
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
File: lLA392-iN6eOqVSONVel4W7WJJo.mft (raw, json)
Hash identifier: xNmReSdgaT3ixbdmFWiyMQBpfAP8vMVxFVqXQ3XXmkE=
Subject key identifier: CA:1C:77:6F:53:FD:C8:07:5D:B7:09:CE:E9:6B:92:FF:6E:F7:95:64
Authority key identifier: 94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A
Certificate issuer: /CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
Certificate serial: 024A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
Manifest number: 0242
Signing time: Tue 13 Oct 2026 03:02:06 +0000
Manifest this update: Tue 13 Oct 2026 03:02:06 +0000
Manifest next update: Tue 20 Oct 2026 03:02:06 +0000
Files and hashes: 1: lLA392-iN6eOqVSONVel4W7WJJo.crl (hash: 43N/SjuT3U8GGUn3uhsJbOw14jVrqsFi+Va9iiR1I/s=)
2: 26C760F002EA11F0836EF72FC4F9AE02.roa (hash: wrQZ3i6auQE6hasl5pdOo4dzJGXDbVakH3Xi8U4i1wQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl
rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 03:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147BF1, serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
Validity
Not Before: Oct 13 03:02:06 2026 GMT
Not After : Oct 20 03:02:06 2026 GMT
Subject: CN=6acd9f2e-4bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:29:c7:8a:48:dc:86:f4:1b:a4:72:14:0b:0e:
f5:3d:fc:a8:aa:11:b6:68:b5:78:23:a1:58:0e:d0:
19:0a:2e:28:0f:f6:2d:72:2b:cc:53:36:bb:1b:0f:
2b:ad:0b:ad:89:da:88:a7:f2:70:13:35:59:fd:58:
30:9a:ce:a3:44:a6:7c:4a:e7:63:f8:8c:e4:9d:ee:
3c:fb:1d:45:1b:08:13:38:97:00:82:1d:95:c0:4c:
1b:cc:8d:95:01:1b:4e:f5:56:3e:7d:13:fd:e2:53:
a6:d1:12:87:4c:8b:df:eb:f8:4d:eb:60:bf:1e:14:
f0:78:79:67:4c:c1:f7:06:e0:17:68:ee:7a:f8:ba:
4a:7c:21:f2:79:40:cb:7f:3d:c0:74:c6:1e:1f:03:
b9:82:fd:ff:1e:fe:18:d1:f5:5a:83:ea:e3:4f:78:
8a:14:d7:82:c8:bc:0b:33:88:46:e6:32:ca:c7:2d:
ee:b5:80:27:14:b0:ba:0f:13:e3:79:f0:6a:41:30:
a5:de:92:20:9b:af:27:68:2e:ef:27:fb:03:0b:21:
e8:92:f5:85:89:1f:c6:8e:11:c2:bb:3b:fe:f5:e9:
4a:87:d8:df:26:da:78:79:55:b8:29:ab:af:e0:29:
52:90:2c:8a:43:63:39:bd:b1:47:82:e6:50:e6:e5:
fe:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1C:77:6F:53:FD:C8:07:5D:B7:09:CE:E9:6B:92:FF:6E:F7:95:64
X509v3 Authority Key Identifier:
keyid:94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1d:f0:25:37:dc:c1:7e:78:7e:5c:6f:25:6a:1a:d0:89:22:
1e:fd:d1:10:84:bc:9f:25:5f:a0:5a:1b:bb:2a:d2:7c:c8:45:
57:de:19:c3:31:e0:90:7f:57:2d:22:1d:07:d9:80:b9:74:f8:
09:91:d4:b3:23:1d:3a:12:eb:48:11:4d:50:14:a0:a7:c8:d1:
27:3d:8d:77:af:67:c0:1b:8a:d6:ea:77:11:6e:d7:71:dc:9c:
27:c9:9e:b5:ea:c3:a7:77:22:36:0b:22:bf:46:c8:18:49:fb:
62:2d:af:4f:9d:0e:c9:1e:35:01:eb:60:b4:f0:dd:ff:3e:2e:
b2:7d:45:40:81:5d:a6:73:15:61:05:26:3f:be:d2:a7:d4:1f:
53:9e:f5:ef:49:b5:18:cc:dd:be:0a:24:e1:14:37:9f:84:71:
eb:ad:3b:32:2c:f9:f1:d4:ad:96:54:11:1b:0f:05:ba:8d:ef:
56:89:26:28:c7:bc:04:86:74:6d:69:fa:95:ff:04:ce:7c:fc:
84:66:b3:a0:b7:5f:41:17:6b:09:86:36:e4:78:bc:54:4f:b2:
9d:06:e1:14:a0:a8:e1:5c:9c:d0:31:6d:3e:df:0d:fb:c2:9b:
68:b2:1a:d2:bd:d9:6e:59:a3:66:d9:8a:f8:43:cd:82:ca:bb:
57:a1:46:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:09:16 2026 by rpki-client