
$ rpki-client -vvf rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
File: LDTzNZTMO-PAfo54N2v8QzJjFUg.mft (raw, json)
Hash identifier: n70U+Df5ULIrdUfGt5aYCh6ZhYeHoKtHAqBRzqgoC94=
Subject key identifier: 6F:22:0D:DA:D9:FB:55:64:AA:F5:FD:C6:0D:11:17:7E:3F:5B:4E:AB
Authority key identifier: 2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48
Certificate issuer: /CN=A914ADD8/serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548
Certificate serial: 352E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
Manifest number: 352D
Signing time: Thu 16 Apr 2026 14:28:56 +0000
Manifest this update: Thu 16 Apr 2026 14:28:56 +0000
Manifest next update: Thu 23 Apr 2026 14:28:56 +0000
Files and hashes: 1: LDTzNZTMO-PAfo54N2v8QzJjFUg.crl (hash: L3pt82k109bFeFJpJoWi5r+Peh5J3eYdHibossKgajY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl
rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:28:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13614 (0x352e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914ADD8, serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548
Validity
Not Before: Apr 16 14:28:56 2026 GMT
Not After : Apr 23 14:28:56 2026 GMT
Subject: CN=69e0f228-92f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d0:e3:5d:aa:42:b8:30:5a:da:a3:fe:fa:fc:
cc:90:9e:39:08:d2:ed:0e:4d:35:96:8e:1c:96:3d:
50:76:47:06:8b:1d:f0:5a:dc:05:9c:57:c3:9c:05:
68:e7:22:6b:21:73:e7:d4:22:29:97:e4:2f:30:6a:
69:24:9f:b6:92:25:1d:b0:25:7e:bc:87:84:63:db:
7b:4c:4b:c2:10:05:a5:a4:43:47:f4:95:32:1d:3a:
63:d5:13:90:f2:80:a6:50:53:66:0f:84:a3:1a:7a:
91:9a:e7:d8:cc:1f:61:71:3c:47:d8:0f:0a:c7:91:
db:dd:5c:0b:92:4b:4d:6a:47:b2:e1:f2:6f:a5:d1:
00:cc:b1:35:76:0f:10:14:af:23:cc:dd:5c:3d:0e:
17:00:63:32:18:97:a8:83:9c:57:af:5b:1b:cf:e3:
07:7a:bd:19:e2:c4:53:5b:9f:ef:b3:1a:fc:45:31:
9a:e3:cb:92:b9:73:53:0c:d8:d9:77:f9:f4:d3:85:
67:58:6c:3f:05:5d:2a:e2:14:05:68:a0:1c:df:06:
62:e4:b7:e5:e9:c7:e1:63:4b:c8:ee:5f:3e:2a:2b:
44:51:37:a8:97:20:6e:13:e3:ed:7e:06:60:c2:9d:
70:67:75:c1:f7:a5:fc:c3:5e:96:55:5e:8e:42:97:
9e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:22:0D:DA:D9:FB:55:64:AA:F5:FD:C6:0D:11:17:7E:3F:5B:4E:AB
X509v3 Authority Key Identifier:
keyid:2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:6e:85:3d:1e:29:1a:49:0f:21:3e:23:99:01:f8:fa:51:31:
af:6d:3c:1c:d0:1c:2f:17:0b:d9:41:2a:95:50:23:34:60:0c:
2d:43:97:a6:bd:3f:d6:38:5f:3b:e4:f0:50:54:15:9f:58:49:
eb:e2:9c:32:03:c3:1c:fe:68:92:c1:56:3d:fc:d8:d2:ae:e0:
35:3b:db:d1:8a:bd:5e:de:45:7f:b2:14:9d:83:2f:97:9b:65:
fe:17:9e:bd:80:8a:93:87:14:e1:31:b2:04:ea:a8:c9:61:b3:
c3:e4:7f:ef:b3:12:0d:91:6d:f4:02:70:ca:d7:58:15:b1:1f:
3f:bd:2b:33:66:ce:3d:7e:76:67:d7:32:8f:07:07:95:7f:4f:
4e:f1:55:f2:ad:ed:77:86:37:64:5a:5c:43:c1:c4:ac:96:2b:
c0:3b:99:88:d9:bb:0c:39:9c:90:0e:07:e4:bd:0b:ce:61:77:
a9:e4:69:7e:d9:96:e0:25:38:63:3d:31:8d:22:6b:25:83:f7:
78:36:29:a8:c1:f3:da:00:5d:41:eb:d0:b5:85:83:ec:07:47:
cc:14:73:5b:76:d7:0e:e5:47:03:c9:d4:a4:bb:86:3e:b7:bf:
23:bb:45:91:03:29:89:6b:4a:fb:12:ac:13:83:5f:1b:8e:6a:
34:3c:5f:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEFERDgxMTAvBgNVBAUTKDJDMzRGMzM1OTRDQzNCRTNDMDdFOEU3ODM3NkJGQzQz
MzI2MzE1NDgwHhcNMjYwNDE2MTQyODU2WhcNMjYwNDIzMTQyODU2WjAYMRYwFAYD
VQQDEw02OWUwZjIyOC05MmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlNDjXapCuDBa2qP++vzMkJ45CNLtDk01lo4clj1QdkcGix3wWtwFnFfDnAVo
5yJrIXPn1CIpl+QvMGppJJ+2kiUdsCV+vIeEY9t7TEvCEAWlpENH9JUyHTpj1ROQ
8oCmUFNmD4SjGnqRmufYzB9hcTxH2A8Kx5Hb3VwLkktNakey4fJvpdEAzLE1dg8Q
FK8jzN1cPQ4XAGMyGJeog5xXr1sbz+MHer0Z4sRTW5/vsxr8RTGa48uSuXNTDNjZ
d/n004VnWGw/BV0q4hQFaKAc3wZi5Lfl6cfhY0vI7l8+KitEUTeolyBuE+PtfgZg
wp1wZ3XB96X8w16WVV6OQpeeSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG8iDdrZ
+1VkqvX9xg0RF34/W06rMB8GA1UdIwQYMBaAFCw08zWUzDvjwH6OeDdr/EMyYxVI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUREOC9BNEQ4MTA0RTFE
ODcxMUUyODM0Q0I5REYwOEIwMkNEMi9MRFR6TlpUTU8tUEFmbzU0TjJ2OFF6SmpG
VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xEVHpOWlRNTy1QQWZvNTROMnY4UXpKakZVZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QUREOC9BNEQ4MTA0RTFEODcxMUUyODM0Q0I5REYwOEIwMkNEMi9MRFR6TlpUTU8t
UEFmbzU0TjJ2OFF6SmpGVWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeG6FPR4pGkkPIT4jmQH4+lExr208HNAcLxcL2UEqlVAjNGAMLUOXpr0/1jhf
O+TwUFQVn1hJ6+KcMgPDHP5oksFWPfzY0q7gNTvb0Yq9Xt5Ff7IUnYMvl5tl/hee
vYCKk4cU4TGyBOqoyWGzw+R/77MSDZFt9AJwytdYFbEfP70rM2bOPX52Z9cyjwcH
lX9PTvFV8q3td4Y3ZFpcQ8HErJYrwDuZiNm7DDmckA4H5L0LzmF3qeRpftmW4CU4
Yz0xjSJrJYP3eDYpqMHz2gBdQevQtYWD7AdHzBRzW3bXDuVHA8nUpLuGPre/I7tF
kQMpiWtK+xKsE4NfG45qNDxf1g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:31:20 2026 by rpki-client