
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
File: LYDKYjgbJHmcBConufMnPeEiLO4.mft (raw, json)
Hash identifier: 853z4DfaweKLlSw6rmDWTbHhpDZZrVb9eTCOGZ0UI0o=
Subject key identifier: B4:66:77:C3:67:EC:20:DF:9D:F1:2B:E0:6A:0B:02:F8:C1:58:7D:92
Authority key identifier: 2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE
Certificate issuer: /CN=A9163272/serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE
Certificate serial: 023E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
Manifest number: 023E
Signing time: Wed 25 Mar 2026 01:50:34 +0000
Manifest this update: Wed 25 Mar 2026 01:50:34 +0000
Manifest next update: Wed 01 Apr 2026 01:50:34 +0000
Files and hashes: 1: LYDKYjgbJHmcBConufMnPeEiLO4.crl (hash: 4C9YpuBeAgubnneS4IBDNtRdUwwWH5hxpM+fQeOa3mQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl
rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:50:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163272, serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE
Validity
Not Before: Mar 25 01:50:34 2026 GMT
Not After : Apr 1 01:50:34 2026 GMT
Subject: CN=69c33f6a-d972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bc:c6:4a:a9:dc:8c:20:c2:9c:a4:7f:07:ea:
5a:c9:4e:4b:3b:a2:a8:77:95:5d:37:57:4b:38:f8:
32:16:fb:29:c9:cf:87:f8:8e:98:26:c3:34:42:61:
df:a3:99:c2:74:18:ef:58:8b:16:c2:49:aa:d5:29:
f1:81:52:2e:e9:26:90:71:96:6a:37:b6:c6:2f:17:
c5:49:3b:f7:c2:5a:f3:5b:ca:0c:5a:09:d8:f3:ff:
b3:d0:a0:4b:d6:93:9b:32:5b:55:83:b9:57:0a:85:
33:88:7c:32:f6:50:41:51:0d:8f:3b:b8:5e:dd:38:
27:14:b3:93:89:5f:37:b2:c1:2f:73:14:9c:a7:9c:
00:76:62:ac:05:bb:66:a3:3a:b0:a3:03:cf:32:45:
74:c9:fc:ec:a2:0d:db:f9:9e:c2:df:01:04:e1:d1:
e5:b4:e9:b7:55:7d:ef:c3:c9:63:ff:6d:2c:2a:58:
4e:ee:ed:08:0d:b4:e4:36:7b:68:0a:50:7b:e8:d4:
39:4f:79:75:46:de:76:a9:8b:1a:40:d5:38:d5:1d:
69:84:3b:ea:d4:b5:4d:2a:a2:82:70:25:d0:45:4d:
fa:39:27:40:e7:90:9f:e2:0d:8e:bd:e9:d4:a8:c6:
06:0a:aa:f1:44:40:89:7b:70:5b:7b:97:03:55:04:
29:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:66:77:C3:67:EC:20:DF:9D:F1:2B:E0:6A:0B:02:F8:C1:58:7D:92
X509v3 Authority Key Identifier:
keyid:2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:81:7a:8b:9e:65:28:01:ab:68:1e:e2:30:13:9b:8c:03:9f:
40:9a:90:1b:21:10:18:14:5d:4b:cf:b8:e7:10:40:15:84:47:
85:6d:b1:31:48:3b:cb:97:05:55:1d:21:6f:8a:3b:ea:e6:15:
d3:3d:b5:8c:8c:f8:42:40:8a:77:06:63:75:db:c6:56:4d:ac:
1b:42:12:a2:28:5b:6b:fc:91:ba:48:bd:5c:c3:5b:b1:29:2e:
6e:ac:cc:de:42:4c:69:5c:d7:79:21:00:7c:1a:c3:9d:3f:4b:
d5:b3:d7:95:a3:96:77:4a:b8:50:a8:47:3d:a0:d7:2f:da:d0:
5c:36:09:59:5e:02:35:8a:f3:02:77:da:17:5a:85:ac:3c:76:
cd:17:48:8a:c2:02:d0:d0:b4:c3:ca:b4:18:91:81:6a:cf:57:
80:65:76:23:e6:c3:a7:da:4f:53:49:67:38:f7:ad:88:01:61:
2f:0e:87:e8:9c:a4:b8:09:ac:0f:b7:89:07:b7:a1:e6:c0:af:
9e:c3:68:63:6d:33:46:77:08:e3:43:2e:4f:d9:aa:15:ae:4c:
c4:a9:56:a2:10:67:2f:c7:24:6f:1b:36:88:49:ec:ef:46:65:
6f:c3:2d:c0:05:e9:5d:6a:b8:de:5c:3a:48:6c:99:c7:28:02:
3e:f4:92:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:02 2026 by rpki-client