3:4e:dd:7a:e8:c5:4a:ce:9b:54:
a7:c3:98:94:04:e6:f9:a7:6c:80:0b:ec:c9:81:9a:
29:27:f4:af:91:1b:32:d7:f4:dc:7f:e2:8e:f2:41:
25:97:7d:f8:a2:ab:ae:85:6a:8a:12:2c:30:02:83:
31:8f:e5:9a:f9:78:a8:77:88:42:15:0f:9e:86:33:
11:fd:c7:cd:86:25:e7:ff:eb:76:8e:1c:bc:ad:98:
06:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:29:A9:DD:35:19:BA:88:7E:B9:DD:95:67:81:CB:38:49:01:B4:53
X509v3 Authority Key Identifier:
keyid:2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:fe:b9:3f:f9:c5:f4:43:82:96:c0:2d:bf:56:ba:58:0c:62:
ec:58:b5:82:52:f2:d7:92:07:1b:ab:75:87:78:1c:a8:37:e2:
6d:60:d4:25:9e:11:d8:39:95:84:df:30:61:58:64:76:5e:82:
51:28:8d:09:4c:7b:e0:1e:66:36:17:e6:38:a8:78:f6:0f:58:
44:16:a9:a3:82:49:97:52:2c:af:3e:b0:e8:c5:34:25:30:70:
9f:3c:be:36:eb:5e:66:65:98:81:af:b3:85:75:0e:23:6e:be:
9f:7c:75:ae:86:50:52:ef:f3:8e:a4:b4:5c:db:42:25:f5:36:
bf:e4:2f:84:54:c1:b1:52:89:18:03:69:a8:b5:74:a1:a7:a0:
a8:7c:23:95:32:d3:2c:9c:df:bc:8b:c0:6e:06:2c:9a:d2:c0:
5b:8c:f3:4f:be:2a:85:52:0f:68:79:7b:87:4a:8a:55:fe:17:
f9:10:83:ad:20:18:64:90:85:b1:07:c6:80:a0:ce:2f:28:50:
d6:a7:21:aa:13:6f:ad:24:0d:f0:fe:2f:9c:99:d5:7a:b0:24:
9d:00:9f:ec:10:d3:b3:12:ec:29:17:bf:1b:18:22:ca:51:c8:
47:e9:f8:0d:01:da:72:96:c4:41:43:85:a7:7e:6e:8e:1a:26:
e8:41:d9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:58:15 2026 by rpki-client