
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft
File: lyuQ2cUZIlatlkdbOSurGnp5zC0.mft (raw, json)
Hash identifier: 1UomF1Coz0xKwnq3nu2H9I11R+uDNsdimfMisAcIH1k=
Subject key identifier: 76:C5:9A:88:21:21:64:50:D6:D6:EB:A5:C5:5C:09:75:0B:6D:95:3B
Authority key identifier: 97:2B:90:D9:C5:19:22:56:AD:96:47:5B:39:2B:AB:1A:7A:79:CC:2D
Certificate issuer: /CN=A9132FD9/serialNumber=972B90D9C5192256AD96475B392BAB1A7A79CC2D
Certificate serial: CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft
Manifest number: C8
Signing time: Thu 21 May 2026 06:58:33 +0000
Manifest this update: Thu 21 May 2026 06:58:33 +0000
Manifest next update: Thu 28 May 2026 06:58:33 +0000
Files and hashes: 1: lyuQ2cUZIlatlkdbOSurGnp5zC0.crl (hash: H2lAyGZQE709qySn1pV5+27CgVhTUvUik6B7YZoMJKo=)
2: DCC2224A313011F0BE214A64C4F9AE02.roa (hash: Yx+85CHClvGSKZhhotbyNhG5+qEsDCcgpA+sR6zn7rc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.crl
rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132FD9, serialNumber=972B90D9C5192256AD96475B392BAB1A7A79CC2D
Validity
Not Before: May 21 06:58:33 2026 GMT
Not After : May 28 06:58:33 2026 GMT
Subject: CN=6a0ead19-4671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4a:7f:f4:91:79:99:53:f1:7f:76:1b:bc:1d:
37:a0:80:8b:37:67:7e:24:85:fa:c4:a8:5e:32:03:
6d:89:bb:bb:ed:de:af:80:ba:c2:71:6d:43:43:43:
d3:91:2a:63:a3:db:23:0b:7c:dd:7b:84:de:2e:67:
a7:ad:14:c7:d1:cf:da:72:dd:9b:91:80:79:42:9f:
49:82:df:ef:83:f9:26:2a:d8:6a:38:be:51:1e:57:
ae:92:88:ac:ac:4d:63:e2:5f:06:8f:6d:0f:40:49:
e8:f5:1a:af:f4:5c:5f:49:a5:68:80:b1:16:51:23:
a3:de:6f:41:93:e1:54:0a:01:a8:43:ee:b7:b5:cb:
31:05:c8:76:5d:17:b3:fa:c3:02:23:4f:5d:2f:b2:
d8:69:bb:2b:20:3f:25:43:30:8b:04:81:d3:b3:73:
6d:e0:83:24:66:12:b7:17:0c:43:f5:0a:ea:eb:72:
a6:a1:72:5f:11:43:7a:ae:32:04:7b:da:6c:aa:e2:
a0:fe:c3:e6:58:45:f7:70:d4:7f:78:d2:bc:cb:84:
76:97:12:c8:84:da:ad:51:f3:1c:3b:f2:4c:af:9e:
8b:55:7a:de:d2:07:ff:27:eb:ad:8e:b7:65:d3:bd:
ab:bc:d3:70:38:45:0d:d7:fb:30:20:83:49:16:3d:
3f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C5:9A:88:21:21:64:50:D6:D6:EB:A5:C5:5C:09:75:0B:6D:95:3B
X509v3 Authority Key Identifier:
keyid:97:2B:90:D9:C5:19:22:56:AD:96:47:5B:39:2B:AB:1A:7A:79:CC:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:c9:12:8e:b4:c8:43:02:1d:17:11:56:94:6b:dd:d6:22:6f:
ee:54:91:df:af:ac:f9:08:f5:65:40:23:ea:56:0e:c5:82:a9:
0f:bd:aa:ca:63:8f:97:e0:e0:61:42:78:0d:c0:ff:af:f6:d7:
6a:05:bd:04:95:9e:59:a6:9d:00:0d:3c:cc:73:82:cc:ed:2b:
3d:e0:c0:2d:ae:db:71:6b:e1:eb:ad:6a:34:dc:82:eb:ea:9f:
1e:aa:62:20:a9:5f:5b:ba:55:ce:52:7d:85:f8:f1:b7:9d:20:
55:99:3d:e1:f6:89:8f:7f:b8:60:2a:46:79:95:03:a1:72:9d:
49:b2:6e:b2:03:ca:cc:37:69:85:b6:33:2a:70:a8:b1:2b:dc:
0e:ad:cd:ea:ee:1d:63:f4:a7:06:ea:2a:a4:f2:65:40:f2:09:
78:f2:44:44:c8:23:4a:96:10:43:91:01:38:5c:62:00:fd:0c:
a3:26:32:68:6f:88:d0:00:c0:ee:41:0b:38:b0:91:dc:32:71:
49:45:2e:70:af:5e:18:88:9a:d8:28:a9:48:22:24:d3:52:ff:
db:be:0d:a2:77:2d:02:13:0e:17:be:b4:5d:86:75:f2:49:0b:
c0:6f:e2:b8:a1:d7:25:b5:33:2b:cb:81:db:06:61:49:69:c2:
b8:f3:bd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:29 2026 by rpki-client