
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft
File: LQx0fe_201Ecz11T86dlcA8cgqA.mft (raw, json)
Hash identifier: K/MD3OqSGj4ubvQZF4pHCVpBW9nK29z7BzpTPRb2eGU=
Subject key identifier: 83:17:E8:36:B0:9A:AE:75:4B:1F:F0:79:7D:0A:36:87:50:5F:8C:79
Authority key identifier: 2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0
Certificate issuer: /CN=A9170975/serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft
Manifest number: A0
Signing time: Wed 25 Mar 2026 06:34:38 +0000
Manifest this update: Wed 25 Mar 2026 06:34:37 +0000
Manifest next update: Wed 01 Apr 2026 06:34:37 +0000
Files and hashes: 1: LQx0fe_201Ecz11T86dlcA8cgqA.crl (hash: W9xeF8kQXrIGKf0TwkKZMksdKQLW9aVNORMyAWKFQVE=)
2: B0B8FBDA3A2A11F09E37DB48C4F9AE02.roa (hash: W6jpg6xPZ5rYD5YfNt1tX8u8keRGsJ8qbAeMSNB05Io=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl
rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:34:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170975, serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0
Validity
Not Before: Mar 25 06:34:37 2026 GMT
Not After : Apr 1 06:34:37 2026 GMT
Subject: CN=69c381fd-5e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0a:e6:f1:9a:9b:b2:55:a3:4d:b0:be:a5:2e:
3a:1d:e8:b9:36:f3:d9:39:6f:02:5c:93:68:52:96:
fc:29:d7:12:a4:63:e5:0f:c2:b6:46:a3:95:ec:f4:
f5:8b:a3:1d:7b:45:2b:a6:cc:74:80:39:b7:0f:c8:
64:b4:a3:f0:66:d8:ae:e3:0b:0f:c4:f6:43:4f:d8:
c3:a7:aa:bf:11:0f:8a:8a:e9:ee:97:4b:01:d8:ef:
22:41:c4:c6:a7:88:3a:86:da:15:fc:58:3d:39:c3:
07:6b:59:a7:d2:52:ef:24:72:87:be:d9:76:b5:75:
af:56:ee:d5:df:b7:56:2f:32:5d:32:28:cd:a4:ed:
93:49:3e:07:e6:f8:9c:2e:40:a7:de:c1:55:37:e2:
ac:d4:90:b8:f0:eb:52:a0:fb:dc:98:28:1d:15:6b:
d9:8f:2d:0d:de:ac:5e:c0:45:6c:c9:e1:af:32:cf:
14:9c:e1:f9:24:16:d0:0f:43:9b:97:71:e1:20:1a:
cf:ed:89:70:eb:4d:a5:c4:65:c2:23:38:45:21:f2:
73:f7:0a:96:01:f2:60:49:05:8b:cc:c9:5d:25:a3:
c6:89:26:02:fa:06:ec:2b:34:34:e7:79:02:74:12:
fe:08:f5:8b:29:71:00:d7:97:79:69:d9:fd:2c:aa:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:17:E8:36:B0:9A:AE:75:4B:1F:F0:79:7D:0A:36:87:50:5F:8C:79
X509v3 Authority Key Identifier:
keyid:2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1b:0f:5b:59:8a:ef:82:71:5c:63:11:43:c9:6a:af:8c:cc:
58:5d:9f:f2:51:27:6a:cb:79:18:1d:bf:69:81:e9:a7:0e:16:
61:41:f4:38:bd:18:97:74:47:69:af:ad:f0:70:4a:19:83:3e:
0c:83:f8:8e:44:3a:6a:2a:7d:0e:95:7c:ae:f3:24:0f:66:1c:
42:e7:51:26:2d:d5:56:3f:00:27:ce:d6:55:11:f7:39:c0:b3:
57:2c:c9:87:29:02:6a:d2:55:30:a6:b7:53:9e:19:8e:66:a3:
9d:16:9b:0c:6c:e0:29:01:19:4e:a4:dc:65:f4:f8:39:3a:61:
00:ed:4c:a9:5c:a4:ba:06:bd:a9:e6:2f:a5:f2:38:a5:b7:97:
ef:b4:3c:88:3b:fa:3a:3a:48:50:c3:69:ca:89:7d:ba:54:85:
d1:0a:89:49:9e:64:97:55:56:58:89:43:ce:0b:45:f1:43:1d:
67:67:88:42:b6:42:aa:3d:65:ab:65:92:bf:98:ad:44:03:13:
25:79:c5:22:cc:31:5d:a7:af:dd:7b:32:50:d6:7c:97:98:07:
49:60:53:d8:cb:a7:08:55:93:e2:7c:20:af:d5:43:ac:4a:36:
63:04:34:08:ec:b3:8b:6d:64:b6:17:38:f6:86:be:89:8f:8f:
08:0a:9d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:02 2026 by rpki-client