$ rpki-client -vvf rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft File: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft (raw, json) Hash identifier: rSo19sZ4LF845nC3ev7qaEQDDSPJZKWG7L2c+YAClZU= Subject key identifier: 0E:A0:94:8D:B5:7B:07:52:53:7A:B5:44:CC:D4:EE:36:2D:AF:7E:41 Authority key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 Certificate issuer: /CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Certificate serial: 02B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft Manifest number: 02A5 Signing time: Mon 27 Jul 2026 02:54:54 +0000 Manifest this update: Mon 27 Jul 2026 02:54:53 +0000 Manifest next update: Mon 03 Aug 2026 02:54:53 +0000 Files and hashes: 1: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl (hash: R3aV26lePUf9b428BMU+MVdzTImZdZ6UC4aqATPmL7I=) 2: F40EE60A9B5C11EFAF221C2AC4F9AE02.roa (hash: wMJcy9/RZ84DRy4ocrFd613aXU3WIp1EJ/+o6ekr43M=) 3: E8B7423A7DE911EDBCFD3082C4F9AE02.roa (hash: GFXgxmEoBQzCrsm/fS7lTOgYerzl4oJDvOwjqKvAb0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 689 (0x2b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EC3B, serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Validity Not Before: Jul 27 02:54:53 2026 GMT Not After : Aug 3 02:54:53 2026 GMT Subject: CN=6a66c87e-e780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:90:8f:f1:86:da:b0:9e:f1:c4:a0:51:bf:ac: f2:18:7a:27:f5:b7:98:f6:a4:42:36:45:82:1a:09: 28:37:b1:71:16:2e:f7:f5:62:81:4f:ad:04:89:ff: a7:d3:0e:ed:46:aa:62:b9:55:3f:0e:b5:65:13:89: 7e:f5:b5:ba:22:72:f8:ea:c3:72:df:ed:92:87:78: c1:c5:86:bb:0f:19:08:4f:86:25:50:4e:2a:7e:dc: 05:09:2c:f0:fe:10:3d:fa:37:43:62:2d:38:e3:1d: 31:62:ea:12:9a:9e:f0:b0:92:27:a9:de:2c:3c:c1: 0f:2a:c6:21:db:48:2d:af:42:9c:67:79:96:6b:b1: 54:f2:34:90:51:01:31:af:a5:f4:ce:46:2d:10:b5: f5:b7:24:a0:be:03:03:32:6a:89:f4:82:00:58:ad: 01:ab:69:95:52:c9:e8:18:17:1c:20:5b:86:58:cb: ac:84:e1:7c:e4:cd:1f:24:69:cc:5c:c5:62:ce:6a: b9:88:f5:aa:3b:b8:61:47:95:10:0e:29:eb:4e:a6: f9:9a:5e:76:e0:1d:d6:a1:d3:e0:20:21:f4:1f:55: 81:28:c5:3a:72:38:8a:59:9b:16:e1:e7:31:51:28: 25:11:48:59:72:1d:8e:be:c2:d4:56:24:e2:69:18: 75:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A0:94:8D:B5:7B:07:52:53:7A:B5:44:CC:D4:EE:36:2D:AF:7E:41 X509v3 Authority Key Identifier: keyid:2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:bd:1a:36:fc:b9:6a:a0:2f:a5:62:f3:a6:f6:95:86:31:e6: e0:9f:51:9a:2d:4b:e7:2d:10:66:fc:f3:9e:09:ff:46:f9:dd: 4a:16:68:b5:90:12:f2:5e:2c:e7:fe:aa:7b:da:9b:22:00:e2: c4:69:8e:4b:ab:45:49:25:54:fc:cb:e4:f0:89:3b:05:d0:df: cb:71:39:b3:44:68:a2:ce:6f:8f:b4:65:cb:ca:72:23:c8:e1: 4a:b6:b8:36:a7:dd:a5:1c:91:23:dd:05:54:d9:7f:1d:b0:49: 9b:66:3d:b5:8d:a9:62:10:e0:db:c4:84:26:94:b0:92:bc:34: e1:da:3a:07:6d:05:d5:b0:c5:7a:e6:6d:7a:a5:a3:3c:79:c9: 14:3e:cb:13:bb:1a:fd:3e:fc:3b:6c:54:9b:d1:7d:19:4c:9a: 2c:3a:a8:2d:38:c6:d9:7b:22:df:a2:49:a2:12:86:b5:88:da: d0:90:ab:45:a7:22:36:3c:4f:36:5e:27:d7:32:32:bf:fa:d8: ae:a6:01:89:87:d1:9e:51:25:33:69:4a:3f:25:4a:a8:ab:a3: de:ee:b1:63:d1:71:2f:ba:1f:b9:76:e4:40:76:17:15:ce:a1: ce:2b:91:9b:88:48:99:fd:35:2a:be:80:16:ee:51:b6:dc:23: c6:80:40:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VDM0IxMTAvBgNVBAUTKDJERENEMDVEQ0UyQzU4MDM3RkUwMkY5NUUxQThCRkNC RDNFMEUzMjUwHhcNMjYwNzI3MDI1NDUzWhcNMjYwODAzMDI1NDUzWjAYMRYwFAYD VQQDEw02YTY2Yzg3ZS1lNzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJCP8YbasJ7xxKBRv6zyGHon9beY9qRCNkWCGgkoN7FxFi739WKBT60Eif+n 0w7tRqpiuVU/DrVlE4l+9bW6InL46sNy3+2Sh3jBxYa7DxkIT4YlUE4qftwFCSzw /hA9+jdDYi044x0xYuoSmp7wsJInqd4sPMEPKsYh20gtr0KcZ3mWa7FU8jSQUQEx r6X0zkYtELX1tySgvgMDMmqJ9IIAWK0Bq2mVUsnoGBccIFuGWMushOF85M0fJGnM XMVizmq5iPWqO7hhR5UQDinrTqb5ml524B3WodPgICH0H1WBKMU6cjiKWZsW4ecx USglEUhZch2OvsLUViTiaRh1NQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA6glI21 ewdSU3q1RMzU7jYtr35BMB8GA1UdIwQYMBaAFC3c0F3OLFgDf+AvleGov8vT4OMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUMzQi9ERjRBNDM3MjdE RTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dBTl80Qy1WNGFpX3k5UGc0 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xkelFYYzRzV0FOXzRDLVY0YWlfeTlQZzR5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUMzQi9ERjRBNDM3MjdERTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dB Tl80Qy1WNGFpX3k5UGc0eVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhb0aNvy5aqAvpWLzpvaVhjHm4J9Rmi1L5y0QZvzzngn/RvndShZotZAS8l4s 5/6qe9qbIgDixGmOS6tFSSVU/Mvk8Ik7BdDfy3E5s0Roos5vj7Rly8pyI8jhSra4 NqfdpRyRI90FVNl/HbBJm2Y9tY2pYhDg28SEJpSwkrw04do6B20F1bDFeuZteqWj PHnJFD7LE7sa/T78O2xUm9F9GUyaLDqoLTjG2Xsi36JJohKGtYja0JCrRaciNjxP Nl4n1zIyv/rYrqYBiYfRnlElM2lKPyVKqKuj3u6xY9FxL7ofuXbkQHYXFc6hziuR m4hImf01Kr6AFu5RttwjxoBA9A== -----END CERTIFICATE-----Generated at Tue Jul 28 19:56:09 2026 by rpki-client