$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft File: ldziG17K3rBp3IG5JAXUdN5BwgY.mft (raw, json) Hash identifier: uIhsSvrzk8P2CVfFGaz6oLsGWc1Sa1XPrralAnjVwE8= Subject key identifier: 3E:0E:2E:10:8F:5E:4C:E8:2E:29:CC:9A:ED:10:2B:D3:FB:92:0E:21 Authority key identifier: 95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 Certificate issuer: /CN=A91CD174/serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Certificate serial: 0CFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft Manifest number: 0CF1 Signing time: Mon 22 Jun 2026 18:20:43 +0000 Manifest this update: Mon 22 Jun 2026 18:20:42 +0000 Manifest next update: Mon 29 Jun 2026 18:20:42 +0000 Files and hashes: 1: ldziG17K3rBp3IG5JAXUdN5BwgY.crl (hash: T/yPw4RST877hq/EsAwBvJbqcJ1rH1pWmTBiba3/hBk=) 2: 54AD60AE0C2E11EABBBFA158C4F9AE02.roa (hash: T91CehV6Kilx5jipNUIxpW+jqQ75yMZ3U6hoSABekhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 18:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3327 (0xcff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD174, serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Validity Not Before: Jun 22 18:20:42 2026 GMT Not After : Jun 29 18:20:42 2026 GMT Subject: CN=6a397cfb-a0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2f:c8:bd:aa:47:91:cb:b4:5b:6b:35:d1:38: 5c:7a:1a:bb:df:fd:e8:65:62:39:e8:cc:8f:4b:60: 74:38:3e:a1:69:cb:95:61:d7:4a:5f:0e:76:50:70: a5:67:01:4a:a9:e2:8b:fd:6b:59:c0:af:14:f4:67: ab:e0:30:c3:c6:28:17:5e:44:b6:fd:68:0b:80:24: ab:1b:e8:b5:ea:92:c9:17:f0:af:6b:55:bb:03:23: b9:86:01:89:51:66:8d:60:84:d3:d1:0f:84:6b:fc: 98:6a:89:50:84:06:2e:98:16:24:38:98:b8:ab:cc: 0b:d4:52:2d:78:8e:93:e7:14:f5:c6:c3:61:e5:15: f3:7a:c7:7a:97:e7:a6:59:45:6f:64:32:27:06:bf: 5f:db:bc:93:a4:03:14:92:42:b7:a2:b1:f5:15:0d: bb:cc:74:2c:b8:c9:de:1e:48:6f:fb:94:f2:87:52: 91:c3:5d:40:7d:f3:93:39:a1:f4:13:35:60:8a:70: 93:6f:ae:48:61:92:1e:3d:6a:0a:2c:2d:6f:c1:9a: 6f:c3:fb:b1:88:f3:2c:bc:0a:c9:ac:05:13:d4:27: d9:68:d8:f4:7b:d4:f2:32:32:50:19:66:56:4e:ed: 22:08:8b:89:f5:fc:c5:fb:25:fe:46:b0:5c:ac:0a: 18:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0E:2E:10:8F:5E:4C:E8:2E:29:CC:9A:ED:10:2B:D3:FB:92:0E:21 X509v3 Authority Key Identifier: keyid:95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4e:e3:e0:1c:58:28:d5:b3:77:cc:90:5b:96:d5:9e:4a:5a: 84:0e:76:d7:37:ca:cb:2e:84:4a:59:c4:33:85:0d:a8:87:46: be:7c:23:1a:95:8a:f5:f0:7c:58:a9:1e:d9:67:51:c0:60:5d: 9d:dd:86:37:99:a1:ab:e4:e0:c9:ed:a1:4f:0c:75:db:04:14: 91:c9:8e:f1:42:cd:c8:36:86:6e:c5:f1:5d:54:1d:a6:8c:b8: fd:13:9f:39:8a:2a:04:05:ed:8f:56:23:88:05:45:6c:19:65: ef:cb:50:0f:cb:57:e2:4a:fe:41:ee:0a:ae:46:68:39:a1:35: 50:70:7b:90:61:fc:4c:ea:d4:b5:6d:95:72:f6:54:76:45:02: 33:85:d3:91:2c:b7:0f:79:71:e8:8e:d8:27:71:b2:4d:03:82: 0d:61:41:46:35:25:4f:75:8b:c2:b7:37:ca:14:94:a7:87:22: 8e:23:71:0d:9a:25:7e:91:60:c2:29:c3:3e:2e:c0:ef:f8:88: 55:f0:45:a7:18:5b:83:fb:46:e4:39:2d:bd:c2:35:4e:a2:27: a9:e1:f8:87:ff:9a:59:55:15:d6:29:63:49:c0:7a:ae:9b:2f: dc:4e:c1:0f:81:c2:e6:c5:b6:da:ac:d4:6d:c7:c9:4b:06:28: bf:91:c8:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxNzQxMTAvBgNVBAUTKDk1RENFMjFCNUVDQURFQjA2OURDODFCOTI0MDVENDc0 REU0MUMyMDYwHhcNMjYwNjIyMTgyMDQyWhcNMjYwNjI5MTgyMDQyWjAYMRYwFAYD VQQDEw02YTM5N2NmYi1hMGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqy/IvapHkcu0W2s10Thcehq73/3oZWI56MyPS2B0OD6hacuVYddKXw52UHCl ZwFKqeKL/WtZwK8U9Ger4DDDxigXXkS2/WgLgCSrG+i16pLJF/Cva1W7AyO5hgGJ UWaNYITT0Q+Ea/yYaolQhAYumBYkOJi4q8wL1FIteI6T5xT1xsNh5RXzesd6l+em WUVvZDInBr9f27yTpAMUkkK3orH1FQ27zHQsuMneHkhv+5Tyh1KRw11AffOTOaH0 EzVginCTb65IYZIePWoKLC1vwZpvw/uxiPMsvArJrAUT1CfZaNj0e9TyMjJQGWZW Tu0iCIuJ9fzF+yX+RrBcrAoYnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD4OLhCP XkzoLinMmu0QK9P7kg4hMB8GA1UdIwQYMBaAFJXc4hteyt6wadyBuSQF1HTeQcIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDE3NC81MUMzRTU0ODBC NEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNyQnAzSUc1SkFYVWRONUJ3 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkemlHMTdLM3JCcDNJRzVKQVhVZE41QndnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDE3NC81MUMzRTU0ODBCNEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNy QnAzSUc1SkFYVWRONUJ3Z1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG07j4BxYKNWzd8yQW5bVnkpahA521zfKyy6ESlnEM4UNqIdGvnwjGpWK9fB8 WKke2WdRwGBdnd2GN5mhq+Tgye2hTwx12wQUkcmO8ULNyDaGbsXxXVQdpoy4/ROf OYoqBAXtj1YjiAVFbBll78tQD8tX4kr+Qe4KrkZoOaE1UHB7kGH8TOrUtW2VcvZU dkUCM4XTkSy3D3lx6I7YJ3GyTQOCDWFBRjUlT3WLwrc3yhSUp4cijiNxDZolfpFg winDPi7A7/iIVfBFpxhbg/tG5DktvcI1TqInqeH4h/+aWVUV1iljScB6rpsv3E7B D4HC5sW22qzUbcfJSwYov5HIDQ== -----END CERTIFICATE-----Generated at Wed Jun 24 11:20:06 2026 by rpki-client