
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
File: LYC7UpVYC-No2mj7jQPqtI16xss.mft (raw, json)
Hash identifier: kiSQYxsfxYZQUGrDUCV9rMAk6yXsblDXsf8/C5ja5iM=
Subject key identifier: C7:6E:31:24:86:5C:66:FF:8D:07:46:EC:FB:7F:4C:4C:FB:8F:EB:C0
Authority key identifier: 2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB
Certificate issuer: /CN=A91B7948/serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
Certificate serial: 0170
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
Manifest number: 0168
Signing time: Mon 01 Jun 2026 05:34:17 +0000
Manifest this update: Mon 01 Jun 2026 05:34:16 +0000
Manifest next update: Mon 08 Jun 2026 05:34:16 +0000
Files and hashes: 1: LYC7UpVYC-No2mj7jQPqtI16xss.crl (hash: rMw0BAKE1ZlaL7NCLLUNXd7i+c4ae4BlVGS58ouwPN8=)
2: 70ED9D2837D111EF99A8011CC4F9AE02.roa (hash: mOCADM7rUyrVZQHR29QGDW6mWHRCcP7t6l0A8fFGuLc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl
rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7948, serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
Validity
Not Before: Jun 1 05:34:16 2026 GMT
Not After : Jun 8 05:34:16 2026 GMT
Subject: CN=6a1d19d9-1bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a4:e4:e1:09:45:9b:e3:1a:72:6d:72:65:97:
0d:c8:3d:05:e9:4d:9f:71:3a:61:ac:2a:f8:0a:4d:
1b:9b:ad:34:e4:47:d6:da:50:86:83:e0:3e:3e:9f:
e4:53:08:93:90:42:4d:e3:7b:56:68:8e:1b:bd:9c:
36:f7:5b:63:36:99:32:8a:7e:c3:0e:02:88:08:3b:
09:0e:c0:85:bc:8f:0a:f0:44:3f:d4:6c:c6:ef:4b:
4c:b1:71:59:cd:6c:2f:d9:38:26:be:0d:5b:17:91:
2d:64:fd:71:96:a7:95:c3:04:52:8f:10:7b:a1:57:
aa:b2:82:33:04:b1:4d:89:fd:d2:47:4f:75:0c:75:
f4:af:7a:7e:8f:e1:45:1c:c3:7a:99:5e:d5:eb:a3:
1e:20:13:32:ca:da:42:bd:04:4d:a5:87:ca:10:d4:
29:a2:de:95:ed:64:72:86:da:6e:b0:0d:e8:d5:ad:
e4:cd:49:eb:42:34:4c:48:e8:dc:ad:28:45:fd:8f:
2c:2a:1b:ba:1c:d1:cc:d2:31:b8:02:ec:09:07:0b:
b5:18:6f:ed:dd:29:b7:d1:b7:b3:38:a3:f8:5c:69:
e1:af:50:cf:9c:f5:13:64:e7:ea:55:17:2d:4f:6d:
94:28:81:13:46:6a:53:c2:6d:35:29:df:1e:01:0e:
08:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6E:31:24:86:5C:66:FF:8D:07:46:EC:FB:7F:4C:4C:FB:8F:EB:C0
X509v3 Authority Key Identifier:
keyid:2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:68:08:3c:15:be:87:fb:fb:16:7d:8d:43:8f:ac:7e:3e:a3:
b9:bd:06:eb:bc:ce:f0:fd:f1:7c:fd:55:5f:e5:06:25:2f:74:
9a:e4:83:b3:ae:21:e9:7d:f6:1d:22:ac:3a:89:69:8c:69:e5:
ff:e4:26:2c:54:b3:fa:39:a7:97:5a:ec:68:4d:bd:9e:11:3b:
21:06:4e:42:bd:18:41:a2:e1:da:c4:b9:98:94:bf:d6:16:89:
02:d2:75:de:7b:ff:97:9f:40:b3:e0:fe:58:fe:67:2d:64:cd:
15:4a:86:40:80:39:fe:9b:06:b8:f0:f0:60:bb:85:9b:ed:4b:
8c:cd:53:be:29:75:42:a8:9e:34:f6:f9:53:10:c0:08:f8:93:
d6:7d:91:d0:df:98:c2:04:15:c2:c7:de:5d:d3:32:0a:e6:60:
7f:44:3e:97:d6:26:57:04:7c:e1:fd:6a:03:84:5f:67:69:9e:
85:eb:18:07:a0:8f:4f:70:5e:15:a0:15:44:3b:7c:2d:95:1d:
03:77:86:af:03:89:bf:c6:9b:c1:e2:46:a8:27:de:e1:19:ab:
58:b9:57:a6:e2:80:59:88:05:f3:67:f8:87:52:0f:53:b9:dc:
f5:80:17:c4:75:1e:33:e5:06:49:bf:de:30:53:81:4e:98:3c:
f9:d1:44:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:44 2026 by rpki-client