
$ rpki-client -vvf rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.mft
File: ly_Qf9E0egKdYBcER3vzpkeDpzg.mft (raw, json)
Hash identifier: zwY86SHY2v9J5si43fXzRNRufskqSpcoXaYsSSvFKpU=
Subject key identifier: 52:96:F7:93:FE:F8:E6:2F:15:3D:CF:6C:9C:92:88:6F:DB:6D:A8:F8
Authority key identifier: 97:2F:D0:7F:D1:34:7A:02:9D:60:17:04:47:7B:F3:A6:47:83:A7:38
Certificate issuer: /CN=A914559B/serialNumber=972FD07FD1347A029D601704477BF3A64783A738
Certificate serial: 06
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ly_Qf9E0egKdYBcER3vzpkeDpzg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.mft
Manifest number: 04
Signing time: Thu 23 Jul 2026 11:21:40 +0000
Manifest this update: Thu 23 Jul 2026 11:21:39 +0000
Manifest next update: Thu 30 Jul 2026 11:21:39 +0000
Files and hashes: 1: ly_Qf9E0egKdYBcER3vzpkeDpzg.crl (hash: r3VTZ9NlM1i8+3dSuBZ5dNcTrjAPkk83IR1bFMf20qQ=)
2: 7A696120859F11F1A3889AC758A30FBC.roa (hash: KZV7RL/SmmvJe7/WlokymWjG4PkMAKi0QPN1OTzQtos=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.crl
rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ly_Qf9E0egKdYBcER3vzpkeDpzg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:21:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914559B, serialNumber=972FD07FD1347A029D601704477BF3A64783A738
Validity
Not Before: Jul 23 11:21:39 2026 GMT
Not After : Jul 30 11:21:39 2026 GMT
Subject: CN=6a61f944-0e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:25:eb:79:c2:57:53:fb:fe:41:fc:38:e1:ac:
2e:4f:5e:3d:24:a9:ad:ea:90:a1:ff:59:88:f3:d4:
eb:42:32:47:f7:32:d2:ae:ad:43:37:86:b1:e2:55:
fb:08:a5:4a:1f:8f:dc:37:08:79:5b:72:ed:68:94:
5b:92:d2:95:d9:fe:57:7e:8e:5d:5d:fa:c9:17:0c:
fb:ee:ca:f3:d2:78:11:19:be:2e:87:57:cd:93:09:
f7:87:03:eb:d8:62:f6:e7:55:6d:33:80:48:e4:1a:
b9:ce:91:a8:58:c1:00:05:a8:a7:ea:74:92:9d:7f:
6a:e2:e1:01:73:7b:eb:f1:c3:d3:96:32:42:f6:7d:
15:e3:b8:e0:ae:38:4e:7f:62:7f:6d:e6:c1:f0:b6:
0f:7b:0a:49:32:ac:60:b9:60:d5:db:64:3b:12:5a:
40:87:28:5e:48:a2:21:62:37:26:e6:61:06:c4:03:
b3:dc:b9:3e:95:26:83:d0:c8:6b:18:60:a9:d9:35:
d2:60:c5:61:2e:cc:15:ab:ea:33:81:8f:5b:f6:be:
4d:b5:74:15:1e:7f:29:0c:b3:a0:5d:61:2a:c2:c7:
79:4c:38:15:88:fd:1d:27:a7:19:b9:0e:ab:16:5d:
30:2c:30:19:73:74:2b:39:04:1c:06:5f:97:5e:51:
ab:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:96:F7:93:FE:F8:E6:2F:15:3D:CF:6C:9C:92:88:6F:DB:6D:A8:F8
X509v3 Authority Key Identifier:
keyid:97:2F:D0:7F:D1:34:7A:02:9D:60:17:04:47:7B:F3:A6:47:83:A7:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ly_Qf9E0egKdYBcER3vzpkeDpzg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:fd:2f:08:45:11:3b:d3:3f:72:fe:e1:33:b0:76:72:92:83:
a2:50:3c:c0:a7:bf:2c:cb:7a:98:a6:2b:e1:c3:0a:67:5d:85:
c2:4b:d2:c0:ba:46:05:18:05:e8:b7:09:54:37:aa:e2:b8:14:
8c:83:d9:73:ea:93:60:3d:60:49:39:0b:36:5d:cd:fc:fb:f5:
f2:32:ed:77:93:a2:ee:05:2a:5c:14:b3:67:e1:e2:53:d9:f9:
19:af:3a:98:07:d0:8a:4e:10:ec:c2:e3:dd:34:b1:95:a1:a2:
41:b8:ad:82:1c:4e:62:e2:ad:84:6a:e6:a8:c7:5a:31:98:7d:
30:77:5b:19:22:09:1e:93:b5:2b:54:06:e4:02:57:ad:82:ff:
7f:69:38:b9:ce:83:bb:8b:b8:67:10:75:80:9b:7d:7f:b5:8c:
8e:50:33:84:7e:84:dc:14:e4:66:82:a0:41:b2:a4:5b:69:76:
6a:b8:11:96:e0:18:72:0f:98:22:96:5c:ec:08:f0:58:c3:53:
88:c3:ce:2e:c9:85:87:04:8d:9d:f1:ac:3e:df:90:07:ff:ff:
f3:26:9e:9e:00:74:f3:d7:ab:e3:23:e9:00:cf:5a:df:aa:d5:
aa:b7:86:e1:eb:69:b4:a2:4b:6d:c3:12:cc:f4:90:20:45:60:
ba:f3:68:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:20:17 2026 by rpki-client