$ rpki-client -vvf rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft File: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft (raw, json) Hash identifier: T2Tpg40rjosM3Uye/Ld/xYC3qkZJ0/XiJHVFZD1FGHY= Subject key identifier: E2:37:43:B6:A7:2D:67:A9:19:C2:BE:AC:84:AC:1B:DC:3C:DE:5B:FE Authority key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 Certificate issuer: /CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Certificate serial: 02A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft Manifest number: 029A Signing time: Sun 05 Jul 2026 02:11:34 +0000 Manifest this update: Sun 05 Jul 2026 02:11:34 +0000 Manifest next update: Sun 12 Jul 2026 02:11:34 +0000 Files and hashes: 1: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl (hash: NJ4KH2PLGiq9Ccc+Tfkm7Cz7Fw2MdaSTLjDD21kGXKA=) 2: E8B7423A7DE911EDBCFD3082C4F9AE02.roa (hash: GFXgxmEoBQzCrsm/fS7lTOgYerzl4oJDvOwjqKvAb0Y=) 3: F40EE60A9B5C11EFAF221C2AC4F9AE02.roa (hash: wMJcy9/RZ84DRy4ocrFd613aXU3WIp1EJ/+o6ekr43M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 02:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 678 (0x2a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EC3B, serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Validity Not Before: Jul 5 02:11:34 2026 GMT Not After : Jul 12 02:11:34 2026 GMT Subject: CN=6a49bd56-db99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c7:97:55:bd:5f:ca:b6:8a:b7:c1:ec:f8:6b: 9c:77:d4:7a:64:45:99:9f:0d:de:6c:9f:e6:b5:5d: 3e:a6:85:3c:d7:80:b1:5c:d6:ae:01:89:9d:8c:df: 9a:59:88:76:fd:3a:15:03:2a:89:95:36:60:84:a1: fa:bd:b6:9d:7e:8b:e8:92:aa:fd:09:ab:d2:44:50: 44:ce:db:9b:27:4c:40:3d:ee:b8:d3:87:f6:04:3c: 78:6d:22:e0:75:00:89:e3:f4:e2:d4:10:4d:59:b8: 19:fb:89:26:8e:eb:c0:9e:e6:0b:6e:7c:2e:49:9e: 54:fe:d6:74:a6:ba:9e:7e:f8:d9:c1:bc:93:d7:60: 73:51:cf:f1:0b:55:be:05:53:cd:fb:e8:38:23:59: e9:5c:61:0e:72:19:4e:26:3e:c7:c0:1e:4d:21:eb: f8:2b:85:0b:6b:12:05:16:da:e6:2a:8a:63:de:34: 5b:22:e8:24:66:4f:4b:9a:82:74:07:1f:59:c1:69: a7:8d:ab:c3:50:c4:84:48:1e:6c:82:a9:fe:86:ce: 5b:58:79:07:5b:bf:6a:f2:58:90:4a:e2:57:a3:de: 66:42:6f:7f:d6:a9:23:9b:a2:17:1b:a8:b6:f4:15: 4f:81:3b:c9:b5:9a:12:7f:60:1d:64:5e:c3:d1:2b: 49:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:37:43:B6:A7:2D:67:A9:19:C2:BE:AC:84:AC:1B:DC:3C:DE:5B:FE X509v3 Authority Key Identifier: keyid:2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:91:c8:2d:5b:a0:86:6d:1b:55:4f:4d:a4:18:46:74:0e:c8: 92:d1:ed:45:41:f4:41:c7:3f:10:eb:0d:00:5a:d6:77:af:b2: a1:c1:01:cc:b5:09:01:42:bb:0a:31:ad:85:f4:bf:dc:3c:f0: 20:d7:b5:20:7c:67:27:b7:cf:6e:f4:b6:8d:62:82:49:be:22: 46:aa:28:b5:b3:7f:7c:5b:fd:01:32:3c:67:8c:35:f2:19:f3: 0a:db:0c:4a:24:f7:57:33:6c:50:9d:5d:dc:2f:e5:b9:e2:1a: f3:98:49:50:9b:9f:5f:8d:aa:63:cc:52:12:fb:83:4b:c2:32: 80:c1:1c:9e:75:19:f0:8d:7d:5c:3c:ea:17:44:25:24:7e:0a: 2f:06:bb:ac:33:7d:97:80:2c:50:8d:a0:9d:8c:ba:8d:8e:83: c0:3d:20:96:33:60:c0:01:65:57:d6:e5:5d:43:bf:89:5a:a8: 5f:d2:6a:06:67:f2:ea:d1:99:15:04:b4:09:dd:50:35:8f:b4: e6:58:e3:8c:d3:a1:72:91:bb:16:ba:2a:76:f3:2c:71:44:82: a1:b5:f2:10:37:e7:39:eb:c3:2c:e2:59:10:c5:e5:c5:c3:60: bd:e9:34:5a:3b:f6:12:85:e8:cf:19:f5:b0:c5:fa:0c:21:ea: 22:78:12:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VDM0IxMTAvBgNVBAUTKDJERENEMDVEQ0UyQzU4MDM3RkUwMkY5NUUxQThCRkNC RDNFMEUzMjUwHhcNMjYwNzA1MDIxMTM0WhcNMjYwNzEyMDIxMTM0WjAYMRYwFAYD VQQDEw02YTQ5YmQ1Ni1kYjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6MeXVb1fyraKt8Hs+Gucd9R6ZEWZnw3ebJ/mtV0+poU814CxXNauAYmdjN+a WYh2/ToVAyqJlTZghKH6vbadfovokqr9CavSRFBEztubJ0xAPe6404f2BDx4bSLg dQCJ4/Ti1BBNWbgZ+4kmjuvAnuYLbnwuSZ5U/tZ0prqefvjZwbyT12BzUc/xC1W+ BVPN++g4I1npXGEOchlOJj7HwB5NIev4K4ULaxIFFtrmKopj3jRbIugkZk9LmoJ0 Bx9ZwWmnjavDUMSESB5sgqn+hs5bWHkHW79q8liQSuJXo95mQm9/1qkjm6IXG6i2 9BVPgTvJtZoSf2AdZF7D0StJTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOI3Q7an LWepGcK+rISsG9w83lv+MB8GA1UdIwQYMBaAFC3c0F3OLFgDf+AvleGov8vT4OMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUMzQi9ERjRBNDM3MjdE RTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dBTl80Qy1WNGFpX3k5UGc0 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xkelFYYzRzV0FOXzRDLVY0YWlfeTlQZzR5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUMzQi9ERjRBNDM3MjdERTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dB Tl80Qy1WNGFpX3k5UGc0eVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIJHILVughm0bVU9NpBhGdA7IktHtRUH0Qcc/EOsNAFrWd6+yocEBzLUJAUK7 CjGthfS/3DzwINe1IHxnJ7fPbvS2jWKCSb4iRqootbN/fFv9ATI8Z4w18hnzCtsM SiT3VzNsUJ1d3C/lueIa85hJUJufX42qY8xSEvuDS8IygMEcnnUZ8I19XDzqF0Ql JH4KLwa7rDN9l4AsUI2gnYy6jY6DwD0gljNgwAFlV9blXUO/iVqoX9JqBmfy6tGZ FQS0Cd1QNY+05ljjjNOhcpG7FroqdvMscUSCobXyEDfnOevDLOJZEMXlxcNgvek0 Wjv2EoXozxn1sMX6DCHqIngSpw== -----END CERTIFICATE-----Generated at Sun Jul 5 08:46:14 2026 by rpki-client