$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft File: LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft (raw, json) Hash identifier: B4muF8/V5DVOqcK2bGei98MJJpVB2tY/U6+vjOAC3DY= Subject key identifier: 21:03:6A:10:89:F8:98:33:0D:A4:4A:82:52:12:9E:8A:17:9B:0E:55 Authority key identifier: 2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9 Certificate issuer: /CN=A9147DCA/serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9 Certificate serial: 076F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft Manifest number: 075B Signing time: Wed 26 Aug 2026 21:36:40 +0000 Manifest this update: Wed 26 Aug 2026 21:36:39 +0000 Manifest next update: Wed 02 Sep 2026 21:36:39 +0000 Files and hashes: 1: LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl (hash: w5fAeuIxNH1NYY5iB4UMrWr4SdG7yHJFU0QR1RfjEcY=) 2: 0463FF50526C11EC80A31615C4F9AE02.roa (hash: /IcPEQXztUD25ppGPtUF0d61zWL2uv6MVc64gveJDyI=) 3: F100A1207F9911EBAFB6C91BC4F9AE02.roa (hash: uHuDTfwJOFKVGTsEop4y/RlcNFUS7e0GQKR0Kyo3w84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 21:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1903 (0x76f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147DCA, serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9 Validity Not Before: Aug 26 21:36:39 2026 GMT Not After : Sep 2 21:36:39 2026 GMT Subject: CN=6a8f5c68-8309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:09:16:c5:68:7c:88:41:77:05:a2:3a:80:a9: 07:74:05:df:65:36:78:b9:ee:59:b6:f5:b1:b5:ae: ec:e3:f6:9e:27:95:bb:7f:0e:04:c6:ef:f0:ba:9f: 82:7d:ca:d8:64:d4:cb:45:45:e7:07:e0:11:c5:a3: 9b:60:4f:7f:d5:cb:bc:f0:71:17:f7:56:c9:90:80: cd:cb:67:15:1b:55:2a:c0:74:40:db:0e:f1:2e:09: 5f:95:35:62:24:73:3f:7a:c6:35:aa:f1:59:e2:53: e3:78:ba:97:33:bb:9b:56:2b:e9:76:20:6e:a9:ff: 14:5d:12:6d:b7:fa:5b:dd:78:fc:03:fe:ad:fe:a4: 91:53:aa:01:36:5d:bc:84:27:af:d9:e6:0c:ce:d9: 57:cb:e8:b2:bc:1d:56:1a:07:21:6e:21:c2:47:06: fe:8e:d1:b9:5d:c9:cb:3f:aa:b8:22:24:87:56:26: 8a:63:64:16:82:6f:0b:57:5a:4b:ea:33:b8:b8:84: 7d:94:3f:16:6c:2e:7e:52:cb:d1:0f:5a:f8:70:f5: 54:fb:d7:b9:1d:ac:50:a4:91:34:52:65:aa:b6:93: 3b:45:aa:34:48:22:8f:59:7e:27:d7:f7:d6:a0:6f: 36:96:2b:54:d6:0a:fe:45:a8:a6:32:5b:24:32:c7: d6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:03:6A:10:89:F8:98:33:0D:A4:4A:82:52:12:9E:8A:17:9B:0E:55 X509v3 Authority Key Identifier: keyid:2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:01:a5:24:c2:5b:6d:58:7c:ad:e6:6a:03:05:2a:47:1c:18: e9:13:13:af:40:cf:23:ac:74:4f:d9:32:f0:2b:4d:cd:60:fb: 8e:0a:22:96:ad:59:51:31:c2:5e:1a:0e:da:dd:52:1a:91:ae: 9f:cc:ca:d5:2a:58:27:3c:ea:a0:b0:ff:4a:10:d1:af:97:5f: 24:28:94:4c:92:27:75:16:d3:83:95:4e:f5:20:74:66:90:8e: 98:cd:96:ba:e6:c6:2c:a8:44:ed:b0:99:46:bd:7c:ff:66:63: 5b:76:70:d6:ec:d6:40:30:69:8b:31:e4:f3:a9:e5:49:d4:16: 23:9c:b9:65:d5:74:cf:6d:9c:1e:4e:26:0a:9b:41:88:43:d5: 14:06:4c:eb:01:ce:a9:1a:10:b4:81:5a:e8:57:c1:2a:83:cb: e9:63:29:ac:1b:94:07:f1:a1:a1:5d:10:31:cd:b2:16:87:de: 0d:c0:85:aa:0a:b2:4d:a8:f2:d4:d8:4f:f0:fd:26:d7:a6:74: 3d:1e:aa:60:ca:f0:c8:c0:6d:56:bd:3b:39:2d:50:f8:cb:20: b8:8f:6e:c8:c1:48:55:2d:5c:ed:e9:9a:e4:53:3b:f0:5a:69: f7:3e:4b:ff:47:03:7c:9c:ae:90:45:fe:da:eb:b3:76:0b:0f: 44:52:d4:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdEQ0ExMTAvBgNVBAUTKDJDM0EyQTgxMjFDQ0Y4QTlCRkM3Q0I2NjkxODU0QUY1 RTREMjE5RjkwHhcNMjYwODI2MjEzNjM5WhcNMjYwOTAyMjEzNjM5WjAYMRYwFAYD VQQDEw02YThmNWM2OC04MzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwkWxWh8iEF3BaI6gKkHdAXfZTZ4ue5ZtvWxta7s4/aeJ5W7fw4Exu/wup+C fcrYZNTLRUXnB+ARxaObYE9/1cu88HEX91bJkIDNy2cVG1UqwHRA2w7xLglflTVi JHM/esY1qvFZ4lPjeLqXM7ubVivpdiBuqf8UXRJtt/pb3Xj8A/6t/qSRU6oBNl28 hCev2eYMztlXy+iyvB1WGgchbiHCRwb+jtG5XcnLP6q4IiSHViaKY2QWgm8LV1pL 6jO4uIR9lD8WbC5+UsvRD1r4cPVU+9e5HaxQpJE0UmWqtpM7Rao0SCKPWX4n1/fW oG82litU1gr+RaimMlskMsfWyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCEDahCJ +JgzDaRKglISnooXmw5VMB8GA1UdIwQYMBaAFCw6KoEhzPipv8fLZpGFSvXk0hn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0RDQS8xQzc1RURBNjdE NkExMUVCQTRBNTk4MENDNEY5QUUwMi9MRG9xZ1NITS1LbV94OHRta1lWSzllVFNH ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEb3FnU0hNLUttX3g4dG1rWVZLOWVUU0dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0RDQS8xQzc1RURBNjdENkExMUVCQTRBNTk4MENDNEY5QUUwMi9MRG9xZ1NITS1L bV94OHRta1lWSzllVFNHZmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdwGlJMJbbVh8reZqAwUqRxwY6RMTr0DPI6x0T9ky8CtNzWD7jgoilq1ZUTHC XhoO2t1SGpGun8zK1SpYJzzqoLD/ShDRr5dfJCiUTJIndRbTg5VO9SB0ZpCOmM2W uubGLKhE7bCZRr18/2ZjW3Zw1uzWQDBpizHk86nlSdQWI5y5ZdV0z22cHk4mCptB iEPVFAZM6wHOqRoQtIFa6FfBKoPL6WMprBuUB/GhoV0QMc2yFofeDcCFqgqyTajy 1NhP8P0m16Z0PR6qYMrwyMBtVr07OS1Q+MsguI9uyMFIVS1c7ema5FM78Fpp9z5L /0cDfJyukEX+2uuzdgsPRFLUOA== -----END CERTIFICATE-----Generated at Thu Aug 27 06:21:04 2026 by rpki-client