$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft File: LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft (raw, json) Hash identifier: mwzZDAcsIWq+UD7xOd1h385KH5JJ3s5/6D2gjMofhPE= Subject key identifier: 93:B9:A3:37:4A:9E:CF:BA:40:1A:42:0B:04:12:41:7A:77:E0:9A:D5 Authority key identifier: 2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9 Certificate issuer: /CN=A9147DCA/serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9 Certificate serial: 0789 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft Manifest number: 0775 Signing time: Fri 16 Oct 2026 21:52:26 +0000 Manifest this update: Fri 16 Oct 2026 21:52:25 +0000 Manifest next update: Fri 23 Oct 2026 21:52:25 +0000 Files and hashes: 1: LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl (hash: rpLLSy5xFxXUuNlvPv87p2NxOVYpkcLhQX/br8mNgcM=) 2: F100A1207F9911EBAFB6C91BC4F9AE02.roa (hash: uHuDTfwJOFKVGTsEop4y/RlcNFUS7e0GQKR0Kyo3w84=) 3: 0463FF50526C11EC80A31615C4F9AE02.roa (hash: /IcPEQXztUD25ppGPtUF0d61zWL2uv6MVc64gveJDyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Oct 2026 21:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1929 (0x789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147DCA, serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9 Validity Not Before: Oct 16 21:52:25 2026 GMT Not After : Oct 23 21:52:25 2026 GMT Subject: CN=6ad29c99-08f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f8:ac:9f:29:fd:32:1b:5b:7a:bc:51:03:71: 73:c8:2e:ef:7d:a1:6b:44:7b:0a:5d:3a:1f:3f:1f: f9:a1:c2:e8:4d:20:ca:f4:10:59:c5:fb:cf:2a:a6: 92:9f:81:f7:10:1f:09:04:21:27:3e:3b:3b:fa:92: 43:62:41:c5:a7:b7:ce:7f:e7:2d:5a:eb:47:08:99: ac:70:cc:1a:92:68:a2:85:93:73:e5:f5:96:11:1d: f2:bd:25:2a:99:f2:df:18:92:9a:8d:ad:a2:9e:50: 17:f0:c4:29:c6:dd:bf:96:9f:86:48:a1:5c:59:68: d0:37:c7:e4:36:e4:0f:9f:b4:70:20:08:bd:51:d2: 4f:5d:ed:c1:82:af:4e:32:63:bc:a1:94:97:33:9a: 4e:d0:a7:71:49:ca:df:50:71:7b:6c:10:76:58:9d: c8:d7:fb:07:8d:93:cc:0c:20:25:54:47:40:0b:b2: 06:f1:b7:93:10:8a:7f:a8:85:4d:ce:e8:a2:c8:2f: 19:2d:f6:d3:bf:11:45:49:82:60:bd:e8:0c:a8:da: 0d:0c:08:8b:3f:e6:b7:9b:21:28:45:d8:0a:0c:d7: 11:9d:a6:16:f0:48:ad:62:df:be:43:29:21:2d:95: d9:24:61:c2:b2:79:29:61:ee:87:fe:36:54:cb:6c: fa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B9:A3:37:4A:9E:CF:BA:40:1A:42:0B:04:12:41:7A:77:E0:9A:D5 X509v3 Authority Key Identifier: keyid:2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:92:6c:74:69:52:29:2d:fb:f7:ba:43:e4:81:63:c9:26:87: c3:c6:e3:eb:22:0f:f7:d9:a8:1a:ca:80:a8:f8:55:fe:10:1b: dc:f6:42:20:61:4a:a7:17:cd:a5:c5:c1:88:4c:86:8b:b7:33: db:4b:a9:b4:02:ac:6a:34:19:60:6b:3d:10:48:8b:fb:9c:f9: 1f:91:58:ce:4e:dd:9c:09:80:fe:8a:72:bd:fc:0f:02:b7:47: f5:90:a1:74:99:24:9b:91:c0:5d:16:f4:93:19:1b:4f:3e:bd: 14:e0:11:ed:06:db:3e:de:c3:fd:d8:53:64:d2:b4:cb:af:fc: 10:1e:89:67:c4:b6:2e:f5:b2:42:cd:94:f9:32:8c:34:66:98: 4f:ba:5f:5e:8d:99:75:c0:14:c8:4d:16:e3:66:43:7c:1a:b6: 59:6c:ce:e6:60:45:7d:0a:e1:e2:4c:05:41:17:98:f5:b4:b8: 9b:ab:7f:a4:b9:30:ab:9f:f7:d4:8a:ed:e7:21:cf:8f:f7:a1: 63:cd:ad:55:74:45:31:0f:a1:6c:77:d4:98:d7:6f:88:d6:ad: 0d:4f:63:46:38:50:6c:e9:2d:f0:7a:2c:37:6e:3b:c7:c9:f2: 2a:af:46:c7:98:11:d5:8b:84:95:77:b6:66:ff:9e:35:dd:cb: 0d:be:0d:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdEQ0ExMTAvBgNVBAUTKDJDM0EyQTgxMjFDQ0Y4QTlCRkM3Q0I2NjkxODU0QUY1 RTREMjE5RjkwHhcNMjYxMDE2MjE1MjI1WhcNMjYxMDIzMjE1MjI1WjAYMRYwFAYD VQQDEw02YWQyOWM5OS0wOGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvisnyn9MhtberxRA3FzyC7vfaFrRHsKXTofPx/5ocLoTSDK9BBZxfvPKqaS n4H3EB8JBCEnPjs7+pJDYkHFp7fOf+ctWutHCJmscMwakmiihZNz5fWWER3yvSUq mfLfGJKaja2inlAX8MQpxt2/lp+GSKFcWWjQN8fkNuQPn7RwIAi9UdJPXe3Bgq9O MmO8oZSXM5pO0KdxScrfUHF7bBB2WJ3I1/sHjZPMDCAlVEdAC7IG8beTEIp/qIVN zuiiyC8ZLfbTvxFFSYJgvegMqNoNDAiLP+a3myEoRdgKDNcRnaYW8EitYt++Qykh LZXZJGHCsnkpYe6H/jZUy2z6jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJO5ozdK ns+6QBpCCwQSQXp34JrVMB8GA1UdIwQYMBaAFCw6KoEhzPipv8fLZpGFSvXk0hn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0RDQS8xQzc1RURBNjdE NkExMUVCQTRBNTk4MENDNEY5QUUwMi9MRG9xZ1NITS1LbV94OHRta1lWSzllVFNH ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEb3FnU0hNLUttX3g4dG1rWVZLOWVUU0dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0RDQS8xQzc1RURBNjdENkExMUVCQTRBNTk4MENDNEY5QUUwMi9MRG9xZ1NITS1L bV94OHRta1lWSzllVFNHZmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEJJsdGlSKS3797pD5IFjySaHw8bj6yIP99moGsqAqPhV/hAb3PZCIGFKpxfN pcXBiEyGi7cz20uptAKsajQZYGs9EEiL+5z5H5FYzk7dnAmA/opyvfwPArdH9ZCh dJkkm5HAXRb0kxkbTz69FOAR7QbbPt7D/dhTZNK0y6/8EB6JZ8S2LvWyQs2U+TKM NGaYT7pfXo2ZdcAUyE0W42ZDfBq2WWzO5mBFfQrh4kwFQReY9bS4m6t/pLkwq5/3 1Irt5yHPj/ehY82tVXRFMQ+hbHfUmNdviNatDU9jRjhQbOkt8HosN247x8nyKq9G x5gR1YuElXe2Zv+eNd3LDb4N1g== -----END CERTIFICATE-----Generated at Sun Oct 18 10:13:20 2026 by rpki-client