
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
File: lLA392-iN6eOqVSONVel4W7WJJo.mft (raw, json)
Hash identifier: ofo/hYvvraBpd1k9/vnTVpfP7xQENv676amuFBK6sdU=
Subject key identifier: C4:0C:A6:AF:E6:0E:B6:8C:4C:4F:C1:80:40:E6:BF:88:E8:D9:EE:4F
Authority key identifier: 94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A
Certificate issuer: /CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
Certificate serial: 01E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
Manifest number: 01DC
Signing time: Wed 25 Mar 2026 02:52:01 +0000
Manifest this update: Wed 25 Mar 2026 02:52:01 +0000
Manifest next update: Wed 01 Apr 2026 02:52:01 +0000
Files and hashes: 1: lLA392-iN6eOqVSONVel4W7WJJo.crl (hash: 8ylnw15ilC+IVzPmOI+iaHn3uSI6aFi0vr0pkLhHJ/g=)
2: 26C760F002EA11F0836EF72FC4F9AE02.roa (hash: wrQZ3i6auQE6hasl5pdOo4dzJGXDbVakH3Xi8U4i1wQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl
rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:52:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484 (0x1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147BF1, serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
Validity
Not Before: Mar 25 02:52:01 2026 GMT
Not After : Apr 1 02:52:01 2026 GMT
Subject: CN=69c34dd1-8f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c9:bd:68:fe:5e:a1:0b:1b:91:fb:de:7b:3f:
af:7b:32:e2:9e:13:d1:81:3b:77:43:61:b9:c8:31:
a0:c0:ef:06:52:6c:64:21:e8:6c:60:a5:f7:91:b9:
bc:e1:31:df:39:a9:92:8b:b0:8b:1a:93:f3:cf:24:
3a:68:80:b1:d4:2b:d0:2c:68:7a:35:80:12:7f:31:
87:50:10:60:0d:6d:6a:2a:f0:dd:cd:bf:a2:67:e1:
c7:0a:28:a1:19:18:06:05:c3:04:a4:eb:ad:32:8c:
af:c9:27:2a:34:ea:ec:c6:b0:ea:4b:c3:da:ef:7a:
1c:88:9c:d6:d2:e4:35:fb:20:05:71:f2:93:3f:8e:
e1:52:5f:7d:65:cb:0d:ca:aa:c7:9c:cc:ee:d3:4d:
d7:b4:df:9e:d5:ab:4b:2f:4c:7c:2c:69:62:40:cc:
0c:80:98:1d:7f:0f:8f:f5:0e:40:ab:3c:9d:3b:e6:
9a:3d:03:4f:ec:fe:ac:fd:3b:36:00:5d:00:f6:78:
15:64:8c:b5:96:ab:bc:fc:2f:b3:e8:a7:5e:ce:c6:
d9:81:ed:30:11:85:40:af:73:be:b8:9f:66:70:d9:
bb:6e:81:c9:63:17:92:f0:1a:30:21:e1:63:32:af:
f8:4a:e0:72:8e:be:bf:13:c0:ab:de:8a:cf:5f:78:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0C:A6:AF:E6:0E:B6:8C:4C:4F:C1:80:40:E6:BF:88:E8:D9:EE:4F
X509v3 Authority Key Identifier:
keyid:94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fa:14:2d:08:ac:0f:8d:e5:39:ef:08:1d:53:ca:8f:81:fb:
a3:62:e9:67:09:70:d5:67:71:ed:3c:ee:cd:79:d0:2d:2c:5e:
0d:a1:ad:9e:51:c6:96:50:ab:86:eb:32:82:c6:6e:7e:7e:c1:
1e:8a:03:88:4c:f4:60:38:66:41:63:fc:cb:fd:ee:f3:c1:bf:
5f:b3:39:8b:31:04:65:a3:29:60:1f:99:41:13:08:a0:7c:4e:
3a:2b:16:a4:74:fd:71:f3:e3:8d:bb:51:47:c3:78:2d:47:20:
a7:b8:0d:29:18:1f:c1:fc:01:be:a6:b1:b9:f1:cc:55:a8:bd:
09:82:27:33:6c:6d:e1:13:ae:9d:2d:9d:36:69:69:d9:b7:4a:
61:c8:9a:b3:41:03:c9:eb:98:3e:6e:c1:a3:bd:d9:6a:69:07:
7b:34:6f:08:b4:59:59:3d:47:6f:92:38:7a:8d:de:ad:8f:75:
da:1a:da:4f:d4:f8:ec:94:e8:56:6a:0a:d8:a7:a1:2b:01:5f:
76:94:17:67:81:a8:24:8d:e9:d4:e5:5c:f3:77:e2:b6:a5:3d:
3a:00:64:d6:cb:ec:e8:34:aa:25:9b:8b:5c:2f:e9:64:10:30:
83:2b:41:d5:ea:d7:7a:4c:94:15:bd:f3:31:86:7c:d5:30:70:
fd:c5:d1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:04:58 2026 by rpki-client