
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
File: lLA392-iN6eOqVSONVel4W7WJJo.mft (raw, json)
Hash identifier: CeMN+em6LCfS81TVJh1gFomt6TxGWOsrA/161D4EmOs=
Subject key identifier: 8E:A0:3F:AE:41:52:E0:39:41:EA:4B:06:8A:E0:0A:40:A1:97:C7:19
Authority key identifier: 94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A
Certificate issuer: /CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
Certificate serial: 01EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
Manifest number: 01E2
Signing time: Sun 05 Apr 2026 02:59:23 +0000
Manifest this update: Sun 05 Apr 2026 02:59:22 +0000
Manifest next update: Sun 12 Apr 2026 02:59:22 +0000
Files and hashes: 1: lLA392-iN6eOqVSONVel4W7WJJo.crl (hash: D+d5XxZUbEAhOhnnToCD5GAXG5TmChXKxHnSZ88kIqw=)
2: 26C760F002EA11F0836EF72FC4F9AE02.roa (hash: wrQZ3i6auQE6hasl5pdOo4dzJGXDbVakH3Xi8U4i1wQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl
rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:59:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490 (0x1ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147BF1, serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
Validity
Not Before: Apr 5 02:59:22 2026 GMT
Not After : Apr 12 02:59:22 2026 GMT
Subject: CN=69d1d00a-1600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:c1:c0:fa:af:21:79:58:22:fc:d4:32:8e:
c4:65:6e:55:c5:36:2e:b8:d4:41:ea:1e:bd:46:ea:
1d:3d:9d:a2:f3:be:96:80:16:99:94:e5:69:8e:97:
06:a8:9d:fd:40:04:5c:71:a1:b0:97:78:d9:3b:66:
c5:cd:ac:fa:70:65:d5:28:73:3f:b1:16:3b:b9:a7:
13:c6:60:68:65:0b:89:04:a6:4b:ed:ed:da:2c:c8:
27:e3:dc:51:da:fa:2b:a0:cf:66:b1:85:24:23:93:
82:08:50:2b:08:ae:51:fb:d4:15:64:bc:31:dc:fc:
d7:0c:ab:01:5e:c4:44:7c:09:72:8f:4f:d9:26:e1:
cf:33:19:8a:00:e5:41:77:95:d0:50:2b:d5:a2:5d:
7d:fb:de:20:34:4f:c4:9f:57:a6:4d:91:b0:8b:d2:
fd:ca:be:78:b3:4b:38:86:34:b0:9a:f3:1d:d6:44:
63:64:d9:5a:16:19:31:69:41:91:a6:7d:68:15:cc:
1e:e2:99:45:21:95:29:a5:b2:6b:e3:11:bb:8e:a1:
23:30:76:e7:b0:16:f8:09:1f:98:03:ea:eb:96:c2:
6a:34:d2:86:7c:d8:fb:67:f3:6d:bf:b7:4a:42:e1:
39:1d:3a:c6:af:8b:7a:4c:df:80:c7:76:70:c6:b2:
ee:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A0:3F:AE:41:52:E0:39:41:EA:4B:06:8A:E0:0A:40:A1:97:C7:19
X509v3 Authority Key Identifier:
keyid:94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:65:80:bf:4b:78:36:47:49:bc:32:0d:17:cf:b8:c6:cf:b7:
80:92:14:fa:85:3a:09:f5:fe:da:55:3b:05:8c:1c:b1:16:0c:
04:c7:36:d8:84:e3:73:c1:2c:18:cc:7f:9d:b3:59:75:84:b5:
d3:7f:d3:75:f7:3d:97:de:13:20:30:0e:91:01:4c:73:60:52:
69:eb:ad:15:59:24:dc:3c:89:1f:9d:09:ef:c8:c8:92:d7:6a:
9c:4a:6f:b9:18:29:7d:3b:70:fb:ca:3a:ff:82:f2:bd:c2:da:
b8:67:88:af:79:10:f4:d9:d3:b6:89:94:9e:ad:72:c2:ed:42:
e9:b9:1b:25:15:4f:d9:06:9f:4f:d6:91:e1:60:88:74:0b:2c:
ee:6a:9c:02:90:98:ec:1f:7d:63:68:c2:e2:c7:a9:df:25:c3:
49:fe:0d:ce:06:60:2b:7b:26:2c:4a:e4:56:9b:fb:71:15:0f:
a0:2d:6f:cb:05:8b:4a:26:f1:cb:9a:32:ba:72:a4:09:0f:27:
65:4b:4a:54:bb:e2:13:d2:e9:a7:12:9b:36:8a:d2:b1:70:ea:
40:13:5a:21:d9:f6:b4:63:cb:80:47:f4:12:22:dc:26:16:fd:
14:2b:dd:c9:97:20:15:5e:02:7b:10:b6:c8:76:9f:c6:0e:30:
53:6f:0e:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDdCRjExMTAvBgNVBAUTKDk0QjAzN0Y3NkZBMjM3QTc4RUE5NTQ4RTM1NTdBNUUx
NkVENjI0OUEwHhcNMjYwNDA1MDI1OTIyWhcNMjYwNDEyMDI1OTIyWjAYMRYwFAYD
VQQDEw02OWQxZDAwYS0xNjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvIbBwPqvIXlYIvzUMo7EZW5VxTYuuNRB6h69RuodPZ2i876WgBaZlOVpjpcG
qJ39QARccaGwl3jZO2bFzaz6cGXVKHM/sRY7uacTxmBoZQuJBKZL7e3aLMgn49xR
2voroM9msYUkI5OCCFArCK5R+9QVZLwx3PzXDKsBXsREfAlyj0/ZJuHPMxmKAOVB
d5XQUCvVol19+94gNE/En1emTZGwi9L9yr54s0s4hjSwmvMd1kRjZNlaFhkxaUGR
pn1oFcwe4plFIZUppbJr4xG7jqEjMHbnsBb4CR+YA+rrlsJqNNKGfNj7Z/Ntv7dK
QuE5HTrGr4t6TN+Ax3ZwxrLuXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI6gP65B
UuA5QepLBorgCkChl8cZMB8GA1UdIwQYMBaAFJSwN/dvojenjqlUjjVXpeFu1iSa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0JGMS83RDE2RTRGQTU3
QjgxMUVFQUUxOEI1NjhDNEY5QUUwMi9sTEEzOTItaU42ZU9xVlNPTlZlbDRXN1dK
Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xMQTM5Mi1pTjZlT3FWU09OVmVsNFc3V0pKby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
N0JGMS83RDE2RTRGQTU3QjgxMUVFQUUxOEI1NjhDNEY5QUUwMi9sTEEzOTItaU42
ZU9xVlNPTlZlbDRXN1dKSm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARWWAv0t4NkdJvDINF8+4xs+3gJIU+oU6CfX+2lU7BYwcsRYMBMc22ITjc8Es
GMx/nbNZdYS103/Tdfc9l94TIDAOkQFMc2BSaeutFVkk3DyJH50J78jIktdqnEpv
uRgpfTtw+8o6/4LyvcLauGeIr3kQ9NnTtomUnq1ywu1C6bkbJRVP2QafT9aR4WCI
dAss7mqcApCY7B99Y2jC4sep3yXDSf4NzgZgK3smLErkVpv7cRUPoC1vywWLSibx
y5oyunKkCQ8nZUtKVLviE9LppxKbNorSsXDqQBNaIdn2tGPLgEf0EiLcJhb9FCvd
yZcgFV4CexC2yHafxg4wU28OqQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:53:46 2026 by rpki-client