
$ rpki-client -vvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
File: LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft (raw, json)
Hash identifier: IuYF3fCzHoYriPVs/jvxP+BwSZbGaZ8xmTa91ddMaGY=
Subject key identifier: 98:7D:F2:B9:47:9F:F7:8C:96:C0:3A:69:27:03:EA:AC:66:B0:E6:44
Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C
Certificate issuer: /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C
Certificate serial: 06FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
Manifest number: 06EA
Signing time: Tue 12 May 2026 22:17:12 +0000
Manifest this update: Tue 12 May 2026 22:17:11 +0000
Manifest next update: Tue 19 May 2026 22:17:11 +0000
Files and hashes: 1: LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl (hash: dFXxkUgAsrkNR82ZIa/TQQ2lVlJPc/HJBFKEu7DNgrU=)
2: 579FE34A0BF211EF8B0F9C81C4F9AE02.roa (hash: I0WpDgMmllreaPhV65poRHSHDSmFE5dRW9kHHGyYH/U=)
3: 8CBE17540BCF11EF80BE8E0CC4F9AE02.roa (hash: v9b/yGtqVwFD8gxkWfJo/P1ZI/EvbUBmOLRUxAaLNxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl
rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1787 (0x6fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91203EB, serialNumber=2F265B0C802473094926890A85124E21B109DA3C
Validity
Not Before: May 12 22:17:11 2026 GMT
Not After : May 19 22:17:11 2026 GMT
Subject: CN=6a03a6e8-e327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:75:75:be:b1:4b:67:30:23:68:81:70:7e:
38:1b:4a:35:43:5f:e1:15:2d:e8:ea:dc:54:d9:b3:
35:e4:5b:ab:49:16:ff:45:b9:40:97:10:13:ba:ff:
d9:c3:70:06:ad:d9:12:09:1a:ab:19:26:e0:a1:e6:
0d:c5:bb:70:c6:6d:41:b3:cc:92:f1:d1:75:b7:06:
61:f2:a9:f3:98:fe:99:f7:02:45:17:e8:37:6a:d7:
90:09:19:cc:b8:b8:ec:c9:25:4f:67:d5:03:39:ef:
c7:f9:7c:7f:3d:9e:6b:70:b7:fc:f8:2e:b9:21:39:
dd:dc:49:35:d8:fa:62:ee:b4:f0:5b:6c:59:e3:6f:
2e:72:27:a3:c0:af:e4:ee:9c:b4:e0:e9:15:f4:87:
e2:24:5c:40:85:42:aa:bf:3f:45:fc:56:79:9c:d0:
38:96:fd:b8:63:de:ce:97:c7:2a:97:fd:87:7b:11:
09:ff:8a:84:4d:c7:d5:22:a5:fc:17:c5:eb:ae:82:
2e:a8:2c:b2:42:43:79:82:10:1c:01:89:15:a2:15:
76:c6:b8:21:57:30:42:8a:17:65:1b:42:95:50:7b:
db:c2:8b:a0:ef:8a:69:25:29:b6:26:e0:f0:60:cd:
30:74:c0:06:ac:db:84:e6:0e:46:a1:77:9b:d6:81:
7a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7D:F2:B9:47:9F:F7:8C:96:C0:3A:69:27:03:EA:AC:66:B0:E6:44
X509v3 Authority Key Identifier:
keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:22:63:c2:bc:50:11:ff:02:f5:38:77:d2:27:4c:94:6b:f6:
3a:6c:84:39:08:07:fa:49:b7:34:18:87:59:b6:11:80:6c:fd:
ad:46:31:38:b8:69:85:06:d3:2b:03:2c:2b:97:52:36:75:3c:
64:f9:38:56:dc:43:d4:0b:9c:4c:c2:de:31:f8:20:bb:eb:04:
92:40:9e:8a:bd:54:21:8d:72:10:84:06:ce:ea:fb:a4:1b:36:
7c:ab:9c:8d:06:a2:25:0f:88:22:b9:21:5d:19:87:bd:7c:87:
e3:58:9b:74:8d:0f:dd:75:97:de:fa:98:58:1e:c5:ae:33:5a:
2f:43:32:88:33:f6:13:6b:9f:91:86:47:71:8c:2b:82:6e:48:
14:f2:cf:4e:7a:f1:88:67:be:70:a9:86:dc:b2:77:0d:c0:42:
49:c9:3a:f4:ca:cd:69:82:3a:4c:bb:25:e0:f5:b7:fc:af:2b:
78:fb:77:c6:10:20:10:bb:7b:bc:81:61:75:8a:28:3f:e1:06:
55:5c:4e:2f:b0:1a:b4:e2:b4:df:09:5c:21:9b:a1:f1:96:9a:
88:fc:0a:3a:5c:fa:b0:c3:1a:33:5e:70:e7:1f:40:64:1c:5a:
1e:7a:d2:dd:2d:87:e4:2d:15:d6:e0:e2:23:ea:01:7b:d8:5a:
c1:5a:95:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjAzRUIxMTAvBgNVBAUTKDJGMjY1QjBDODAyNDczMDk0OTI2ODkwQTg1MTI0RTIx
QjEwOURBM0MwHhcNMjYwNTEyMjIxNzExWhcNMjYwNTE5MjIxNzExWjAYMRYwFAYD
VQQDEw02YTAzYTZlOC1lMzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw6l1db6xS2cwI2iBcH44G0o1Q1/hFS3o6txU2bM15FurSRb/RblAlxATuv/Z
w3AGrdkSCRqrGSbgoeYNxbtwxm1Bs8yS8dF1twZh8qnzmP6Z9wJFF+g3ateQCRnM
uLjsySVPZ9UDOe/H+Xx/PZ5rcLf8+C65ITnd3Ek12Ppi7rTwW2xZ428uciejwK/k
7py04OkV9IfiJFxAhUKqvz9F/FZ5nNA4lv24Y97Ol8cql/2HexEJ/4qETcfVIqX8
F8XrroIuqCyyQkN5ghAcAYkVohV2xrghVzBCihdlG0KVUHvbwoug74ppJSm2JuDw
YM0wdMAGrNuE5g5GoXeb1oF6xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJh98rlH
n/eMlsA6aScD6qxmsOZEMB8GA1UdIwQYMBaAFC8mWwyAJHMJSSaJCoUSTiGxCdo8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNFQi9GMzYyMkU3NDk3
NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3bEpKb2tLaFJKT0liRUoy
ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0x5WmJESUFrY3dsSkpva0toUkpPSWJFSjJqdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDNFQi9GMzYyMkU3NDk3NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3
bEpKb2tLaFJKT0liRUoyancubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiCJjwrxQEf8C9Th30idMlGv2OmyEOQgH+km3NBiHWbYRgGz9rUYxOLhphQbT
KwMsK5dSNnU8ZPk4VtxD1AucTMLeMfggu+sEkkCeir1UIY1yEIQGzur7pBs2fKuc
jQaiJQ+IIrkhXRmHvXyH41ibdI0P3XWX3vqYWB7FrjNaL0MyiDP2E2ufkYZHcYwr
gm5IFPLPTnrxiGe+cKmG3LJ3DcBCSck69MrNaYI6TLsl4PW3/K8rePt3xhAgELt7
vIFhdYooP+EGVVxOL7AatOK03wlcIZuh8ZaaiPwKOlz6sMMaM15w5x9AZBxaHnrS
3S2H5C0V1uDiI+oBe9hawVqV5w==
-----END CERTIFICATE-----
Generated at Wed May 13 04:02:14 2026 by rpki-client