
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
File: LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft (raw, json)
Hash identifier: 1v9fyfa8yK6bGjBcT+y7RBmxb23kvsu9dp4hVHavs8s=
Subject key identifier: 7D:A1:43:41:9E:00:DF:2F:0F:9C:ED:08:AA:DF:1C:84:B2:00:4A:4C
Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C
Certificate issuer: /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C
Certificate serial: 0754
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
Manifest number: 0741
Signing time: Mon 26 Oct 2026 21:52:53 +0000
Manifest this update: Mon 26 Oct 2026 21:52:52 +0000
Manifest next update: Mon 02 Nov 2026 21:52:52 +0000
Files and hashes: 1: LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl (hash: rkzw35ev1x9pdxaSJ/njVRCjXO34b4YbD34Z+GxZEJo=)
2: 579FE34A0BF211EF8B0F9C81C4F9AE02.roa (hash: 2QQLdWByWmzyDLm9K7Etw2tEiz/l3b7pU56fbAv1SHo=)
3: 8CBE17540BCF11EF80BE8E0CC4F9AE02.roa (hash: K5LcOR8cOoj1G9hwCRlc2w0NxNadpML+5njvncofuUc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl
rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 21:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1876 (0x754)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91203EB, serialNumber=2F265B0C802473094926890A85124E21B109DA3C
Validity
Not Before: Oct 26 21:52:52 2026 GMT
Not After : Nov 2 21:52:52 2026 GMT
Subject: CN=6adfcbb4-55d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:60:dd:91:ad:40:0d:34:8f:28:aa:b6:bc:
bf:8b:14:08:e4:e5:19:13:8f:01:d7:ee:f0:3d:41:
f8:7c:9f:ce:54:e3:96:55:06:62:ac:cd:9d:aa:54:
e8:2c:6b:5e:ac:29:99:01:96:d2:85:60:57:38:69:
42:65:bc:36:98:3c:c9:3f:a4:9f:db:32:36:cd:7d:
c0:8b:39:4e:3f:b7:13:aa:58:7a:08:d8:ed:6e:01:
47:bd:1a:fa:b3:41:a6:bf:fa:e8:a7:06:52:64:b0:
ea:52:2b:e6:9c:a2:32:d7:35:6b:94:32:25:52:c1:
e6:d0:9c:70:dd:9e:e4:46:05:76:03:b9:e5:1d:e9:
63:13:d7:51:80:83:20:be:0c:33:35:ce:30:71:ab:
95:1c:25:7e:f3:55:c8:39:2a:58:f3:43:eb:a9:a3:
b4:2f:c8:e1:c9:18:c1:94:81:fb:b2:fa:54:4d:45:
e2:39:67:49:1c:33:ff:78:e2:ec:7d:a7:ed:d5:b7:
a3:97:e7:6b:05:63:64:dd:e6:a3:95:3e:4d:26:7c:
f6:25:80:91:b4:ce:9e:e7:05:f9:64:0e:35:28:70:
2d:24:1b:d2:28:5f:98:be:ad:87:2c:c2:7e:81:27:
e4:5c:f0:87:4f:94:32:16:90:9b:24:e9:d3:ce:f0:
6b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A1:43:41:9E:00:DF:2F:0F:9C:ED:08:AA:DF:1C:84:B2:00:4A:4C
X509v3 Authority Key Identifier:
keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:07:0d:e4:9c:d7:70:89:12:c2:ad:ba:34:2d:3c:90:1e:52:
1c:53:85:68:68:85:50:92:f0:08:c1:15:c1:b7:2e:5b:cd:21:
8f:35:36:6b:81:c1:2b:e5:c6:7d:8d:02:91:4b:34:04:13:47:
ce:90:01:31:2c:e9:98:82:b6:e3:1b:0b:cf:62:18:0b:3a:ba:
bb:75:82:00:3c:f7:9c:e6:06:aa:3c:86:23:6c:c3:f0:8d:85:
f7:79:33:73:e5:f6:3d:0a:1c:16:7c:24:64:a0:6e:31:89:60:
e0:34:8b:11:93:29:94:9f:cd:2d:30:e4:73:98:1f:50:6a:b0:
34:3b:5e:6e:6a:e7:7b:64:35:1d:8c:50:d3:8a:5a:92:5e:34:
d5:79:fc:d8:1b:f1:08:63:5d:81:36:fd:ab:b9:66:6c:4e:7e:
6f:64:b5:8c:d3:18:b7:c3:a9:86:8d:24:20:5f:54:84:ed:60:
e2:f1:2d:89:ec:15:f7:b3:88:1c:22:40:83:6a:64:31:63:94:
c0:76:13:be:e8:b8:15:f1:68:fc:f7:76:a7:02:6b:40:bc:9b:
5b:5a:b7:5e:a0:8c:89:39:53:ba:10:d9:d5:8a:20:26:49:f0:
6f:f6:78:1b:09:54:0b:c8:af:78:cd:56:93:9d:d9:df:2a:41:
8f:8f:48:8d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjAzRUIxMTAvBgNVBAUTKDJGMjY1QjBDODAyNDczMDk0OTI2ODkwQTg1MTI0RTIx
QjEwOURBM0MwHhcNMjYxMDI2MjE1MjUyWhcNMjYxMTAyMjE1MjUyWjAYMRYwFAYD
VQQDEw02YWRmY2JiNC01NWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx+Jg3ZGtQA00jyiqtry/ixQI5OUZE48B1+7wPUH4fJ/OVOOWVQZirM2dqlTo
LGterCmZAZbShWBXOGlCZbw2mDzJP6Sf2zI2zX3AizlOP7cTqlh6CNjtbgFHvRr6
s0Gmv/ropwZSZLDqUivmnKIy1zVrlDIlUsHm0Jxw3Z7kRgV2A7nlHeljE9dRgIMg
vgwzNc4wcauVHCV+81XIOSpY80PrqaO0L8jhyRjBlIH7svpUTUXiOWdJHDP/eOLs
faft1bejl+drBWNk3eajlT5NJnz2JYCRtM6e5wX5ZA41KHAtJBvSKF+Yvq2HLMJ+
gSfkXPCHT5QyFpCbJOnTzvBrbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH2hQ0Ge
AN8vD5ztCKrfHISyAEpMMB8GA1UdIwQYMBaAFC8mWwyAJHMJSSaJCoUSTiGxCdo8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNFQi9GMzYyMkU3NDk3
NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3bEpKb2tLaFJKT0liRUoy
ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0x5WmJESUFrY3dsSkpva0toUkpPSWJFSjJqdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDNFQi9GMzYyMkU3NDk3NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3
bEpKb2tLaFJKT0liRUoyancubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtwcN5JzXcIkSwq26NC08kB5SHFOFaGiFUJLwCMEVwbcuW80hjzU2a4HBK+XG
fY0CkUs0BBNHzpABMSzpmIK24xsLz2IYCzq6u3WCADz3nOYGqjyGI2zD8I2F93kz
c+X2PQocFnwkZKBuMYlg4DSLEZMplJ/NLTDkc5gfUGqwNDtebmrne2Q1HYxQ04pa
kl401Xn82BvxCGNdgTb9q7lmbE5+b2S1jNMYt8Opho0kIF9UhO1g4vEtiewV97OI
HCJAg2pkMWOUwHYTvui4FfFo/Pd2pwJrQLybW1q3XqCMiTlTuhDZ1YogJknwb/Z4
GwlUC8iveM1Wk53Z3ypBj49IjQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 06:05:46 2026 by rpki-client