$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft File: ldziG17K3rBp3IG5JAXUdN5BwgY.mft (raw, json) Hash identifier: LK0VmoxEdriJewPOzLQQiNmOkwLUp9Xp0K9SesChGb0= Subject key identifier: 2C:96:73:01:2D:99:CA:A2:81:7C:7D:42:C0:E5:89:8E:DC:E3:62:10 Authority key identifier: 95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 Certificate issuer: /CN=A91CD174/serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Certificate serial: 0D1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft Manifest number: 0D0E Signing time: Tue 18 Aug 2026 18:34:04 +0000 Manifest this update: Tue 18 Aug 2026 18:34:04 +0000 Manifest next update: Tue 25 Aug 2026 18:34:04 +0000 Files and hashes: 1: ldziG17K3rBp3IG5JAXUdN5BwgY.crl (hash: E4/35GbNAMZAy+KZMiMAkXkFToYGcr1hK5oQMBt/8Ww=) 2: 54AD60AE0C2E11EABBBFA158C4F9AE02.roa (hash: T91CehV6Kilx5jipNUIxpW+jqQ75yMZ3U6hoSABekhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3356 (0xd1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD174, serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Validity Not Before: Aug 18 18:34:04 2026 GMT Not After : Aug 25 18:34:04 2026 GMT Subject: CN=6a84a59c-f707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c0:aa:1f:79:a0:5c:ba:a9:67:15:eb:6f:c3: c7:2c:f7:f8:73:bf:ec:4c:e0:d8:4b:08:3c:09:b1: d9:b0:aa:5d:35:c4:92:42:7d:6c:94:df:c0:d7:b1: bb:50:61:da:4f:57:7d:a6:4e:7e:da:b8:a6:36:db: 50:7f:f2:61:d0:de:ea:68:49:2f:ae:66:c9:6f:b9: c2:be:36:09:72:bf:0a:67:7e:2d:95:31:b0:4f:d1: 20:c6:65:20:f1:59:47:60:82:01:3a:d9:5c:54:6b: eb:a6:49:dd:55:0e:6d:30:95:24:f0:05:f6:64:34: 14:2f:bb:3a:1d:03:bc:38:3f:b9:28:a4:60:50:0b: 5a:07:28:17:ec:2e:10:5e:bb:42:b2:0d:dc:bf:72: 51:2f:97:77:62:59:2d:e1:14:c0:8c:24:e6:03:a8: b7:28:a7:aa:0a:5f:08:11:54:02:20:be:39:a4:73: 55:92:33:2b:c5:ad:f0:27:02:99:20:11:73:81:c9: 84:ca:c6:04:fc:8f:af:84:c1:6f:e1:6f:40:9f:22: 91:99:f7:6b:ea:16:b1:21:6d:77:73:e3:41:ec:42: bb:de:ee:9e:29:20:0a:ae:4f:9f:4f:0e:55:9c:b1: 25:35:96:7c:33:2c:1a:31:13:9d:2c:81:9f:35:38: 1f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:96:73:01:2D:99:CA:A2:81:7C:7D:42:C0:E5:89:8E:DC:E3:62:10 X509v3 Authority Key Identifier: keyid:95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:c8:ef:7f:ab:c8:0d:b6:3a:9d:18:9c:26:f8:ca:a7:0d:4f: 17:b3:70:da:19:c9:9e:92:40:26:98:3a:fc:e3:ce:cf:2b:6a: cf:a0:aa:ff:6c:a9:d3:ca:f5:e7:ce:77:2e:b0:a5:6c:16:96: 28:b3:8f:47:ef:22:19:5e:fd:6d:d5:4a:28:68:0b:34:b7:d3: 2f:3b:87:6e:14:e1:87:b9:db:09:54:a4:ad:b2:0d:e7:0e:32: 97:f2:97:43:6d:b3:8a:7e:80:c6:23:0f:ba:ec:59:b4:10:4a: e1:06:56:f3:9b:a2:e5:16:b4:96:b0:c3:8c:f7:e0:08:ea:12: c0:5a:23:b2:0f:e9:e2:76:50:50:de:4f:55:3f:99:35:03:74: 5f:24:76:35:80:a4:a2:33:bb:44:22:0f:5c:e0:cc:4b:14:6c: 70:29:c1:70:75:b8:ca:58:fe:63:04:de:19:d1:7c:3f:69:ea: 9a:7a:3f:7b:f3:66:0a:66:bb:9c:e0:92:48:3c:0b:68:10:42: d5:13:d0:7e:b6:97:7e:4f:3b:99:ac:31:37:c3:78:d8:da:28: ad:1d:9b:36:48:f9:6c:11:81:b6:05:d0:7b:16:fe:30:5c:f5: 22:72:7e:42:89:5d:71:9f:a4:9b:35:dc:ae:ed:ac:78:32:6b: 9e:1b:a1:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxNzQxMTAvBgNVBAUTKDk1RENFMjFCNUVDQURFQjA2OURDODFCOTI0MDVENDc0 REU0MUMyMDYwHhcNMjYwODE4MTgzNDA0WhcNMjYwODI1MTgzNDA0WjAYMRYwFAYD VQQDEw02YTg0YTU5Yy1mNzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8CqH3mgXLqpZxXrb8PHLPf4c7/sTODYSwg8CbHZsKpdNcSSQn1slN/A17G7 UGHaT1d9pk5+2rimNttQf/Jh0N7qaEkvrmbJb7nCvjYJcr8KZ34tlTGwT9EgxmUg 8VlHYIIBOtlcVGvrpkndVQ5tMJUk8AX2ZDQUL7s6HQO8OD+5KKRgUAtaBygX7C4Q XrtCsg3cv3JRL5d3Ylkt4RTAjCTmA6i3KKeqCl8IEVQCIL45pHNVkjMrxa3wJwKZ IBFzgcmEysYE/I+vhMFv4W9AnyKRmfdr6haxIW13c+NB7EK73u6eKSAKrk+fTw5V nLElNZZ8MywaMROdLIGfNTgf8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCyWcwEt mcqigXx9QsDliY7c42IQMB8GA1UdIwQYMBaAFJXc4hteyt6wadyBuSQF1HTeQcIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDE3NC81MUMzRTU0ODBC NEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNyQnAzSUc1SkFYVWRONUJ3 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkemlHMTdLM3JCcDNJRzVKQVhVZE41QndnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDE3NC81MUMzRTU0ODBCNEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNy QnAzSUc1SkFYVWRONUJ3Z1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU8jvf6vIDbY6nRicJvjKpw1PF7Nw2hnJnpJAJpg6/OPOzytqz6Cq/2yp08r1 5853LrClbBaWKLOPR+8iGV79bdVKKGgLNLfTLzuHbhThh7nbCVSkrbIN5w4yl/KX Q22zin6AxiMPuuxZtBBK4QZW85ui5Ra0lrDDjPfgCOoSwFojsg/p4nZQUN5PVT+Z NQN0XyR2NYCkojO7RCIPXODMSxRscCnBcHW4ylj+YwTeGdF8P2nqmno/e/NmCma7 nOCSSDwLaBBC1RPQfraXfk87mawxN8N42NoorR2bNkj5bBGBtgXQexb+MFz1InJ+ QoldcZ+kmzXcru2seDJrnhuhTA== -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:48 2026 by rpki-client