$ rpki-client -vvf rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft File: ldG-85ALQWWEFku3RjF3EwIpFog.mft (raw, json) Hash identifier: QqGVmLXUGK/HTICkTVfA+uuMbaElyexplLewmqIDf6Q= Subject key identifier: 8E:06:7A:B6:86:4B:72:2B:9B:FF:AF:EF:F4:E6:13:3A:5A:21:6B:B9 Authority key identifier: 95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88 Certificate issuer: /CN=A91577DD/serialNumber=95D1BEF3900B416584164BB74631771302291688 Certificate serial: 358F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft Manifest number: 3580 Signing time: Tue 18 Aug 2026 14:52:24 +0000 Manifest this update: Tue 18 Aug 2026 14:52:24 +0000 Manifest next update: Tue 25 Aug 2026 14:52:24 +0000 Files and hashes: 1: ldG-85ALQWWEFku3RjF3EwIpFog.crl (hash: XvfTdST8gqzyQFMvhOGFW5igNMB7bJYTJTmO7LQMAM8=) 2: C2F7AE40C03111EA9777314AC4F9AE02.roa (hash: JsmcN/iHNKGrr5+UdOJwBNNsYsjaqRo1Qt07Gdc3xmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 14:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13711 (0x358f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91577DD, serialNumber=95D1BEF3900B416584164BB74631771302291688 Validity Not Before: Aug 18 14:52:24 2026 GMT Not After : Aug 25 14:52:24 2026 GMT Subject: CN=6a8471a8-671d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b0:4f:b0:66:d8:3a:71:b4:86:a5:e1:24:87: f5:94:8a:48:e1:17:d5:76:ca:0f:7e:ac:53:0f:de: 68:bd:df:4e:e9:52:59:58:35:33:a9:6e:ea:83:e1: 49:f0:df:c0:a1:27:ea:de:20:7f:01:d1:06:c7:3d: 68:32:09:78:bb:19:e5:72:49:16:a6:68:b2:38:d5: 62:69:b9:e8:60:30:af:d5:a4:79:11:8f:e4:2b:9f: 21:4f:8f:b6:e0:b6:4a:fc:1f:40:8c:c1:84:af:e5: 2c:05:db:eb:30:27:16:c0:51:02:8a:55:11:b1:69: c4:52:6a:21:ac:b1:a2:fa:29:37:f5:28:e6:9f:0c: c1:d2:dc:4f:f5:7f:e4:ab:fa:73:1b:f1:6c:27:49: 22:c8:f3:8d:80:20:78:b0:68:0f:c6:27:a3:9b:ae: b1:8e:6f:04:ad:37:7a:d6:9f:a4:6b:3e:6f:52:81: 19:79:0b:2a:e4:ab:b6:f1:7b:27:e0:95:ac:23:1e: 42:bb:3c:ce:d7:bd:e3:6e:34:ac:22:35:bb:b1:9d: c8:25:81:b8:b9:bc:72:af:1c:9f:2f:f9:59:96:1a: b0:85:e5:d0:10:5c:91:fc:e5:68:86:b7:b1:60:bd: b0:29:d5:f3:7e:2a:3c:08:f3:b8:7c:0e:85:f9:10: 44:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:06:7A:B6:86:4B:72:2B:9B:FF:AF:EF:F4:E6:13:3A:5A:21:6B:B9 X509v3 Authority Key Identifier: keyid:95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:33:b0:38:e3:8a:86:80:0d:7b:62:3e:75:ea:3e:ae:2a:b9: f6:05:27:20:a9:01:9d:9d:0a:30:5f:42:d5:95:07:fa:85:15: 26:f3:04:16:88:9a:3c:27:d8:38:a7:1a:79:ab:ba:77:2f:94: 0e:30:c3:5c:bc:f9:30:05:e6:e2:1c:32:ca:11:df:d1:16:6c: 78:ef:a4:d0:12:f1:bd:3c:c8:d9:b2:8f:b5:fb:a4:22:1e:b7: 3e:6c:9c:dd:48:27:52:e0:2f:46:4f:10:1a:1e:20:76:0e:89: d8:27:11:b1:91:3b:f4:3c:7f:74:c0:9d:f2:b8:f4:58:7a:83: 41:de:26:0f:67:77:e0:e0:9d:d8:4c:ed:50:5e:a0:5c:d1:ce: 1e:20:24:cb:3a:a9:cd:4a:8c:0c:3b:6a:24:bf:1b:5b:15:aa: 84:fc:b9:14:d8:42:52:a6:4a:22:67:a2:c7:2f:e1:85:c1:4e: e6:29:64:d3:a9:13:ed:c7:d4:54:83:af:5e:66:44:16:8a:fc: 65:19:df:77:42:e0:1b:b3:58:bf:c5:b8:72:55:7f:2f:fb:7c: e6:a3:26:67:ad:a4:6e:0b:fa:b0:2d:d9:10:1a:b0:e1:c7:27: de:d6:9c:3f:30:7e:6c:47:22:b4:be:f1:a1:71:f0:39:1c:a6: b3:4f:73:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3REQxMTAvBgNVBAUTKDk1RDFCRUYzOTAwQjQxNjU4NDE2NEJCNzQ2MzE3NzEz MDIyOTE2ODgwHhcNMjYwODE4MTQ1MjI0WhcNMjYwODI1MTQ1MjI0WjAYMRYwFAYD VQQDEw02YTg0NzFhOC02NzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3LBPsGbYOnG0hqXhJIf1lIpI4RfVdsoPfqxTD95ovd9O6VJZWDUzqW7qg+FJ 8N/AoSfq3iB/AdEGxz1oMgl4uxnlckkWpmiyONViabnoYDCv1aR5EY/kK58hT4+2 4LZK/B9AjMGEr+UsBdvrMCcWwFECilURsWnEUmohrLGi+ik39SjmnwzB0txP9X/k q/pzG/FsJ0kiyPONgCB4sGgPxiejm66xjm8ErTd61p+kaz5vUoEZeQsq5Ku28Xsn 4JWsIx5CuzzO173jbjSsIjW7sZ3IJYG4ubxyrxyfL/lZlhqwheXQEFyR/OVohrex YL2wKdXzfio8CPO4fA6F+RBE+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI4GeraG S3Irm/+v7/TmEzpaIWu5MB8GA1UdIwQYMBaAFJXRvvOQC0FlhBZLt0YxdxMCKRaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdERC9EMUM1QjAyQTFE OTYxMUUyQTFDQUI0N0YwOEIwMkNEMi9sZEctODVBTFFXV0VGa3UzUmpGM0V3SXBG b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkRy04NUFMUVdXRUZrdTNSakYzRXdJcEZvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzdERC9EMUM1QjAyQTFEOTYxMUUyQTFDQUI0N0YwOEIwMkNEMi9sZEctODVBTFFX V0VGa3UzUmpGM0V3SXBGb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmTOwOOOKhoANe2I+deo+riq59gUnIKkBnZ0KMF9C1ZUH+oUVJvMEFoiaPCfY OKcaeau6dy+UDjDDXLz5MAXm4hwyyhHf0RZseO+k0BLxvTzI2bKPtfukIh63Pmyc 3UgnUuAvRk8QGh4gdg6J2CcRsZE79Dx/dMCd8rj0WHqDQd4mD2d34OCd2EztUF6g XNHOHiAkyzqpzUqMDDtqJL8bWxWqhPy5FNhCUqZKImeixy/hhcFO5ilk06kT7cfU VIOvXmZEFor8ZRnfd0LgG7NYv8W4clV/L/t85qMmZ62kbgv6sC3ZEBqw4ccn3tac PzB+bEcitL7xoXHwORyms09z7g== -----END CERTIFICATE-----Generated at Wed Aug 19 11:43:51 2026 by rpki-client