
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft
File: LQx0fe_201Ecz11T86dlcA8cgqA.mft (raw, json)
Hash identifier: DildKmST2LtOE3/xmlnkSZfBgNv+qEhavmf7rRbmecw=
Subject key identifier: DA:39:8F:93:58:3D:9C:F9:29:C8:97:3B:00:C7:03:BA:3B:BB:BA:7D
Authority key identifier: 2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0
Certificate issuer: /CN=A9170975/serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0
Certificate serial: 94
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft
Manifest number: 92
Signing time: Sun 01 Mar 2026 08:48:22 +0000
Manifest this update: Sun 01 Mar 2026 08:48:22 +0000
Manifest next update: Sun 08 Mar 2026 08:48:22 +0000
Files and hashes: 1: LQx0fe_201Ecz11T86dlcA8cgqA.crl (hash: 4TunrOqrkSoKL4JxxzzraZS1azl5OhPSlUzs65BIIt4=)
2: B0B8FBDA3A2A11F09E37DB48C4F9AE02.roa (hash: 6KC8QNHFDtq8TzIYPz4virUFxp/Eac2G6TofWZtlqJM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl
rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170975, serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0
Validity
Not Before: Mar 1 08:48:22 2026 GMT
Not After : Mar 8 08:48:22 2026 GMT
Subject: CN=69a3fd56-fdea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5c:61:4b:ef:ba:1e:59:13:8a:c0:dd:a3:3c:
40:08:dd:8d:d1:71:6c:fb:de:fb:88:88:cb:57:a6:
60:c3:8b:76:72:93:7e:db:9f:c8:55:32:fb:52:af:
19:f5:b0:44:2e:99:0f:f4:ae:aa:85:0b:eb:cb:8d:
ae:ee:64:17:66:22:63:02:59:cb:6e:c7:5f:a7:fc:
4c:d5:4c:fe:8f:e6:25:d1:86:42:c5:f8:be:f2:77:
38:be:18:a8:d1:77:4b:0e:28:33:c0:35:d2:80:c7:
68:b1:08:10:18:8a:06:f4:01:1c:15:36:df:d0:a3:
59:1e:47:96:ad:98:00:c8:1c:33:78:81:88:93:a4:
9a:87:ea:9f:51:fc:33:f4:1c:0b:cc:7e:99:c6:42:
ef:61:ad:b4:f2:c3:d7:09:2d:e0:ce:e4:e4:78:ff:
13:43:0a:a4:99:1f:af:9b:9e:a1:4d:9e:e7:51:ff:
d1:06:62:56:53:02:62:32:5b:44:09:0d:53:d5:1b:
07:fd:70:2d:2a:54:e8:2a:1a:3c:0c:58:43:7a:6b:
fe:17:51:53:a2:49:42:76:bf:f1:35:ed:07:c3:ed:
15:6d:51:4f:c2:73:b3:4f:83:8b:4a:c6:81:57:4d:
0f:55:29:47:1e:36:aa:54:93:7c:38:49:0e:78:8f:
d4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:39:8F:93:58:3D:9C:F9:29:C8:97:3B:00:C7:03:BA:3B:BB:BA:7D
X509v3 Authority Key Identifier:
keyid:2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:62:5c:8d:46:a9:fc:85:80:ff:ef:ff:a8:6d:a0:69:9b:de:
32:ac:df:3f:98:f6:17:2a:35:89:b2:98:15:23:3e:68:39:e6:
38:12:58:d1:17:34:ff:92:d5:0c:04:94:fe:f1:2d:b3:79:65:
0f:dc:a6:3a:c4:c3:1c:1b:d2:31:bc:a6:66:51:a2:58:65:88:
fb:b7:df:84:bb:de:b7:45:d8:d2:c9:df:6d:ae:59:d0:5f:61:
e3:ab:7a:1f:67:94:e2:a2:91:6a:67:31:50:05:34:34:88:78:
3f:4f:1a:da:6f:35:04:1d:fc:8f:68:ac:c3:13:a8:0d:58:7b:
a5:6e:7f:2e:7f:ae:c8:12:47:64:0b:88:63:8a:69:81:df:c5:
a6:86:2e:b7:80:99:5e:24:ce:e2:65:35:19:7d:17:ea:95:e4:
1b:06:f7:15:53:7f:48:ef:19:8b:96:da:cd:f1:b1:cb:64:ef:
fd:4a:1c:93:ca:2f:31:09:f8:59:3b:f2:e8:6c:aa:63:fa:2e:
c4:d2:4e:ca:f0:94:7f:be:02:f5:86:e2:d7:5a:ed:7a:29:21:
3a:f1:8e:ab:7a:bc:0a:ec:23:d3:a7:8e:31:2d:ed:4f:35:9f:
27:7e:3a:ee:0c:fa:23:8e:bf:56:86:59:84:ea:e3:0c:67:ad:
b7:8e:c3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:14:30 2026 by rpki-client