
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
File: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft (raw, json)
Hash identifier: fEa++raQadyluHgA6BBqrbtntnyvuNPESOxlPnHI40Q=
Subject key identifier: BE:96:A2:1C:59:0D:AC:92:76:B7:73:68:59:EF:EB:0F:4F:26:5A:79
Authority key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25
Certificate issuer: /CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325
Certificate serial: 0279
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
Manifest number: 026D
Signing time: Sun 05 Apr 2026 01:38:36 +0000
Manifest this update: Sun 05 Apr 2026 01:38:35 +0000
Manifest next update: Sun 12 Apr 2026 01:38:35 +0000
Files and hashes: 1: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl (hash: kLYImsqlDeLrnvuVYORv3Nd0epTPCCmvcsAY30qUuZA=)
2: E8B7423A7DE911EDBCFD3082C4F9AE02.roa (hash: GFXgxmEoBQzCrsm/fS7lTOgYerzl4oJDvOwjqKvAb0Y=)
3: F40EE60A9B5C11EFAF221C2AC4F9AE02.roa (hash: wMJcy9/RZ84DRy4ocrFd613aXU3WIp1EJ/+o6ekr43M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl
rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:38:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 633 (0x279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EC3B, serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325
Validity
Not Before: Apr 5 01:38:35 2026 GMT
Not After : Apr 12 01:38:35 2026 GMT
Subject: CN=69d1bd1c-75f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:db:55:7f:33:a7:fd:f9:64:a5:6f:c7:96:79:
71:c9:dd:45:fe:04:75:0d:a1:fc:9b:ce:86:ce:fa:
ea:65:c8:05:f8:71:91:14:2b:dc:98:62:96:00:ce:
6a:1c:5a:1f:88:72:78:6d:88:01:af:c5:be:73:e9:
8e:2f:0d:a4:59:4d:fc:e3:40:a0:13:c5:80:c5:cc:
91:97:66:f1:5b:de:c1:2f:61:d7:aa:72:ab:a2:78:
23:99:90:1d:3e:bc:eb:0a:25:c2:c6:76:0c:ce:5e:
15:7a:b7:56:ff:1f:74:d3:4f:42:ea:dc:3c:38:6e:
2c:80:8d:df:3e:c3:4b:4f:8a:34:1b:98:2f:58:ce:
6c:38:a0:aa:0f:a3:1b:08:91:f2:36:6d:c2:ee:8f:
e1:60:d5:f0:e6:7e:e2:4d:b5:51:54:29:05:ea:2a:
85:ab:16:69:56:c9:a8:c2:77:7c:9f:8f:ce:3b:ea:
fc:1d:e5:89:f5:2c:9c:c6:25:08:8b:8b:49:71:f6:
37:57:52:13:59:3d:f0:30:71:fc:2d:b1:a4:eb:a7:
4a:2d:3d:f6:55:39:f2:f8:13:c7:ee:45:2b:e9:8d:
d0:1d:b6:54:00:65:bd:fb:21:0c:cb:5a:d1:d3:80:
9a:f0:71:a5:a6:d7:4e:b4:75:29:e8:90:d4:8c:70:
5c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:96:A2:1C:59:0D:AC:92:76:B7:73:68:59:EF:EB:0F:4F:26:5A:79
X509v3 Authority Key Identifier:
keyid:2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:43:b2:64:aa:92:cd:e2:d5:4e:b0:09:7d:3b:d6:52:7f:16:
4b:1c:69:e9:54:3b:5d:4f:94:62:b4:2e:bc:a0:67:89:3d:83:
79:4a:1e:66:a4:b5:31:1b:92:50:33:ca:a2:eb:85:73:9f:d7:
0d:f0:9e:3e:5f:6d:08:b0:85:b1:ab:1a:d9:83:f5:fc:dc:78:
3d:14:d8:09:db:03:9f:46:c9:c4:63:06:70:d3:25:f9:e7:87:
c1:58:0a:e1:a5:81:c0:28:8e:d0:83:35:ea:96:d2:b2:94:8d:
ec:5a:4e:d3:8e:ee:fd:9c:5c:f4:4e:ea:3f:94:a2:78:6b:17:
ca:0f:5e:91:6f:09:58:1b:ec:0d:d1:87:4c:4a:f7:43:2c:4e:
92:f8:a9:bd:0e:c5:53:eb:f3:85:54:dc:d1:36:a9:ce:d7:e5:
f3:70:ec:f7:f3:cf:ea:85:6f:82:36:6b:70:a7:a0:68:77:0b:
e5:f5:d6:cc:95:b7:89:43:3d:e7:ff:b5:55:1c:cf:41:d7:37:
65:b7:79:cd:ab:2e:82:2d:36:0c:c5:4a:8f:8c:df:dd:f8:65:
0b:2f:fa:00:6a:ce:42:00:1f:df:9d:1d:49:48:91:77:a5:3d:
e9:ab:f5:d0:3e:8b:ca:65:3d:19:af:f7:fe:21:4a:65:e3:5d:
03:e0:ff:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:58:45 2026 by rpki-client