$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft File: ldziG17K3rBp3IG5JAXUdN5BwgY.mft (raw, json) Hash identifier: sYURtqrRwBibxlsgaCcVhpEZccpmObfTGpLTgJ4X/Ho= Subject key identifier: 36:73:6F:61:5A:34:8C:EB:8A:2B:7B:14:EE:2F:5E:C7:0D:24:17:11 Authority key identifier: 95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 Certificate issuer: /CN=A91CD174/serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Certificate serial: 0CD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft Manifest number: 0CC9 Signing time: Sat 04 Apr 2026 18:14:40 +0000 Manifest this update: Sat 04 Apr 2026 18:14:39 +0000 Manifest next update: Sat 11 Apr 2026 18:14:39 +0000 Files and hashes: 1: ldziG17K3rBp3IG5JAXUdN5BwgY.crl (hash: jcwhg+9QXUU31pk5q5sFKEqE36RafSmnQCPlIEBi6wc=) 2: 54AD60AE0C2E11EABBBFA158C4F9AE02.roa (hash: T91CehV6Kilx5jipNUIxpW+jqQ75yMZ3U6hoSABekhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3287 (0xcd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD174, serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Validity Not Before: Apr 4 18:14:39 2026 GMT Not After : Apr 11 18:14:39 2026 GMT Subject: CN=69d15510-a630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a6:fc:0b:1b:ec:c2:fe:16:a6:0c:4f:b1:39: 5e:05:6a:d5:a5:c8:36:89:a6:7c:47:f8:e3:2b:c1: fe:6a:44:5c:0b:a4:65:6d:67:6a:47:0a:a1:e5:d2: 3b:48:eb:b9:82:65:11:a0:fd:bb:44:23:bc:57:28: 83:50:63:7d:d4:9c:ae:2b:b5:87:00:8f:05:2e:db: 55:92:da:c7:d6:a8:19:e7:cf:f8:76:ad:30:8d:51: f1:c8:f8:ad:55:e2:21:e1:e9:23:50:e4:92:46:70: 5e:68:b9:db:90:56:b1:02:70:2b:fe:2c:62:eb:fb: dd:78:0b:2a:e4:02:30:68:58:b5:b4:c2:7f:20:45: e9:49:ba:0d:4c:3c:58:48:b8:1b:27:15:09:6e:94: 74:5d:7e:c2:4e:04:70:12:7c:49:63:fb:52:bf:32: 30:21:ca:fa:c7:43:53:0c:37:6e:af:5e:70:c7:62: cf:2f:c7:49:53:4f:54:4a:f8:5e:44:2c:df:17:40: da:10:96:ca:fd:c5:55:45:74:38:5a:52:96:7d:1b: 74:47:84:a9:84:6a:05:5d:7e:e0:76:07:54:b8:31: 3b:01:e8:e1:46:67:62:27:ab:90:6b:13:9e:d4:24: fc:81:3f:f4:90:5c:87:a0:75:0c:2b:ef:28:b3:e9: 17:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:73:6F:61:5A:34:8C:EB:8A:2B:7B:14:EE:2F:5E:C7:0D:24:17:11 X509v3 Authority Key Identifier: keyid:95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:26:cd:4e:4e:a1:14:5f:68:8f:25:32:a1:2d:71:c1:7d:18: 45:da:94:d8:79:ec:ed:83:bc:09:bf:eb:1e:5b:e6:7f:4e:9e: e9:a7:ab:13:fd:49:c6:78:97:4d:8b:e2:4a:c2:9c:5a:d5:e7: 05:bd:8b:07:11:3a:58:8b:3a:0f:99:f9:68:0b:e1:33:e4:2e: 28:ac:6f:91:5f:45:d4:b9:5b:cc:1c:b6:a0:e3:65:a1:b9:88: 8d:a3:d7:86:ce:f2:36:ab:35:54:48:6c:a6:58:2e:a8:6f:54: f2:d8:1a:08:d5:da:19:2b:79:19:07:27:3b:af:ad:99:d0:0d: 8e:7d:e0:68:f8:36:c8:fe:a0:48:fb:c6:a2:0f:07:40:24:10: ec:58:46:9a:d9:b8:51:44:24:e4:9b:6e:9c:ae:44:5f:11:da: da:4e:64:a6:be:23:b2:68:cf:40:d9:f3:60:9e:57:fc:63:e9: 26:3c:15:1a:64:15:7d:9c:81:a1:a9:26:2b:07:e2:7e:48:4d: 4b:97:81:57:52:08:c0:ff:a9:67:23:fc:d1:26:38:60:94:b7: ce:48:80:47:2d:0f:25:75:48:b4:db:cc:66:f1:54:a7:2e:7e: 04:de:37:f9:db:53:02:dd:49:8f:c2:2e:a2:ab:b3:66:f8:82: e8:a8:58:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxNzQxMTAvBgNVBAUTKDk1RENFMjFCNUVDQURFQjA2OURDODFCOTI0MDVENDc0 REU0MUMyMDYwHhcNMjYwNDA0MTgxNDM5WhcNMjYwNDExMTgxNDM5WjAYMRYwFAYD VQQDEw02OWQxNTUxMC1hNjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Kb8Cxvswv4WpgxPsTleBWrVpcg2iaZ8R/jjK8H+akRcC6RlbWdqRwqh5dI7 SOu5gmURoP27RCO8VyiDUGN91JyuK7WHAI8FLttVktrH1qgZ58/4dq0wjVHxyPit VeIh4ekjUOSSRnBeaLnbkFaxAnAr/ixi6/vdeAsq5AIwaFi1tMJ/IEXpSboNTDxY SLgbJxUJbpR0XX7CTgRwEnxJY/tSvzIwIcr6x0NTDDdur15wx2LPL8dJU09USvhe RCzfF0DaEJbK/cVVRXQ4WlKWfRt0R4SphGoFXX7gdgdUuDE7AejhRmdiJ6uQaxOe 1CT8gT/0kFyHoHUMK+8os+kXTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZzb2Fa NIzriit7FO4vXscNJBcRMB8GA1UdIwQYMBaAFJXc4hteyt6wadyBuSQF1HTeQcIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDE3NC81MUMzRTU0ODBC NEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNyQnAzSUc1SkFYVWRONUJ3 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkemlHMTdLM3JCcDNJRzVKQVhVZE41QndnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDE3NC81MUMzRTU0ODBCNEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNy QnAzSUc1SkFYVWRONUJ3Z1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFCbNTk6hFF9ojyUyoS1xwX0YRdqU2Hns7YO8Cb/rHlvmf06e6aerE/1JxniX TYviSsKcWtXnBb2LBxE6WIs6D5n5aAvhM+QuKKxvkV9F1LlbzBy2oONlobmIjaPX hs7yNqs1VEhsplguqG9U8tgaCNXaGSt5GQcnO6+tmdANjn3gaPg2yP6gSPvGog8H QCQQ7FhGmtm4UUQk5JtunK5EXxHa2k5kpr4jsmjPQNnzYJ5X/GPpJjwVGmQVfZyB oakmKwfifkhNS5eBV1IIwP+pZyP80SY4YJS3zkiARy0PJXVItNvMZvFUpy5+BN43 +dtTAt1Jj8IuoquzZviC6KhYLw== -----END CERTIFICATE-----Generated at Mon Apr 6 11:34:51 2026 by rpki-client