
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft
File: LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft (raw, json)
Hash identifier: JIufWAb5Zmc1MLbk1ehphI7GxtKpwScEFeqm2jnH8F0=
Subject key identifier: 0E:B6:D9:BE:59:09:DE:D0:FA:AD:1D:3F:6E:E8:49:33:51:8C:48:A2
Authority key identifier: 2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9
Certificate issuer: /CN=A9147DCA/serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9
Certificate serial: 0745
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft
Manifest number: 0733
Signing time: Fri 12 Jun 2026 21:51:52 +0000
Manifest this update: Fri 12 Jun 2026 21:51:52 +0000
Manifest next update: Fri 19 Jun 2026 21:51:52 +0000
Files and hashes: 1: LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl (hash: Jgr+q5MOf7P4RGqZu996tPVzKAzhGJDk6eE4pPhpNMo=)
2: 0463FF50526C11EC80A31615C4F9AE02.roa (hash: B7D8niZNdbXyarYIfRZsjMzyjFHUhkkg3AnRqhXzd3I=)
3: F100A1207F9911EBAFB6C91BC4F9AE02.roa (hash: HAOp0TvVsReYpfNF7VS+ecQ+ronnpAxEat5elqg2RPs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl
rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:51:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1861 (0x745)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147DCA, serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9
Validity
Not Before: Jun 12 21:51:52 2026 GMT
Not After : Jun 19 21:51:52 2026 GMT
Subject: CN=6a2c7f78-d581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:dd:83:4b:33:6a:d7:63:0c:c5:b2:41:9e:
24:c2:3a:35:f6:a5:27:47:41:47:72:cd:d7:ae:e8:
e8:d2:b7:ee:78:ba:28:08:95:8b:ef:ee:6a:1a:3b:
f1:f3:af:3a:0c:c0:bc:4d:5b:79:99:28:4c:d8:02:
c4:ac:48:6e:6a:36:57:00:04:bd:22:a8:28:43:af:
a4:5c:b0:81:ff:19:66:c7:11:8e:38:1b:c2:5f:0f:
c2:07:cd:4d:03:08:1c:64:0e:b0:e1:49:4b:b7:1b:
46:13:95:2c:53:d1:6b:5f:08:c5:4d:c3:9f:90:55:
ef:21:08:0e:b4:9b:f7:a6:46:07:65:0a:1c:2a:8f:
61:25:eb:c8:9e:69:91:0b:7f:02:8b:1f:bc:12:9d:
b1:b8:95:a8:01:cc:8f:73:56:bd:9f:19:5c:c1:d8:
0e:73:fb:aa:fb:14:85:f3:bc:ff:10:08:cf:97:67:
a4:1a:5a:d7:1a:45:78:4d:56:44:b8:7b:d6:b5:23:
33:a1:76:31:6c:16:85:c1:e6:b5:32:b7:03:34:21:
4c:91:02:a6:d0:9a:fe:e4:99:89:45:90:94:80:93:
63:b5:27:66:e9:27:5c:52:25:1b:38:2b:ef:7b:8b:
46:a6:45:a3:8b:55:99:4e:5f:6c:aa:1c:1e:e9:85:
89:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B6:D9:BE:59:09:DE:D0:FA:AD:1D:3F:6E:E8:49:33:51:8C:48:A2
X509v3 Authority Key Identifier:
keyid:2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:a9:48:de:a6:07:13:a0:94:80:7e:36:37:96:24:4d:77:c4:
b1:bf:97:ae:10:76:a6:c9:dc:a4:3c:3e:64:0b:8c:0f:93:ff:
26:b7:fc:68:42:de:73:df:ba:66:eb:14:d1:ed:c7:f1:0a:4d:
ab:86:e0:d2:40:31:ae:ac:52:e9:e0:98:e3:a2:44:08:ea:e6:
37:46:5f:be:b1:ee:b1:41:c0:43:56:d1:65:53:95:bd:51:5c:
05:1f:b9:9f:64:84:3f:35:e5:19:35:d3:96:b1:4f:fe:fb:f0:
a9:80:3e:6a:cb:75:17:42:12:6a:76:5d:60:08:86:c3:94:09:
c6:3a:8c:43:73:49:0d:b3:0f:2a:a0:39:a2:13:b9:59:1b:95:
09:cd:f8:f2:a8:c7:a7:6a:11:9b:cc:20:8d:49:6e:f8:d5:f0:
2d:2a:85:3c:33:f7:7b:b0:6b:66:3e:dc:b8:44:c8:02:58:09:
4e:5f:1f:34:ce:5b:88:81:65:46:20:de:33:97:89:05:bc:bf:
4b:13:b5:df:69:73:95:cd:7f:1e:48:ff:83:06:de:1a:66:04:
57:a2:e8:5b:d0:24:88:19:cd:0d:d2:3e:10:51:65:67:50:a7:
6a:84:0f:65:77:06:66:7e:34:4d:7c:65:39:6b:51:9c:84:4e:
7b:7e:6d:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDdEQ0ExMTAvBgNVBAUTKDJDM0EyQTgxMjFDQ0Y4QTlCRkM3Q0I2NjkxODU0QUY1
RTREMjE5RjkwHhcNMjYwNjEyMjE1MTUyWhcNMjYwNjE5MjE1MTUyWjAYMRYwFAYD
VQQDEw02YTJjN2Y3OC1kNTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwnndg0szatdjDMWyQZ4kwjo19qUnR0FHcs3Xrujo0rfueLooCJWL7+5qGjvx
8686DMC8TVt5mShM2ALErEhuajZXAAS9IqgoQ6+kXLCB/xlmxxGOOBvCXw/CB81N
AwgcZA6w4UlLtxtGE5UsU9FrXwjFTcOfkFXvIQgOtJv3pkYHZQocKo9hJevInmmR
C38Cix+8Ep2xuJWoAcyPc1a9nxlcwdgOc/uq+xSF87z/EAjPl2ekGlrXGkV4TVZE
uHvWtSMzoXYxbBaFwea1MrcDNCFMkQKm0Jr+5JmJRZCUgJNjtSdm6SdcUiUbOCvv
e4tGpkWji1WZTl9sqhwe6YWJIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA622b5Z
Cd7Q+q0dP27oSTNRjEiiMB8GA1UdIwQYMBaAFCw6KoEhzPipv8fLZpGFSvXk0hn5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0RDQS8xQzc1RURBNjdE
NkExMUVCQTRBNTk4MENDNEY5QUUwMi9MRG9xZ1NITS1LbV94OHRta1lWSzllVFNH
ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xEb3FnU0hNLUttX3g4dG1rWVZLOWVUU0dmay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
N0RDQS8xQzc1RURBNjdENkExMUVCQTRBNTk4MENDNEY5QUUwMi9MRG9xZ1NITS1L
bV94OHRta1lWSzllVFNHZmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdKlI3qYHE6CUgH42N5YkTXfEsb+XrhB2psncpDw+ZAuMD5P/Jrf8aELec9+6
ZusU0e3H8QpNq4bg0kAxrqxS6eCY46JECOrmN0ZfvrHusUHAQ1bRZVOVvVFcBR+5
n2SEPzXlGTXTlrFP/vvwqYA+ast1F0ISanZdYAiGw5QJxjqMQ3NJDbMPKqA5ohO5
WRuVCc348qjHp2oRm8wgjUlu+NXwLSqFPDP3e7BrZj7cuETIAlgJTl8fNM5biIFl
RiDeM5eJBby/SxO132lzlc1/Hkj/gwbeGmYEV6LoW9AkiBnNDdI+EFFlZ1CnaoQP
ZXcGZn40TXxlOWtRnIROe35tsw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:55:09 2026 by rpki-client