
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
File: LYC7UpVYC-No2mj7jQPqtI16xss.mft (raw, json)
Hash identifier: 5B+JPt4KIZl9ZWlagl5+Vk6b2J/ZrTa12+1nSDuE8gw=
Subject key identifier: 7C:AE:A5:D9:E3:BA:EA:99:28:6F:99:77:36:0F:FA:E5:F6:3B:E8:40
Authority key identifier: 2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB
Certificate issuer: /CN=A91B7948/serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
Certificate serial: 01AA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
Manifest number: 01A1
Signing time: Sat 19 Sep 2026 04:16:56 +0000
Manifest this update: Sat 19 Sep 2026 04:16:55 +0000
Manifest next update: Sat 26 Sep 2026 04:16:55 +0000
Files and hashes: 1: LYC7UpVYC-No2mj7jQPqtI16xss.crl (hash: yc4EMvlWQpNpS0PBoQvKf1z/W5ZY2g7heVsqYwp0y8w=)
2: 70ED9D2837D111EF99A8011CC4F9AE02.roa (hash: FAxnQBc3ut1xOAAP0lVz2GuEsUZQVko/q3fQ7UeXms8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl
rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7948, serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
Validity
Not Before: Sep 19 04:16:55 2026 GMT
Not After : Sep 26 04:16:55 2026 GMT
Subject: CN=6aae0cb8-3c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a3:31:e6:9b:da:55:a4:89:04:a1:73:76:c6:
23:e3:a2:24:d0:81:20:f1:d5:df:f7:c3:7b:c2:3e:
71:7e:14:19:8e:10:6d:7b:3b:ca:5b:71:6b:56:e7:
64:9b:27:af:4c:91:1c:9e:20:42:1e:3b:10:96:cf:
47:79:c0:b4:b3:b0:d9:d8:66:bd:32:b2:bd:d5:22:
80:a7:2e:34:5e:db:96:9c:a2:18:30:77:53:61:08:
2c:a0:46:e9:c1:21:17:19:d0:3c:04:fc:d6:d0:85:
de:13:4e:3f:25:c2:95:0a:0a:68:18:a8:7b:dc:19:
1f:02:a9:81:21:9a:71:23:fe:8e:1d:08:e0:3e:80:
2d:f4:8e:3f:7e:b0:7f:39:83:55:a7:0c:ea:0d:e0:
dc:69:b3:0f:5a:25:c3:1c:a7:22:dc:0e:4e:fd:50:
4e:3e:b5:02:6b:30:7d:76:3c:b3:bb:c9:3b:f2:77:
34:30:5f:f4:ac:62:ad:4b:fa:51:be:c0:9f:5b:2f:
e3:64:cc:44:40:b1:6a:af:8e:1e:bc:05:6e:f4:fc:
a0:4e:16:d6:28:02:23:f9:3c:17:a6:5a:d8:8d:25:
35:a2:0f:63:4f:6c:78:e7:00:50:de:08:65:7c:49:
5f:4e:b9:cd:8f:ca:8b:a9:d4:55:c8:27:2e:75:7e:
7f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AE:A5:D9:E3:BA:EA:99:28:6F:99:77:36:0F:FA:E5:F6:3B:E8:40
X509v3 Authority Key Identifier:
keyid:2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c2:67:0c:2a:af:e5:cb:bf:b4:72:b0:62:14:28:82:fa:7e:
c7:4c:d3:40:e1:e9:d9:2b:7c:9d:61:5b:58:ef:0f:9f:e3:26:
08:d1:94:5e:63:4a:c2:99:55:b0:fa:c9:f3:8f:35:9c:64:d5:
a5:1e:a4:83:a0:31:11:0d:ce:fd:fe:cd:a1:82:1c:17:ab:e1:
17:a9:8a:70:36:fd:f1:21:dd:2a:62:d1:1a:ff:b1:38:eb:cf:
ee:9b:b0:a6:53:3a:ee:9d:80:87:59:96:ea:20:9b:93:e9:5a:
6a:24:29:31:0e:b4:29:49:fb:13:ef:68:e1:45:b4:7f:fa:c5:
ec:bb:4d:ce:49:18:03:49:cc:ab:7f:e3:19:70:5e:91:b9:2c:
a7:62:2e:7c:20:79:46:51:73:43:af:e9:78:d7:ca:32:90:0a:
cc:2d:e1:ba:3d:be:ff:4a:a7:4c:38:12:2b:79:93:2d:48:77:
6e:23:df:f0:ee:53:84:3b:d0:b9:32:7f:50:c7:1c:ca:9b:50:
cd:b2:35:19:78:24:2f:32:9f:6b:d4:6e:58:6d:40:0d:34:ff:
42:8e:32:2c:66:08:51:d8:ce:99:69:34:e6:fc:99:64:a0:5d:
f6:fe:a3:3c:0d:c5:44:b8:1c:7e:44:8c:4d:f5:d6:65:dd:b6:
2d:b1:05:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:06:08 2026 by rpki-client