$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft File: ldziG17K3rBp3IG5JAXUdN5BwgY.mft (raw, json) Hash identifier: tQiUNh8jdOxfqB9ZqgIdJaHBU0IdSDUeMdq8Qh2qHW8= Subject key identifier: 18:42:37:62:9B:C8:7D:A3:25:CF:96:BF:E4:44:EB:53:18:10:B6:52 Authority key identifier: 95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 Certificate issuer: /CN=A91CD174/serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Certificate serial: 0D11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft Manifest number: 0D03 Signing time: Tue 28 Jul 2026 18:29:19 +0000 Manifest this update: Tue 28 Jul 2026 18:29:19 +0000 Manifest next update: Tue 04 Aug 2026 18:29:19 +0000 Files and hashes: 1: ldziG17K3rBp3IG5JAXUdN5BwgY.crl (hash: 6/ltySSWC7UrHbQrMoYfVAou06Z0hcsFVRsPnKMkEzc=) 2: 54AD60AE0C2E11EABBBFA158C4F9AE02.roa (hash: T91CehV6Kilx5jipNUIxpW+jqQ75yMZ3U6hoSABekhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3345 (0xd11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD174, serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Validity Not Before: Jul 28 18:29:19 2026 GMT Not After : Aug 4 18:29:19 2026 GMT Subject: CN=6a68f4ff-c8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:02:93:66:b5:24:fd:e8:f7:f2:45:dc:11:a0: 83:a0:05:16:f8:bb:88:49:3b:5c:b6:a1:63:28:80: 5d:0a:91:ea:a8:ba:82:40:82:3a:1c:55:84:fb:29: d6:03:b7:a5:a7:34:83:8a:f2:9d:95:13:cd:2d:9e: 0b:94:d0:88:85:96:b0:1b:fb:bf:ef:48:52:f9:a1: 6d:a6:71:11:fe:f2:13:2c:c1:d1:a0:81:60:83:63: 5e:87:28:9d:0b:88:4a:3f:8c:f0:cf:ba:18:6d:b5: 88:c5:93:9e:1c:b0:67:f7:37:01:03:5d:3a:d0:cd: 75:af:cb:bf:8b:aa:d0:6b:fc:6f:a5:a7:07:c3:90: ee:16:fa:ac:99:35:08:d0:8b:b9:6b:0c:4d:e7:ec: f8:77:a6:f4:24:5e:ae:63:ba:db:47:21:50:93:f2: 68:cf:ed:b9:d6:9d:77:b6:d2:45:19:c2:cd:5d:9f: 4b:48:94:40:7c:ef:ee:36:cb:d8:84:7a:c6:4e:24: 1f:a8:b3:2f:1b:ec:03:56:ef:09:c7:e3:12:50:5f: 55:34:f6:7c:b6:66:37:f6:7e:7b:fa:5b:70:63:4b: 3e:25:16:39:57:36:7c:17:38:f6:6d:dd:0b:59:6d: 95:13:ea:16:7a:aa:f9:e0:82:d3:c5:9f:b5:6c:f8: e4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:42:37:62:9B:C8:7D:A3:25:CF:96:BF:E4:44:EB:53:18:10:B6:52 X509v3 Authority Key Identifier: keyid:95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:bd:14:ae:45:8a:85:87:35:da:7f:40:79:f7:3f:8f:31:ac: c8:d4:d2:1f:64:aa:e6:b9:e8:4c:58:13:97:be:22:cc:8a:61: 14:ee:c6:af:0e:47:0d:59:4a:95:f7:d9:50:d9:15:4b:77:ce: 7f:c3:4a:6a:bc:f4:22:36:fe:1c:a6:73:9d:e9:c8:7f:29:1e: a4:35:36:25:b1:1b:df:52:ef:7f:ba:9b:fb:17:8f:95:72:7e: 74:d0:9a:b9:d9:28:98:db:0a:da:c2:d1:a8:39:00:03:49:2c: bd:c2:9f:fb:39:fa:be:fe:50:2e:26:c9:95:37:76:e7:42:59: 93:90:44:2f:54:39:f2:a5:bc:db:e7:ce:4d:ca:39:81:86:f5: 6d:e3:ec:57:73:d1:51:04:53:ff:d5:09:4c:c5:7b:5e:b3:b9: ac:a1:88:23:a2:cb:64:5c:f8:1f:2b:d7:26:07:08:f9:66:4c: 46:e7:3c:03:7e:b3:71:a5:cd:23:82:72:cf:7b:e1:5a:d5:75: db:10:ef:bd:ec:57:27:1e:b8:79:a4:9a:44:af:08:f7:d8:47: 23:5c:08:ed:2c:fa:c7:e0:bc:ae:15:3c:b5:c4:ae:a8:d9:9b: 65:c4:5b:1b:bf:7d:1c:f3:d8:25:97:5e:c1:97:9b:9f:6a:2e: 6c:79:90:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxNzQxMTAvBgNVBAUTKDk1RENFMjFCNUVDQURFQjA2OURDODFCOTI0MDVENDc0 REU0MUMyMDYwHhcNMjYwNzI4MTgyOTE5WhcNMjYwODA0MTgyOTE5WjAYMRYwFAYD VQQDEw02YTY4ZjRmZi1jOGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowKTZrUk/ej38kXcEaCDoAUW+LuISTtctqFjKIBdCpHqqLqCQII6HFWE+ynW A7elpzSDivKdlRPNLZ4LlNCIhZawG/u/70hS+aFtpnER/vITLMHRoIFgg2Nehyid C4hKP4zwz7oYbbWIxZOeHLBn9zcBA1060M11r8u/i6rQa/xvpacHw5DuFvqsmTUI 0Iu5awxN5+z4d6b0JF6uY7rbRyFQk/Joz+251p13ttJFGcLNXZ9LSJRAfO/uNsvY hHrGTiQfqLMvG+wDVu8Jx+MSUF9VNPZ8tmY39n57+ltwY0s+JRY5VzZ8Fzj2bd0L WW2VE+oWeqr54ILTxZ+1bPjkcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBhCN2Kb yH2jJc+Wv+RE61MYELZSMB8GA1UdIwQYMBaAFJXc4hteyt6wadyBuSQF1HTeQcIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDE3NC81MUMzRTU0ODBC NEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNyQnAzSUc1SkFYVWRONUJ3 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkemlHMTdLM3JCcDNJRzVKQVhVZE41QndnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDE3NC81MUMzRTU0ODBCNEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNy QnAzSUc1SkFYVWRONUJ3Z1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUb0UrkWKhYc12n9Aefc/jzGsyNTSH2Sq5rnoTFgTl74izIphFO7Grw5HDVlK lffZUNkVS3fOf8NKarz0Ijb+HKZznenIfykepDU2JbEb31Lvf7qb+xePlXJ+dNCa udkomNsK2sLRqDkAA0ksvcKf+zn6vv5QLibJlTd250JZk5BEL1Q58qW82+fOTco5 gYb1bePsV3PRUQRT/9UJTMV7XrO5rKGII6LLZFz4HyvXJgcI+WZMRuc8A36zcaXN I4Jyz3vhWtV12xDvvexXJx64eaSaRK8I99hHI1wI7Sz6x+C8rhU8tcSuqNmbZcRb G799HPPYJZdewZebn2oubHmQYg== -----END CERTIFICATE-----Generated at Tue Jul 28 21:39:25 2026 by rpki-client