$ rpki-client -vvf rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft File: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft (raw, json) Hash identifier: qePWa7HCdYK4q8k45baQAkRtKEfB6ektLeN+upI586g= Subject key identifier: 99:89:D5:BC:DD:7B:8C:75:90:25:22:12:31:83:80:56:4F:CA:7A:69 Authority key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 Certificate issuer: /CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Certificate serial: 0261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft Manifest number: 0259 Signing time: Sun 01 Mar 2026 02:53:27 +0000 Manifest this update: Sun 01 Mar 2026 02:53:26 +0000 Manifest next update: Sun 08 Mar 2026 02:53:26 +0000 Files and hashes: 1: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl (hash: 5xFDjIpGNNfSkQwj0NvOykd/t/B56ZOZZIgOp42GD9k=) 2: E8B7423A7DE911EDBCFD3082C4F9AE02.roa (hash: SRGoWxChP7e+9DgNFVadV9cBgB/2tWGPBAWl8n31NII=) 3: F40EE60A9B5C11EFAF221C2AC4F9AE02.roa (hash: 9OZz5jF3wKw1CoZp9fYy/VeudY7hWDh1XxJPduifOg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 02:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EC3B, serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Validity Not Before: Mar 1 02:53:26 2026 GMT Not After : Mar 8 02:53:26 2026 GMT Subject: CN=69a3aa26-350f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0a:bb:6e:74:e0:66:d9:cf:db:e5:dd:f0:2a: a4:c6:0b:b7:27:07:ca:e0:f0:39:2a:96:58:3a:e6: f1:6e:fb:fa:dd:08:f7:d9:f0:d8:c8:20:65:b2:ee: 68:31:72:76:e7:d5:4f:2c:40:47:04:8d:77:e3:49: 00:0a:d1:f2:b5:5b:1e:3a:da:ab:41:88:d4:f4:48: 6b:51:c9:a1:98:d6:43:cf:e6:72:1f:1b:45:c0:58: 82:3c:fc:76:aa:6b:78:1d:0a:72:3a:a7:61:bd:8f: b7:af:c3:8f:1f:00:82:7d:84:02:9c:d2:3a:7d:bb: 1e:45:06:d6:37:a9:dc:c6:11:fe:a1:9d:c7:72:57: e5:ca:6c:ff:90:05:2f:04:d8:5c:7a:fb:e8:8b:87: 4e:b9:66:fa:76:96:14:4c:1a:30:9b:f5:11:43:62: b8:9f:7f:1d:b8:94:ed:89:e2:bd:a2:68:06:d7:0f: ca:ce:01:a8:fd:bb:b2:ee:ff:ca:94:2e:21:85:01: d9:f2:c0:77:30:69:0f:8c:2d:cb:29:b0:c4:ce:79: e5:70:cf:74:64:2b:d3:ae:e4:a8:91:92:bf:9c:0d: 7d:03:a9:71:ee:9f:ed:39:b8:f1:c6:fd:41:6e:d0: 0a:ec:7d:74:84:07:a5:d5:32:eb:93:b4:c5:7d:98: f0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:89:D5:BC:DD:7B:8C:75:90:25:22:12:31:83:80:56:4F:CA:7A:69 X509v3 Authority Key Identifier: keyid:2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f1:51:40:c7:96:ed:a0:6a:8f:94:ba:d9:b4:ff:95:eb:98: b6:e2:60:fb:ca:54:23:39:05:df:ef:c1:aa:6e:2d:0b:6b:ca: 2c:86:72:a1:49:4c:e8:ad:ab:fa:7f:b0:67:6c:bf:ea:fc:4f: 07:c9:f5:21:9a:9e:06:82:54:73:8b:7f:c1:aa:5d:d1:c6:04: b2:5a:04:bb:8f:ca:6c:81:f8:5a:3a:f8:16:21:08:6e:cd:35: 4a:7f:81:91:ce:ae:85:dd:45:14:ca:aa:ce:11:29:a9:28:e4: a3:2f:bb:26:a5:8d:42:69:9a:e0:75:7b:d0:27:cf:f8:24:ef: bd:52:99:c2:39:60:0a:16:ba:54:a3:ce:87:f6:2b:2a:4f:e7: 0c:3a:a2:83:e6:51:12:41:6a:e6:cc:ac:12:55:5f:3d:37:50: d6:a0:50:10:bf:55:11:0d:b5:de:45:b1:d9:3e:17:14:10:8e: ff:f0:56:e4:3f:df:7a:32:42:f2:b2:6e:c0:69:34:e6:42:ad: 06:85:1a:03:cd:87:a1:c6:be:aa:07:e5:51:1d:41:dc:51:70: 40:44:88:2c:e3:ce:df:29:0e:5f:b4:10:41:68:c8:66:1e:43: 21:f0:19:7b:6d:9e:34:c9:bb:e8:a5:c7:ac:be:b1:ef:a6:f1: 03:c5:e5:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VDM0IxMTAvBgNVBAUTKDJERENEMDVEQ0UyQzU4MDM3RkUwMkY5NUUxQThCRkNC RDNFMEUzMjUwHhcNMjYwMzAxMDI1MzI2WhcNMjYwMzA4MDI1MzI2WjAYMRYwFAYD VQQDDA02OWEzYWEyNi0zNTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wq7bnTgZtnP2+Xd8Cqkxgu3JwfK4PA5KpZYOubxbvv63Qj32fDYyCBlsu5o MXJ259VPLEBHBI1340kACtHytVseOtqrQYjU9EhrUcmhmNZDz+ZyHxtFwFiCPPx2 qmt4HQpyOqdhvY+3r8OPHwCCfYQCnNI6fbseRQbWN6ncxhH+oZ3Hclflymz/kAUv BNhcevvoi4dOuWb6dpYUTBowm/URQ2K4n38duJTtieK9omgG1w/KzgGo/buy7v/K lC4hhQHZ8sB3MGkPjC3LKbDEznnlcM90ZCvTruSokZK/nA19A6lx7p/tObjxxv1B btAK7H10hAel1TLrk7TFfZjwEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJmJ1bzd e4x1kCUiEjGDgFZPynppMB8GA1UdIwQYMBaAFC3c0F3OLFgDf+AvleGov8vT4OMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUMzQi9ERjRBNDM3MjdE RTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dBTl80Qy1WNGFpX3k5UGc0 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xkelFYYzRzV0FOXzRDLVY0YWlfeTlQZzR5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUMzQi9ERjRBNDM3MjdERTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dB Tl80Qy1WNGFpX3k5UGc0eVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPfFRQMeW7aBqj5S62bT/leuYtuJg+8pUIzkF3+/Bqm4tC2vKLIZyoUlM6K2r +n+wZ2y/6vxPB8n1IZqeBoJUc4t/wapd0cYEsloEu4/KbIH4Wjr4FiEIbs01Sn+B kc6uhd1FFMqqzhEpqSjkoy+7JqWNQmma4HV70CfP+CTvvVKZwjlgCha6VKPOh/Yr Kk/nDDqig+ZREkFq5sysElVfPTdQ1qBQEL9VEQ213kWx2T4XFBCO//BW5D/fejJC 8rJuwGk05kKtBoUaA82Hoca+qgflUR1B3FFwQESILOPO3ykOX7QQQWjIZh5DIfAZ e22eNMm76KXHrL6x76bxA8Xl3w== -----END CERTIFICATE-----Generated at Mon Mar 2 02:56:27 2026 by rpki-client