$ rpki-client -vvf rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft File: LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft (raw, json) Hash identifier: Eb342B/mPUOXDfHHPNtymZizmmLuLSfZsJMCJNikXYo= Subject key identifier: 6D:34:6A:65:43:9B:8B:AF:36:0C:5B:20:45:88:0C:28:6B:E7:59:A6 Authority key identifier: 2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9 Certificate issuer: /CN=A9147DCA/serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9 Certificate serial: 075C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft Manifest number: 074A Signing time: Tue 28 Jul 2026 22:16:05 +0000 Manifest this update: Tue 28 Jul 2026 22:16:04 +0000 Manifest next update: Tue 04 Aug 2026 22:16:04 +0000 Files and hashes: 1: LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl (hash: +UlUn999S/gtMSPr6Aeo/XRXVUz8eTF3tDEl8IFsauk=) 2: F100A1207F9911EBAFB6C91BC4F9AE02.roa (hash: HAOp0TvVsReYpfNF7VS+ecQ+ronnpAxEat5elqg2RPs=) 3: 0463FF50526C11EC80A31615C4F9AE02.roa (hash: B7D8niZNdbXyarYIfRZsjMzyjFHUhkkg3AnRqhXzd3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 22:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1884 (0x75c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147DCA, serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9 Validity Not Before: Jul 28 22:16:04 2026 GMT Not After : Aug 4 22:16:04 2026 GMT Subject: CN=6a692a25-4830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ff:6b:2a:02:ad:93:34:b2:50:25:cf:f1:6a: 20:44:c3:16:5b:a3:df:5b:db:b6:d6:bb:3e:89:03: 4f:6e:65:e8:72:9a:c4:7f:11:d5:57:a0:9c:2e:8f: 78:e8:0b:95:9d:68:e1:7f:5a:a8:75:cd:9c:21:3d: b9:58:f4:a6:a6:4c:b8:7e:06:6d:39:ab:73:d9:fa: fc:b0:bb:2e:7e:66:17:10:10:e8:ff:3a:46:07:8a: 23:c8:15:70:99:00:6c:df:19:41:b8:f8:d5:23:9f: f9:5b:40:4a:87:f2:d4:86:32:45:a1:a8:6c:49:17: 87:ec:4a:4c:c6:43:d5:37:11:6b:d7:a1:99:e3:9a: 3f:6c:ab:89:a8:df:9e:63:c0:37:80:53:03:03:67: 28:0e:5e:f6:5d:f3:90:ad:e8:f4:13:1d:e8:92:c3: 93:5e:0d:96:33:a9:35:ec:c3:a0:24:3d:67:a7:c1: 68:51:19:20:cc:98:83:a6:c7:15:2c:d7:bf:a0:35: 02:b7:bc:3b:c9:13:f5:f6:c3:96:06:4d:a8:0e:f7: d0:62:12:61:2b:c1:54:7b:e7:da:52:3f:e1:33:05: 0b:01:7b:5b:1b:43:79:ff:ca:34:d6:9f:32:73:b9: 7e:de:5f:bc:cc:a3:4a:e2:0e:c7:1f:c5:33:e8:04: 2e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:34:6A:65:43:9B:8B:AF:36:0C:5B:20:45:88:0C:28:6B:E7:59:A6 X509v3 Authority Key Identifier: keyid:2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:08:f4:c1:89:61:14:22:28:61:9d:54:1d:b8:e9:50:35:be: ba:d3:a0:62:d7:4e:07:82:9b:d3:27:77:a3:2c:40:02:e8:ca: 70:48:b1:28:fa:e3:8a:a4:85:45:3d:57:56:d6:01:48:ab:10: a5:94:ba:f7:67:48:87:7c:1e:c3:ab:2e:e3:b5:53:fd:08:ff: bb:da:e6:81:8a:27:1d:c2:71:cd:c7:4b:a0:97:fc:e1:79:bc: 6c:23:d5:7a:b9:10:f6:6d:51:93:9f:0b:5e:e4:40:4b:2a:52: b3:ee:0b:e4:0c:e4:29:a9:ee:49:1f:da:4e:be:64:62:45:2e: 00:10:90:62:9e:da:10:b0:4d:a3:2d:14:48:bf:fe:d5:56:c4: 7e:14:fc:26:ea:83:a2:7b:09:52:fb:bb:54:4f:fe:c8:62:91: d5:a5:77:a8:fd:b8:fe:b1:c4:9e:39:ef:cb:f3:1a:90:70:dd: df:90:dd:90:54:fa:5d:65:97:ea:c6:5a:b6:a6:14:19:2c:6e: d0:dd:f6:ac:cd:65:84:0a:68:00:f3:1a:10:bf:9c:17:9f:5e: a7:98:d6:85:74:b6:42:00:80:c1:78:3a:e7:45:41:1d:a7:2f: 96:c0:ee:57:17:3f:1c:8a:48:6c:23:85:24:39:89:b0:b2:1e: e8:1e:4f:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdEQ0ExMTAvBgNVBAUTKDJDM0EyQTgxMjFDQ0Y4QTlCRkM3Q0I2NjkxODU0QUY1 RTREMjE5RjkwHhcNMjYwNzI4MjIxNjA0WhcNMjYwODA0MjIxNjA0WjAYMRYwFAYD VQQDEw02YTY5MmEyNS00ODMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqf9rKgKtkzSyUCXP8WogRMMWW6PfW9u21rs+iQNPbmXocprEfxHVV6CcLo94 6AuVnWjhf1qodc2cIT25WPSmpky4fgZtOatz2fr8sLsufmYXEBDo/zpGB4ojyBVw mQBs3xlBuPjVI5/5W0BKh/LUhjJFoahsSReH7EpMxkPVNxFr16GZ45o/bKuJqN+e Y8A3gFMDA2coDl72XfOQrej0Ex3oksOTXg2WM6k17MOgJD1np8FoURkgzJiDpscV LNe/oDUCt7w7yRP19sOWBk2oDvfQYhJhK8FUe+faUj/hMwULAXtbG0N5/8o01p8y c7l+3l+8zKNK4g7HH8Uz6AQuvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG00amVD m4uvNgxbIEWIDChr51mmMB8GA1UdIwQYMBaAFCw6KoEhzPipv8fLZpGFSvXk0hn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0RDQS8xQzc1RURBNjdE NkExMUVCQTRBNTk4MENDNEY5QUUwMi9MRG9xZ1NITS1LbV94OHRta1lWSzllVFNH ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEb3FnU0hNLUttX3g4dG1rWVZLOWVUU0dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0RDQS8xQzc1RURBNjdENkExMUVCQTRBNTk4MENDNEY5QUUwMi9MRG9xZ1NITS1L bV94OHRta1lWSzllVFNHZmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAagj0wYlhFCIoYZ1UHbjpUDW+utOgYtdOB4Kb0yd3oyxAAujKcEixKPrjiqSF RT1XVtYBSKsQpZS692dIh3wew6su47VT/Qj/u9rmgYonHcJxzcdLoJf84Xm8bCPV erkQ9m1Rk58LXuRASypSs+4L5AzkKanuSR/aTr5kYkUuABCQYp7aELBNoy0USL/+ 1VbEfhT8JuqDonsJUvu7VE/+yGKR1aV3qP24/rHEnjnvy/MakHDd35DdkFT6XWWX 6sZatqYUGSxu0N32rM1lhApoAPMaEL+cF59ep5jWhXS2QgCAwXg650VBHacvlsDu Vxc/HIpIbCOFJDmJsLIe6B5Piw== -----END CERTIFICATE-----Generated at Wed Jul 29 04:27:52 2026 by rpki-client