
$ rpki-client -vvf rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
File: LyR3675WsNegrUTCcX21_ggNyug.mft (raw, json)
Hash identifier: tQSD/b5Skb7GvE2Tkzfi/z4ioYkeGwJvkt7JuZKV/9k=
Subject key identifier: BA:4D:F2:1D:CA:0D:C0:94:CB:B7:70:79:9A:D9:96:1E:A4:12:BF:BF
Authority key identifier: 2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8
Certificate issuer: /CN=A91479A7/serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8
Certificate serial: 021F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
Manifest number: 0205
Signing time: Tue 17 Mar 2026 02:27:03 +0000
Manifest this update: Tue 17 Mar 2026 02:27:02 +0000
Manifest next update: Tue 24 Mar 2026 02:27:02 +0000
Files and hashes: 1: LyR3675WsNegrUTCcX21_ggNyug.crl (hash: QK3QmZ3RN6UVyg3CsZX/QiR/Uglssc2YPSQ/Hxll+vg=)
2: 7EF0B0AC4D9B11EEB019A31FC4F9AE02.roa (hash: 85ndJ25GkWksXdD2wkzQ2/smQ3lSHNtoozH+Avdk67k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl
rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 24 Mar 2026 02:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 543 (0x21f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91479A7, serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8
Validity
Not Before: Mar 17 02:27:02 2026 GMT
Not After : Mar 24 02:27:02 2026 GMT
Subject: CN=69b8bbf7-66f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8a:0a:43:2b:e6:eb:97:d0:f7:14:f1:bf:26:
91:4c:33:d0:96:0c:f8:12:05:0c:7e:a2:60:e5:6e:
c5:72:40:d1:66:ff:f4:8e:da:7f:2e:26:a8:c8:6b:
a3:9f:3b:28:18:fb:ae:75:b6:e3:65:9b:4b:2a:68:
5e:ce:9e:aa:e0:aa:d8:5d:62:72:c6:c7:8a:dc:0b:
79:47:88:bf:f8:59:79:37:6c:a4:d9:02:e2:3d:32:
f7:c0:51:92:8a:79:64:7d:94:55:a4:db:5e:8a:b0:
65:89:29:37:80:41:4f:38:2f:61:7f:93:16:fe:77:
14:48:21:30:05:6a:f6:14:ab:47:33:a5:a5:ee:e3:
50:28:f1:02:05:fe:b1:89:6b:0e:1f:c7:37:38:3b:
1c:2d:3d:d9:cb:99:29:35:73:56:05:df:cd:3b:c9:
e4:9b:00:b0:05:19:f0:e1:91:c9:9c:15:07:94:36:
66:d1:f9:3a:12:d4:23:59:8f:8b:b7:56:6c:11:f3:
2f:ac:fa:a4:31:44:d0:af:6d:54:ca:63:a5:38:13:
40:fd:b2:ad:7c:30:f6:40:9e:16:36:e0:84:7d:ff:
47:17:90:e8:71:c1:01:88:99:11:c5:df:42:8c:0b:
10:50:b3:65:0d:2e:98:47:b1:65:66:ad:20:ea:49:
a0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4D:F2:1D:CA:0D:C0:94:CB:B7:70:79:9A:D9:96:1E:A4:12:BF:BF
X509v3 Authority Key Identifier:
keyid:2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:be:44:d8:e2:19:27:6a:aa:9b:62:58:54:57:59:2d:00:67:
60:96:8d:fd:23:30:e1:42:77:0e:d9:43:e8:8f:c6:fe:2d:af:
a4:83:36:73:11:a4:f7:42:1c:a9:1a:99:b3:9f:b8:4f:10:93:
83:13:8a:59:58:d9:a6:a4:1a:b9:64:d9:c6:41:6e:42:fe:1b:
f3:f7:5e:2b:11:1f:1d:a3:6d:91:af:0a:06:7d:ef:6a:98:f8:
aa:85:60:b7:a6:b1:fd:06:63:db:ee:15:9b:93:b4:5a:d5:f9:
fd:4c:41:b5:0a:95:24:9a:5f:d6:42:c9:5d:d9:1b:81:8d:25:
c3:2d:db:23:4a:b0:d3:31:71:a2:14:80:a3:cc:84:79:42:06:
2b:61:88:87:ce:d0:bf:51:77:76:2b:6a:67:21:c7:c6:70:47:
f9:22:aa:3c:50:c3:63:29:99:5e:99:78:f8:42:6f:19:b4:3b:
73:86:f1:d9:c9:4d:d8:bb:90:5e:0c:54:e6:57:1f:f6:a6:8a:
42:1a:eb:28:cd:80:e5:0f:52:12:28:6a:bc:71:86:06:a4:04:
fc:95:25:8e:4d:f2:93:21:e0:1f:f1:17:ee:45:4d:ca:63:9b:
1a:ed:0d:69:d7:b3:63:e7:24:aa:77:3b:18:39:74:b7:aa:52:
89:a1:dc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 11:04:45 2026 by rpki-client