
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft
File: LQx0fe_201Ecz11T86dlcA8cgqA.mft (raw, json)
Hash identifier: IyVZ3cGYsDM1dL72AYUPVKQPJlrfOe81c71BTBkdq/8=
Subject key identifier: 18:AA:40:75:2E:A8:20:AB:A4:7A:18:8D:CB:E3:83:79:10:42:86:03
Authority key identifier: 2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0
Certificate issuer: /CN=A9170975/serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft
Manifest number: D9
Signing time: Fri 17 Jul 2026 07:52:10 +0000
Manifest this update: Fri 17 Jul 2026 07:52:10 +0000
Manifest next update: Fri 24 Jul 2026 07:52:10 +0000
Files and hashes: 1: LQx0fe_201Ecz11T86dlcA8cgqA.crl (hash: TzTaWevAAFRdzFvmYunERVLprLRtuWPfqUeTSQeaKcY=)
2: B0B8FBDA3A2A11F09E37DB48C4F9AE02.roa (hash: W6jpg6xPZ5rYD5YfNt1tX8u8keRGsJ8qbAeMSNB05Io=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl
rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170975, serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0
Validity
Not Before: Jul 17 07:52:10 2026 GMT
Not After : Jul 24 07:52:10 2026 GMT
Subject: CN=6a59df2a-c520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a4:10:08:f0:04:26:57:27:52:49:99:1e:e3:
66:cc:87:af:73:d4:5e:15:bd:50:20:ca:3c:80:f3:
75:e5:68:31:68:e5:0f:80:2a:66:41:18:60:a3:13:
89:fd:4a:5e:27:e5:d9:44:26:d2:ec:43:65:ee:f8:
a9:ee:73:20:67:ce:cf:4e:b0:f9:bd:ac:58:87:e4:
87:17:15:d2:89:ac:d5:b3:82:ca:45:31:0a:47:11:
1f:53:de:4f:23:06:f0:4a:17:85:46:1f:7e:25:5a:
b6:f5:d0:9e:f5:ba:d4:a8:44:04:d9:c5:05:24:08:
14:53:29:d4:fe:a7:03:7e:f7:12:9e:c7:15:17:61:
24:89:7a:82:74:17:5a:61:a1:75:4e:ca:99:96:84:
4a:2e:75:6d:85:8f:47:f6:17:e3:1a:0b:46:fa:4b:
82:30:9d:c1:33:53:55:7e:73:4d:38:d0:4b:4d:61:
3f:1f:9b:ed:9e:86:a3:c6:ca:89:cd:b0:a3:7f:e2:
16:3f:9b:72:3d:dc:40:4c:51:1d:65:30:86:75:35:
2c:32:47:b9:91:e3:5f:93:98:19:a0:b2:ee:0b:18:
9e:2e:07:f9:a0:f2:d1:e7:58:65:9c:68:b9:9d:80:
e5:f3:fa:11:e7:15:4d:cf:2a:09:a4:32:8f:d9:fd:
e1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AA:40:75:2E:A8:20:AB:A4:7A:18:8D:CB:E3:83:79:10:42:86:03
X509v3 Authority Key Identifier:
keyid:2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:eb:47:91:54:31:db:3b:f2:1b:b8:6a:c5:c9:62:6a:76:82:
73:e0:8d:4e:bc:b0:bf:88:c8:61:49:e9:90:0b:6e:ae:de:bf:
4a:76:46:91:3e:42:e5:42:4c:b3:53:2d:8c:3f:bd:6c:ec:d2:
d7:26:27:f3:06:12:c1:c2:68:c0:e4:f0:43:82:57:68:e4:ce:
f7:1c:12:c1:fd:ed:ca:c1:58:f6:2a:ea:fc:40:a9:7c:97:0e:
cb:df:9f:d2:af:7c:c9:a1:16:63:f2:5e:8f:7b:62:dd:ad:14:
40:60:f7:4f:f0:fe:d6:6f:37:56:51:84:95:6f:95:79:c2:ab:
ef:f6:3f:5d:17:9d:b0:47:0b:da:1a:fc:e9:3d:68:cd:ef:56:
2a:71:64:a6:50:42:35:36:df:2b:e7:b9:a1:ba:1d:6b:87:04:
77:0b:de:be:78:4e:20:49:61:03:8d:f2:42:88:be:76:ba:18:
9c:29:2d:61:bb:a4:37:dc:fa:ad:75:8d:3a:69:b0:8c:7c:51:
a2:3f:d6:d7:c1:fe:5b:9d:17:5a:50:a3:36:3c:90:38:cc:a4:
a9:29:57:a2:d4:5a:03:f5:71:c6:30:f9:ce:48:14:2a:ab:b3:
eb:33:d0:ab:33:e0:43:24:94:b5:62:5d:04:dd:7a:24:65:ac:
a8:f7:aa:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:43 2026 by rpki-client