
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
File: LByXEgCqxo6oRewP3YfsjFAS8pw.mft (raw, json)
Hash identifier: sjZ1oUtrQhgWeO1KKopJp3qMkE9B1IThSqYIGa5psDs=
Subject key identifier: 19:5A:59:3C:EC:7E:27:74:49:54:83:B5:3C:0C:16:31:D5:5F:98:3F
Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
Certificate issuer: /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Certificate serial: 0C0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
Manifest number: 0BF2
Signing time: Thu 04 Jun 2026 18:56:35 +0000
Manifest this update: Thu 04 Jun 2026 18:56:35 +0000
Manifest next update: Thu 11 Jun 2026 18:56:35 +0000
Files and hashes: 1: LByXEgCqxo6oRewP3YfsjFAS8pw.crl (hash: wbfLs4cQfNiB9+Jb9qJOOJy+iBoJOGl3+VJ6qM7tdWk=)
2: E57CEB8E15BC11F0B0C4DA24C4F9AE02.roa (hash: KSLYVs16SK4lbuhA+tQMeKNyI28wiMaASlGHFe6M7ro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl
rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 18:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3085 (0xc0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175290, serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Validity
Not Before: Jun 4 18:56:35 2026 GMT
Not After : Jun 11 18:56:35 2026 GMT
Subject: CN=6a21ca63-ce01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:90:31:25:3f:ca:cc:56:27:2c:07:a6:d9:67:
2f:51:f5:81:59:3c:ad:ab:07:a9:c3:98:02:4e:ab:
fe:bb:4f:7b:2e:93:ac:19:8d:5e:6c:d9:fd:e2:35:
3a:a7:15:89:6b:ae:f0:39:a1:b5:b3:21:93:1d:f0:
37:ad:c8:8c:8f:4f:11:7d:d0:da:e3:9d:f4:67:0c:
59:a6:3f:e7:12:d4:be:19:15:9a:53:1e:e7:ff:ba:
2d:c5:6d:51:db:a3:85:6e:90:89:f6:56:b7:cc:24:
0b:8a:32:6b:41:70:73:e1:61:08:be:71:49:64:ea:
e2:86:ea:34:66:80:ee:18:06:49:15:81:e3:09:f3:
7a:56:51:28:c7:24:47:79:e8:dc:c5:35:bb:01:cb:
23:1d:d2:02:0b:63:fe:3d:ec:78:01:5c:dd:d8:2e:
ef:ee:83:9e:87:e8:a2:74:5b:5c:85:30:f8:07:37:
53:e9:35:87:7b:35:a2:94:54:1e:17:b3:b1:c2:7d:
4f:60:fc:f1:7a:39:e7:96:eb:61:f5:01:b8:65:fe:
65:b7:ac:ad:c0:6e:1d:2a:6f:51:52:75:22:6c:8e:
d8:21:f4:37:b1:36:dd:e8:cd:4c:86:72:bb:68:ec:
c1:c3:43:cc:e3:bd:d5:86:77:db:cf:22:5a:1c:2f:
b0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5A:59:3C:EC:7E:27:74:49:54:83:B5:3C:0C:16:31:D5:5F:98:3F
X509v3 Authority Key Identifier:
keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:ce:b0:c3:60:bb:b6:84:ee:9a:05:9b:c6:f3:77:20:ba:23:
72:57:cf:d0:e7:28:d0:ab:ac:e4:e2:6e:64:fa:d2:37:c2:c8:
65:d0:1c:a2:ef:7c:4e:42:dd:e6:4f:44:f2:57:08:c6:67:62:
86:1e:5b:df:4d:73:77:2e:8d:ed:d8:e9:5c:2d:09:30:25:0a:
55:a1:39:92:85:c4:b7:2e:ec:7f:1f:37:9d:c0:9c:b8:cf:07:
8f:59:88:e9:27:d1:84:1b:43:9d:d5:d6:48:19:04:09:98:b8:
a1:ed:5c:ea:f5:89:95:3e:1a:c1:8a:07:93:53:b8:c6:4f:88:
c2:0a:37:b1:81:0f:e0:11:35:23:8c:96:88:4c:d3:b7:05:3f:
37:57:a3:52:ed:a4:09:d1:79:5f:c9:d3:a5:df:c0:ba:a9:67:
7f:80:15:78:72:7d:93:16:b7:12:36:01:23:9e:e9:5c:59:34:
3c:a1:b9:d2:87:1b:11:b9:e8:b1:76:71:00:b1:a4:d7:09:31:
30:0c:02:d6:ea:78:47:fe:d0:fc:86:33:e8:ed:01:ce:31:cf:
0d:11:e5:5d:b8:2a:7c:0a:a3:a0:6a:b9:cb:d5:87:c7:5f:5f:
57:a6:25:ce:68:32:ec:0a:7f:6f:29:a2:c2:27:fc:f2:d8:4b:
40:2f:ba:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:59:09 2026 by rpki-client