$ rpki-client -vvf rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft File: ldG-85ALQWWEFku3RjF3EwIpFog.mft (raw, json) Hash identifier: ocZLYONdBOFaOpz79rUNldiszEpqhJ3pSxxsQ5TU9fw= Subject key identifier: AB:59:DA:A5:FB:BC:FC:FD:18:F2:B3:E9:2F:68:8B:09:91:59:95:B4 Authority key identifier: 95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88 Certificate issuer: /CN=A91577DD/serialNumber=95D1BEF3900B416584164BB74631771302291688 Certificate serial: 3584 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft Manifest number: 3575 Signing time: Tue 28 Jul 2026 14:53:04 +0000 Manifest this update: Tue 28 Jul 2026 14:53:04 +0000 Manifest next update: Tue 04 Aug 2026 14:53:04 +0000 Files and hashes: 1: ldG-85ALQWWEFku3RjF3EwIpFog.crl (hash: UyhkA56n/J7VuaGnLQ3bqKnhcZm7YP33x2g0+3URP3I=) 2: C2F7AE40C03111EA9777314AC4F9AE02.roa (hash: JsmcN/iHNKGrr5+UdOJwBNNsYsjaqRo1Qt07Gdc3xmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13700 (0x3584) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91577DD, serialNumber=95D1BEF3900B416584164BB74631771302291688 Validity Not Before: Jul 28 14:53:04 2026 GMT Not After : Aug 4 14:53:04 2026 GMT Subject: CN=6a68c250-5116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d8:01:c6:96:3d:14:36:b9:49:18:21:23:6f: f5:df:d9:9c:c9:69:b0:fd:de:14:21:e3:28:d4:01: 83:9e:8c:d1:98:26:d1:88:e4:7e:8a:91:94:49:a0: 9a:f7:b1:68:b5:89:81:4a:e5:0a:a4:67:6e:6f:f9: 9d:ed:6e:97:c0:ec:a0:84:74:4d:24:66:50:3c:d4: a9:47:88:6f:a7:58:41:c0:fe:49:53:fd:33:5f:12: ed:fc:51:a7:4d:7e:97:ab:4d:66:01:d7:bf:6a:35: 54:17:05:ad:a9:97:6c:78:37:cd:78:08:ef:29:24: d0:d0:59:97:8a:d9:eb:4c:00:fd:42:57:c0:b9:6c: b8:da:2e:73:df:76:10:b5:84:a4:c6:ac:9b:5f:3b: 03:9d:71:6c:b3:6f:c5:39:22:8c:84:16:03:9d:03: 95:ae:fc:14:db:4c:91:93:a0:72:90:ee:8d:3e:14: a1:d7:ed:ac:0e:52:7d:96:87:81:29:b4:71:e9:af: b1:ba:8e:ff:f8:93:0d:84:50:21:f8:42:5a:f6:da: 4d:d2:3f:0e:ee:75:88:fb:23:e1:3b:e0:a5:c2:14: 80:5a:7c:28:9d:28:0b:af:55:0d:c1:74:ae:aa:9e: fa:ef:14:54:59:a0:be:f2:82:95:73:30:d2:a1:7a: 63:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:59:DA:A5:FB:BC:FC:FD:18:F2:B3:E9:2F:68:8B:09:91:59:95:B4 X509v3 Authority Key Identifier: keyid:95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:2b:48:f1:b0:23:13:11:a4:15:c8:79:8c:56:bb:17:03:b0: 17:ee:17:e2:1a:6f:3d:f7:3f:a1:7d:32:88:55:28:15:a4:99: c8:80:c9:ed:1f:c3:39:4d:83:67:42:2a:46:f6:a4:e1:71:41: 40:35:de:1c:5b:08:f7:1f:c4:38:fc:16:cc:6c:43:74:6d:21: 27:0c:d7:f7:df:38:d6:6e:57:60:05:15:40:86:9a:03:30:80: ca:71:fa:e5:f1:1a:01:8b:c5:0d:39:ef:ab:2a:ca:2d:8c:58: 24:3c:29:54:9a:71:2a:e4:34:f3:08:eb:de:bf:65:f1:c2:87: f8:b3:cf:5b:8e:ac:0d:85:5e:5e:a0:aa:ac:6a:17:63:aa:4e: 9d:6a:91:fe:91:e3:6a:b5:5e:3f:87:21:ea:b1:09:eb:db:2c: df:6d:77:f7:8b:0f:3b:cd:17:21:35:81:b1:93:91:94:be:86: d1:a5:2d:e7:6a:e4:fb:e4:16:d0:0c:67:71:73:36:7d:b9:35: 2f:e4:fc:97:8c:f5:a3:41:26:f8:21:b6:fd:14:10:7e:a9:d1: 00:44:74:17:53:e2:13:29:92:dd:e7:83:97:89:ae:cc:c8:61: af:7d:72:0c:71:49:73:5b:22:38:23:4d:35:83:96:17:5c:5e: d8:8a:01:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3REQxMTAvBgNVBAUTKDk1RDFCRUYzOTAwQjQxNjU4NDE2NEJCNzQ2MzE3NzEz MDIyOTE2ODgwHhcNMjYwNzI4MTQ1MzA0WhcNMjYwODA0MTQ1MzA0WjAYMRYwFAYD VQQDEw02YTY4YzI1MC01MTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNgBxpY9FDa5SRghI2/139mcyWmw/d4UIeMo1AGDnozRmCbRiOR+ipGUSaCa 97FotYmBSuUKpGdub/md7W6XwOyghHRNJGZQPNSpR4hvp1hBwP5JU/0zXxLt/FGn TX6Xq01mAde/ajVUFwWtqZdseDfNeAjvKSTQ0FmXitnrTAD9QlfAuWy42i5z33YQ tYSkxqybXzsDnXFss2/FOSKMhBYDnQOVrvwU20yRk6BykO6NPhSh1+2sDlJ9loeB KbRx6a+xuo7/+JMNhFAh+EJa9tpN0j8O7nWI+yPhO+ClwhSAWnwonSgLr1UNwXSu qp767xRUWaC+8oKVczDSoXpjzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKtZ2qX7 vPz9GPKz6S9oiwmRWZW0MB8GA1UdIwQYMBaAFJXRvvOQC0FlhBZLt0YxdxMCKRaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdERC9EMUM1QjAyQTFE OTYxMUUyQTFDQUI0N0YwOEIwMkNEMi9sZEctODVBTFFXV0VGa3UzUmpGM0V3SXBG b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkRy04NUFMUVdXRUZrdTNSakYzRXdJcEZvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzdERC9EMUM1QjAyQTFEOTYxMUUyQTFDQUI0N0YwOEIwMkNEMi9sZEctODVBTFFX V0VGa3UzUmpGM0V3SXBGb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlitI8bAjExGkFch5jFa7FwOwF+4X4hpvPfc/oX0yiFUoFaSZyIDJ7R/DOU2D Z0IqRvak4XFBQDXeHFsI9x/EOPwWzGxDdG0hJwzX99841m5XYAUVQIaaAzCAynH6 5fEaAYvFDTnvqyrKLYxYJDwpVJpxKuQ08wjr3r9l8cKH+LPPW46sDYVeXqCqrGoX Y6pOnWqR/pHjarVeP4ch6rEJ69ss321394sPO80XITWBsZORlL6G0aUt52rk++QW 0AxncXM2fbk1L+T8l4z1o0Em+CG2/RQQfqnRAER0F1PiEymS3eeDl4muzMhhr31y DHFJc1siOCNNNYOWF1xe2IoBYw== -----END CERTIFICATE-----Generated at Tue Jul 28 23:09:38 2026 by rpki-client