
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
File: lqY1AntkplTYCJRduDWp4ox5SwE.mft (raw, json)
Hash identifier: T30133We6zLfPg2Jgt2OKyJXDjS+if0gFM4cBNXePD8=
Subject key identifier: CB:31:84:8A:50:C3:75:55:28:CF:28:F3:16:B4:B2:2D:69:E4:F9:5E
Authority key identifier: 96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01
Certificate issuer: /CN=A9144391/serialNumber=96A635027B64A654D808945DB835A9E28C794B01
Certificate serial: 014E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
Manifest number: 012D
Signing time: Tue 07 Apr 2026 05:05:56 +0000
Manifest this update: Tue 07 Apr 2026 05:05:56 +0000
Manifest next update: Tue 14 Apr 2026 05:05:56 +0000
Files and hashes: 1: lqY1AntkplTYCJRduDWp4ox5SwE.crl (hash: glvoPmNe5uhagrp5OFb/7YftHHPOi2XGPa7Z5zxgbwo=)
2: BBA8F97C70AF11EF9C9B2C0EC4F9AE02.roa (hash: saMe9HqgEFlkQr1sv6V0sUsEY0lWYPJ0Mi2x6rYexCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl
rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 03:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144391, serialNumber=96A635027B64A654D808945DB835A9E28C794B01
Validity
Not Before: Apr 7 05:05:56 2026 GMT
Not After : Apr 14 05:05:56 2026 GMT
Subject: CN=69d490b4-1a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:5f:6c:33:4f:0b:7d:83:a7:10:5a:3b:0f:
7d:3c:42:28:40:50:7b:1a:1f:0d:ec:57:de:22:41:
30:93:c5:50:d0:f7:e4:eb:4c:fe:58:4c:56:25:85:
8b:f2:8c:31:a2:06:14:c4:b2:40:fb:a0:5b:41:8a:
06:19:bd:c8:e6:56:a7:e6:53:31:5c:c3:9c:cc:85:
43:30:6a:bd:76:41:73:1c:3a:b2:f1:0e:e4:8d:bb:
af:72:1d:0a:dc:91:bc:93:69:ae:1b:b2:d4:e6:8b:
80:dd:ac:3c:31:f4:af:12:e5:45:0f:10:42:15:a9:
91:d6:16:84:63:e4:42:78:45:e4:38:5a:b0:cc:84:
a4:46:ec:aa:81:3f:8a:c5:12:f4:bc:34:f5:d0:2f:
2a:6d:f9:04:54:c4:dd:90:12:a2:a1:b0:9f:54:47:
93:bc:38:13:0e:d8:9c:83:5c:15:ae:9b:d8:30:a4:
2a:89:64:c4:65:01:ee:5e:1d:5b:d5:03:30:e6:04:
f9:46:aa:b4:21:ae:21:47:ba:16:85:98:ab:61:ce:
73:c0:28:c4:a9:73:b7:0a:1e:24:fd:8f:74:84:99:
52:e7:d7:0d:5c:17:85:dd:23:f3:46:0c:14:c1:ac:
20:f5:ff:37:5b:ae:bc:f4:91:c4:14:ec:bf:92:21:
de:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:31:84:8A:50:C3:75:55:28:CF:28:F3:16:B4:B2:2D:69:E4:F9:5E
X509v3 Authority Key Identifier:
keyid:96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:54:c4:97:e9:d8:cb:7a:d9:f3:48:b2:54:47:e6:f2:1a:32:
4a:31:8e:f8:1e:fc:07:3f:00:46:e1:aa:93:af:74:a0:e8:89:
13:8c:cc:0e:e2:97:0f:8b:96:4c:73:ee:00:13:2b:9d:ac:73:
7a:7e:74:81:f5:e1:6b:38:9f:1a:fd:93:b2:51:0d:47:b1:10:
ae:96:60:ff:3a:79:23:f6:ca:94:e2:df:ba:f8:e6:71:ab:ca:
e5:6a:2d:75:d7:ae:f0:07:25:97:fe:38:b9:f3:35:39:c9:66:
85:46:26:47:f9:cd:70:dd:00:8e:51:17:0e:a9:28:98:83:69:
a7:8c:63:e7:da:03:90:9d:d4:8e:10:3a:c6:99:ef:3a:15:03:
c8:dc:ed:74:9a:af:e7:c8:e6:df:f9:c2:5d:cf:c8:0f:5a:e7:
71:62:25:60:4f:9c:83:4b:9e:49:ff:36:8b:d5:fe:47:89:9a:
5f:35:f4:89:8c:93:ac:53:da:b2:2e:9b:9a:3e:64:44:6e:1f:
8a:a9:ea:c3:d1:37:a1:f5:d6:b7:75:a7:0b:e0:51:ed:44:98:
77:0c:7f:1b:37:95:45:e4:84:60:99:4f:66:a5:5e:cb:14:b0:
08:ab:ce:a7:07:17:60:38:03:00:1a:ef:83:3d:3f:0b:d5:ec:
44:16:7a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:03:21 2026 by rpki-client