$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft File: LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft (raw, json) Hash identifier: F0BZ6FgmzUqHgQG+d/pT2kfAWZeOf+hQv/jr+dksC3k= Subject key identifier: CD:6E:5B:6B:88:C2:F0:C1:BE:CD:84:44:D0:F0:9A:63:09:F1:7F:DC Authority key identifier: 2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9 Certificate issuer: /CN=A9147DCA/serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9 Certificate serial: 077D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft Manifest number: 0769 Signing time: Tue 22 Sep 2026 21:25:26 +0000 Manifest this update: Tue 22 Sep 2026 21:25:26 +0000 Manifest next update: Tue 29 Sep 2026 21:25:26 +0000 Files and hashes: 1: LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl (hash: kDSZlTir4FnxEN+M9SvvxVGFAZtaXBkq6dzXxFgGFP0=) 2: 0463FF50526C11EC80A31615C4F9AE02.roa (hash: /IcPEQXztUD25ppGPtUF0d61zWL2uv6MVc64gveJDyI=) 3: F100A1207F9911EBAFB6C91BC4F9AE02.roa (hash: uHuDTfwJOFKVGTsEop4y/RlcNFUS7e0GQKR0Kyo3w84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 21:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1917 (0x77d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147DCA, serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9 Validity Not Before: Sep 22 21:25:26 2026 GMT Not After : Sep 29 21:25:26 2026 GMT Subject: CN=6ab2f246-0369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:29:68:da:9e:27:bc:55:5a:51:0b:61:6c:c2: 98:7c:1a:03:c6:7b:ef:63:e4:e0:83:48:94:4f:7b: b4:0e:21:ff:39:41:5a:b4:88:36:ed:3d:07:83:37: a9:3c:2c:5a:22:fe:35:91:46:67:30:6f:b9:a8:7d: eb:65:54:9d:94:14:46:08:1d:dc:fc:f7:ea:0f:fd: 98:2b:7e:0d:57:e1:9b:ae:52:ce:57:f8:d5:f0:55: 6a:bc:d5:e3:03:22:8e:d7:3a:b8:5d:78:a6:4e:11: 05:28:ae:8f:75:58:01:cc:24:1a:ad:d4:73:2a:7e: b2:3f:68:fc:75:1b:ea:a3:7c:fa:cb:38:ea:ad:65: 4d:72:70:b6:af:c3:e9:7f:bd:dc:9e:e0:4f:35:50: 83:94:a2:22:f0:16:16:68:cb:8e:d2:d6:d8:dc:0c: 52:72:b9:74:ac:32:fd:20:bd:a5:62:8f:96:7d:05: 82:af:73:9a:80:14:68:f1:b9:ec:5a:28:46:97:5e: 38:39:be:62:62:7a:82:41:54:2c:da:4c:e1:7b:df: 67:b2:a8:cc:9d:64:50:c8:fd:44:64:e1:e9:06:a9: b1:89:69:3c:fd:db:16:db:0e:fe:b4:bc:8b:f5:a2: f7:02:b8:1e:4d:8b:f5:8b:b8:b4:26:13:9c:09:e6: 81:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:6E:5B:6B:88:C2:F0:C1:BE:CD:84:44:D0:F0:9A:63:09:F1:7F:DC X509v3 Authority Key Identifier: keyid:2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:33:69:2e:0c:19:29:a4:1a:96:d2:29:63:69:aa:ea:65:74: 88:a0:97:3f:a1:f6:24:a1:bf:68:05:41:34:12:76:e9:72:22: 34:12:fe:89:e0:b5:b8:d5:e8:57:1e:31:86:8b:5d:b8:17:3c: 6b:18:67:1d:1f:d9:2d:c9:9a:64:a0:f1:e2:c3:50:d1:fa:8d: 0c:34:3b:49:96:7e:61:26:57:9f:16:1d:df:57:18:c4:e3:ac: 90:49:6c:fb:2f:d1:05:42:c4:a2:2b:f6:35:4e:42:62:7d:20: cf:ca:37:a0:1f:7d:e7:a0:8a:64:1a:b1:e7:9f:f1:4c:05:a7: d1:1c:db:c3:4f:39:f7:5e:7c:5a:1c:f3:ba:b9:d3:78:5b:d4: 2b:c8:68:d7:21:44:09:de:87:19:b5:85:54:53:89:43:57:42: 83:ba:0f:1c:e6:ef:e8:fd:64:eb:7e:ea:4c:ed:7c:95:ef:37: c5:d9:83:bc:d0:de:7b:42:f0:c8:ae:1a:cb:32:cf:ff:99:3a: 57:95:89:d5:32:5d:31:f9:18:4c:43:7a:ad:fd:60:27:d0:9d: fd:ff:74:dc:91:ac:63:c9:65:e4:d5:2d:e9:b2:7c:15:10:d0: 4d:e7:89:43:28:3b:45:8c:1a:9d:b4:23:8b:e4:40:62:e3:61: d6:cd:84:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdEQ0ExMTAvBgNVBAUTKDJDM0EyQTgxMjFDQ0Y4QTlCRkM3Q0I2NjkxODU0QUY1 RTREMjE5RjkwHhcNMjYwOTIyMjEyNTI2WhcNMjYwOTI5MjEyNTI2WjAYMRYwFAYD VQQDEw02YWIyZjI0Ni0wMzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ilo2p4nvFVaUQthbMKYfBoDxnvvY+Tgg0iUT3u0DiH/OUFatIg27T0Hgzep PCxaIv41kUZnMG+5qH3rZVSdlBRGCB3c/PfqD/2YK34NV+GbrlLOV/jV8FVqvNXj AyKO1zq4XXimThEFKK6PdVgBzCQardRzKn6yP2j8dRvqo3z6yzjqrWVNcnC2r8Pp f73cnuBPNVCDlKIi8BYWaMuO0tbY3AxScrl0rDL9IL2lYo+WfQWCr3OagBRo8bns WihGl144Ob5iYnqCQVQs2kzhe99nsqjMnWRQyP1EZOHpBqmxiWk8/dsW2w7+tLyL 9aL3ArgeTYv1i7i0JhOcCeaBFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM1uW2uI wvDBvs2ERNDwmmMJ8X/cMB8GA1UdIwQYMBaAFCw6KoEhzPipv8fLZpGFSvXk0hn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0RDQS8xQzc1RURBNjdE NkExMUVCQTRBNTk4MENDNEY5QUUwMi9MRG9xZ1NITS1LbV94OHRta1lWSzllVFNH ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEb3FnU0hNLUttX3g4dG1rWVZLOWVUU0dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0RDQS8xQzc1RURBNjdENkExMUVCQTRBNTk4MENDNEY5QUUwMi9MRG9xZ1NITS1L bV94OHRta1lWSzllVFNHZmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlDNpLgwZKaQaltIpY2mq6mV0iKCXP6H2JKG/aAVBNBJ26XIiNBL+ieC1uNXo Vx4xhotduBc8axhnHR/ZLcmaZKDx4sNQ0fqNDDQ7SZZ+YSZXnxYd31cYxOOskEls +y/RBULEoiv2NU5CYn0gz8o3oB9956CKZBqx55/xTAWn0Rzbw0859158WhzzurnT eFvUK8ho1yFECd6HGbWFVFOJQ1dCg7oPHObv6P1k637qTO18le83xdmDvNDee0Lw yK4ayzLP/5k6V5WJ1TJdMfkYTEN6rf1gJ9Cd/f903JGsY8ll5NUt6bJ8FRDQTeeJ Qyg7RYwanbQji+RAYuNh1s2E9Q== -----END CERTIFICATE-----Generated at Thu Sep 24 13:29:13 2026 by rpki-client