$ rpki-client -vvvf rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft File: ldG-85ALQWWEFku3RjF3EwIpFog.mft (raw, json) Hash identifier: ulkj933XZiQbCzV7eXSOvjCzanufaOstviIJJNDNGLU= Subject key identifier: F9:5A:1F:DD:CE:C9:DF:3F:39:09:11:D7:93:55:F9:75:E9:24:CE:3A Authority key identifier: 95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88 Certificate issuer: /CN=A91577DD/serialNumber=95D1BEF3900B416584164BB74631771302291688 Certificate serial: 35A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft Manifest number: 3591 Signing time: Sun 20 Sep 2026 14:49:12 +0000 Manifest this update: Sun 20 Sep 2026 14:49:11 +0000 Manifest next update: Sun 27 Sep 2026 14:49:11 +0000 Files and hashes: 1: ldG-85ALQWWEFku3RjF3EwIpFog.crl (hash: uIj3rTHy9phTfMqm8XY3Nwo5hG//X+hsgMlF5hR0oHI=) 2: C2F7AE40C03111EA9777314AC4F9AE02.roa (hash: JsmcN/iHNKGrr5+UdOJwBNNsYsjaqRo1Qt07Gdc3xmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13728 (0x35a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91577DD, serialNumber=95D1BEF3900B416584164BB74631771302291688 Validity Not Before: Sep 20 14:49:11 2026 GMT Not After : Sep 27 14:49:11 2026 GMT Subject: CN=6aaff268-5ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c4:47:89:b7:3c:d4:60:2b:6d:ec:92:34:b0: d1:55:c4:0d:b0:62:79:91:89:3e:41:78:3e:c8:2b: 05:05:ce:0c:bf:3e:fe:94:f8:4d:83:ac:70:3c:e3: 09:49:f9:46:04:f1:a5:82:f1:7d:9b:f1:f4:be:c0: 9a:8e:2a:5a:62:8f:22:67:82:e7:5a:4a:9f:49:55: 61:7f:2d:ab:15:97:c0:7d:1d:9c:66:87:10:7c:0c: 61:63:ab:60:cc:1f:2b:dd:ed:c2:76:41:ef:92:8d: 21:d3:ae:64:96:e9:29:b7:2a:f2:40:b0:d5:b6:ec: 67:0f:7f:0e:b9:45:7c:cd:8e:09:37:12:57:ba:d4: f0:45:eb:a1:76:21:f6:7b:f1:e7:da:79:b6:2b:f0: 18:2e:f6:79:97:c9:b0:48:49:23:eb:84:aa:ac:58: eb:a1:e5:89:cf:23:90:b9:4d:e2:23:e9:b8:43:33: f6:e3:7e:50:bf:c8:08:a8:e7:94:c2:96:80:3b:d8: f7:8b:6e:96:e5:7e:03:9a:d2:f4:e6:f4:62:0f:6b: d5:b4:49:97:22:9e:aa:e0:d7:22:48:3f:14:00:d4: 61:d7:c9:15:58:6f:f7:7f:b7:a8:74:e6:f5:a7:70: 9d:f6:fb:2a:f3:46:b4:88:a2:c9:1e:37:04:0a:4b: 92:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5A:1F:DD:CE:C9:DF:3F:39:09:11:D7:93:55:F9:75:E9:24:CE:3A X509v3 Authority Key Identifier: keyid:95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:0f:b4:9f:38:9a:82:75:6d:9e:88:25:9b:4f:24:81:18:94: 69:d7:fa:47:9f:dd:58:9d:9b:64:bf:48:d2:a7:8e:cc:c6:e9: b7:29:8e:a0:5d:d2:54:76:58:d5:62:0f:d1:c9:39:39:56:b2: d2:7f:93:aa:92:fa:88:7e:18:e2:a1:50:5a:67:0d:21:57:c4: 8c:3c:53:27:e1:a3:d8:e3:53:65:1e:dc:aa:b3:14:a6:06:dc: c0:14:68:0a:fd:ff:ab:1d:68:ca:63:f0:1e:c2:2e:38:97:a2: c0:73:95:43:1d:04:fc:81:a6:40:1c:d1:cf:43:65:c9:4e:84: 1d:28:b6:e1:63:8f:62:37:6b:2c:73:c6:68:3a:8b:62:49:af: af:0c:c4:12:2e:20:2e:ee:1f:3a:91:a0:5b:53:c4:f0:96:7f: 2f:3c:85:09:e3:5c:8e:07:e9:25:ca:92:d3:3e:6d:0d:b3:3e: 01:d0:a0:c9:99:73:33:a3:25:fc:50:54:db:73:fa:d7:6c:2a: bc:92:09:2b:ef:c7:0f:fc:75:e1:61:38:ad:d2:97:c5:a7:68: 53:90:2c:a6:98:5a:8d:e5:9d:ab:db:c4:c9:64:52:97:3c:88: 79:27:41:f0:c2:bc:19:79:32:26:ac:46:e4:40:63:2e:95:96: 86:da:06:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3REQxMTAvBgNVBAUTKDk1RDFCRUYzOTAwQjQxNjU4NDE2NEJCNzQ2MzE3NzEz MDIyOTE2ODgwHhcNMjYwOTIwMTQ0OTExWhcNMjYwOTI3MTQ0OTExWjAYMRYwFAYD VQQDEw02YWFmZjI2OC01ZWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28RHibc81GArbeySNLDRVcQNsGJ5kYk+QXg+yCsFBc4Mvz7+lPhNg6xwPOMJ SflGBPGlgvF9m/H0vsCajipaYo8iZ4LnWkqfSVVhfy2rFZfAfR2cZocQfAxhY6tg zB8r3e3CdkHvko0h065klukptyryQLDVtuxnD38OuUV8zY4JNxJXutTwReuhdiH2 e/Hn2nm2K/AYLvZ5l8mwSEkj64SqrFjroeWJzyOQuU3iI+m4QzP2435Qv8gIqOeU wpaAO9j3i26W5X4DmtL05vRiD2vVtEmXIp6q4NciSD8UANRh18kVWG/3f7eodOb1 p3Cd9vsq80a0iKLJHjcECkuSzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPlaH93O yd8/OQkR15NV+XXpJM46MB8GA1UdIwQYMBaAFJXRvvOQC0FlhBZLt0YxdxMCKRaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdERC9EMUM1QjAyQTFE OTYxMUUyQTFDQUI0N0YwOEIwMkNEMi9sZEctODVBTFFXV0VGa3UzUmpGM0V3SXBG b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkRy04NUFMUVdXRUZrdTNSakYzRXdJcEZvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzdERC9EMUM1QjAyQTFEOTYxMUUyQTFDQUI0N0YwOEIwMkNEMi9sZEctODVBTFFX V0VGa3UzUmpGM0V3SXBGb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARA+0nziagnVtnoglm08kgRiUadf6R5/dWJ2bZL9I0qeOzMbptymOoF3SVHZY 1WIP0ck5OVay0n+TqpL6iH4Y4qFQWmcNIVfEjDxTJ+Gj2ONTZR7cqrMUpgbcwBRo Cv3/qx1oymPwHsIuOJeiwHOVQx0E/IGmQBzRz0NlyU6EHSi24WOPYjdrLHPGaDqL YkmvrwzEEi4gLu4fOpGgW1PE8JZ/LzyFCeNcjgfpJcqS0z5tDbM+AdCgyZlzM6Ml /FBU23P612wqvJIJK+/HD/x14WE4rdKXxadoU5AspphajeWdq9vEyWRSlzyIeSdB 8MK8GXkyJqxG5EBjLpWWhtoGxw== -----END CERTIFICATE-----Generated at Tue Sep 22 12:49:58 2026 by rpki-client