
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
File: LYDKYjgbJHmcBConufMnPeEiLO4.mft (raw, json)
Hash identifier: mEV/WfxQTTkJVRNgX37K3pnPZkCsay+Ldv2fzVRC724=
Subject key identifier: B2:5E:F7:B7:7C:A7:33:54:32:39:96:50:90:8B:93:CD:E3:AF:B1:46
Authority key identifier: 2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE
Certificate issuer: /CN=A9163272/serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE
Certificate serial: 029B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
Manifest number: 029B
Signing time: Wed 23 Sep 2026 01:28:10 +0000
Manifest this update: Wed 23 Sep 2026 01:28:10 +0000
Manifest next update: Wed 30 Sep 2026 01:28:10 +0000
Files and hashes: 1: LYDKYjgbJHmcBConufMnPeEiLO4.crl (hash: FVRE5Nn1U3qMhbfmANCrPrB4nBqsVYdxnFzWOoHDWD4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl
rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:28:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667 (0x29b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163272, serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE
Validity
Not Before: Sep 23 01:28:10 2026 GMT
Not After : Sep 30 01:28:10 2026 GMT
Subject: CN=6ab32b2a-cd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:82:45:3a:5c:2b:10:7e:bc:fb:85:8a:e0:f8:
42:4e:14:ca:8a:d7:00:ee:c3:e9:50:80:8a:83:8e:
ed:6d:1b:51:62:1a:7c:42:65:0d:98:83:30:89:db:
e5:a7:99:cf:3a:24:8d:73:c5:44:59:12:6d:65:f2:
fe:d1:31:39:a7:91:74:7f:2f:a4:84:f4:db:b0:10:
8c:c0:bf:b9:9f:8b:bb:bc:b6:c1:43:00:e1:ed:76:
d5:3c:13:05:bb:48:5b:bc:e3:61:db:28:4e:bf:6f:
42:f5:03:28:54:4f:90:ca:ff:f3:aa:b5:9a:a2:a9:
ec:b0:a7:83:03:ae:dc:a2:75:d6:32:8f:c3:88:59:
1d:6d:4b:49:ee:ed:17:65:a6:8d:aa:89:a1:4c:c5:
3e:23:57:bb:e0:21:90:a4:3a:07:71:7e:d6:d3:ef:
d4:89:00:11:c7:62:77:53:ae:39:b7:fa:15:63:b2:
7c:38:fa:9f:d0:81:07:9f:29:e1:14:fa:c4:c3:11:
4d:fa:a3:11:e8:de:90:07:9d:06:22:85:ac:a1:2a:
f2:d0:de:50:52:7f:27:57:1f:5a:bf:b1:ed:98:87:
ae:f1:1c:59:2a:06:9e:19:6d:4f:68:eb:4f:cd:e9:
55:5d:53:94:32:69:72:df:26:de:f7:c5:b7:e6:f7:
f6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5E:F7:B7:7C:A7:33:54:32:39:96:50:90:8B:93:CD:E3:AF:B1:46
X509v3 Authority Key Identifier:
keyid:2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:0e:67:a3:7f:7a:2d:9f:d4:c2:ec:59:31:e4:c9:af:8e:2e:
cb:0d:cf:2c:dc:d0:3f:f1:d5:fe:63:99:a4:96:93:6d:e4:7a:
45:61:78:0b:dc:18:b7:21:d2:4e:85:0c:ae:83:f9:f0:90:5b:
69:b1:e5:f4:a6:6c:8f:fe:aa:f1:ff:62:b0:08:d2:c2:3a:8e:
9e:9c:35:da:76:68:7a:f1:aa:97:e9:63:b2:8f:b3:54:15:f0:
fc:f2:fd:7f:4d:d3:7e:22:22:6f:8e:fc:df:91:88:3c:eb:e2:
ab:83:ac:a3:92:2b:f7:13:b3:93:7a:c1:58:38:e3:59:7a:c4:
6e:2b:cb:47:38:af:da:65:85:5b:56:7d:43:0d:19:4e:ce:27:
90:81:ef:6d:e7:18:0d:35:35:a2:20:29:35:4b:9c:4f:05:63:
c8:bb:1e:be:27:93:f7:4f:59:77:29:cf:18:91:5f:ea:c5:ed:
be:eb:68:2c:dd:6f:88:c9:1d:89:23:74:e5:92:ca:04:27:2b:
e1:3b:32:b5:38:67:0d:de:52:61:62:c6:16:f4:a4:58:57:ad:
e7:a4:b0:31:d7:d5:b3:61:c7:dd:9c:df:5b:1a:c9:81:ef:28:
7d:e4:e8:15:3e:8b:29:f7:bf:9a:54:bb:a8:19:95:cd:44:4c:
85:1c:6c:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjMyNzIxMTAvBgNVBAUTKDJEODBDQTYyMzgxQjI0Nzk5QzA0MkEyN0I5RjMyNzNE
RTEyMjJDRUUwHhcNMjYwOTIzMDEyODEwWhcNMjYwOTMwMDEyODEwWjAYMRYwFAYD
VQQDEw02YWIzMmIyYS1jZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA34JFOlwrEH68+4WK4PhCThTKitcA7sPpUICKg47tbRtRYhp8QmUNmIMwidvl
p5nPOiSNc8VEWRJtZfL+0TE5p5F0fy+khPTbsBCMwL+5n4u7vLbBQwDh7XbVPBMF
u0hbvONh2yhOv29C9QMoVE+Qyv/zqrWaoqnssKeDA67conXWMo/DiFkdbUtJ7u0X
ZaaNqomhTMU+I1e74CGQpDoHcX7W0+/UiQARx2J3U645t/oVY7J8OPqf0IEHnynh
FPrEwxFN+qMR6N6QB50GIoWsoSry0N5QUn8nVx9av7HtmIeu8RxZKgaeGW1PaOtP
zelVXVOUMmly3ybe98W35vf2wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLJe97d8
pzNUMjmWUJCLk83jr7FGMB8GA1UdIwQYMBaAFC2AymI4GyR5nAQqJ7nzJz3hIizu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzI3Mi9ERjI2NjlENkI2
ODIxMUVEQTBBQjk5MUJDNEY5QUUwMi9MWURLWWpnYkpIbWNCQ29udWZNblBlRWlM
TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xZREtZamdiSkhtY0JDb251Zk1uUGVFaUxPNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzI3Mi9ERjI2NjlENkI2ODIxMUVEQTBBQjk5MUJDNEY5QUUwMi9MWURLWWpnYkpI
bWNCQ29udWZNblBlRWlMTzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARg5no396LZ/UwuxZMeTJr44uyw3PLNzQP/HV/mOZpJaTbeR6RWF4C9wYtyHS
ToUMroP58JBbabHl9KZsj/6q8f9isAjSwjqOnpw12nZoevGql+ljso+zVBXw/PL9
f03TfiIib47835GIPOviq4Oso5Ir9xOzk3rBWDjjWXrEbivLRziv2mWFW1Z9Qw0Z
Ts4nkIHvbecYDTU1oiApNUucTwVjyLsevieT909ZdynPGJFf6sXtvutoLN1viMkd
iSN05ZLKBCcr4TsytThnDd5SYWLGFvSkWFet56SwMdfVs2HH3ZzfWxrJge8ofeTo
FT6LKfe/mlS7qBmVzURMhRxslA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:22:44 2026 by rpki-client