
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
File: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft (raw, json)
Hash identifier: ESGfEYgpvvvqEGm3JbAUXGyyhH713ltlM86uSwZCqDc=
Subject key identifier: B1:E9:9F:FE:32:07:86:CE:9E:3F:4A:F2:BA:7C:4B:27:BD:4C:98:AC
Authority key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25
Certificate issuer: /CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325
Certificate serial: 028C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
Manifest number: 0280
Signing time: Wed 13 May 2026 01:58:38 +0000
Manifest this update: Wed 13 May 2026 01:58:38 +0000
Manifest next update: Wed 20 May 2026 01:58:38 +0000
Files and hashes: 1: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl (hash: vwTVZGpo97aSkXUTBA5WHed0CgLRqcqoqbgmsYhyJik=)
2: E8B7423A7DE911EDBCFD3082C4F9AE02.roa (hash: GFXgxmEoBQzCrsm/fS7lTOgYerzl4oJDvOwjqKvAb0Y=)
3: F40EE60A9B5C11EFAF221C2AC4F9AE02.roa (hash: wMJcy9/RZ84DRy4ocrFd613aXU3WIp1EJ/+o6ekr43M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl
rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:58:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 652 (0x28c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EC3B, serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325
Validity
Not Before: May 13 01:58:38 2026 GMT
Not After : May 20 01:58:38 2026 GMT
Subject: CN=6a03dace-6e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6e:7e:0c:5e:3e:1b:34:2a:8c:41:be:ed:f3:
49:fb:24:93:79:d6:f1:43:7f:8e:6e:e1:5f:f1:79:
ab:6c:82:2b:d6:7c:f1:9d:6c:0f:88:bb:a3:2c:e7:
f4:56:8f:31:9b:5c:02:75:a2:eb:4a:2e:a3:9c:07:
73:c7:92:aa:82:55:de:7a:ff:a1:1a:25:2d:92:18:
64:c8:e8:06:cb:92:73:40:03:bc:c0:da:e3:0b:ba:
80:57:f8:04:ce:26:21:70:ec:6d:3a:99:c5:ea:9f:
20:cf:d6:5a:52:a5:fa:fb:a8:b1:81:05:f8:cd:20:
cd:d7:30:cb:3f:f5:71:d1:ed:23:8a:6d:f0:fa:83:
e9:ec:42:15:b4:92:24:31:95:11:64:9a:fd:e1:28:
5c:29:8d:94:ab:bf:55:99:d8:37:1a:0e:e4:95:7d:
35:f0:18:c8:5c:b8:4c:57:70:d5:c6:13:f7:89:0b:
2c:73:16:88:64:5e:18:ba:49:43:d9:c0:c2:12:1f:
7f:9b:84:65:ac:a3:3c:44:10:87:94:af:da:02:b2:
de:5a:ab:ac:79:8a:ce:e0:5e:17:41:f3:1d:63:bd:
9d:f0:c8:97:ca:3b:f2:2b:de:31:1c:c2:2c:5a:6f:
44:a6:db:b9:42:39:fb:9e:db:0a:4e:78:2b:52:74:
3d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E9:9F:FE:32:07:86:CE:9E:3F:4A:F2:BA:7C:4B:27:BD:4C:98:AC
X509v3 Authority Key Identifier:
keyid:2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:09:82:3e:51:d0:b0:f6:55:31:d0:33:aa:b8:39:0a:d4:27:
26:79:8a:0a:53:db:51:9b:0b:6d:37:5c:ee:8a:6b:9b:69:4e:
5c:e9:e2:99:f6:2d:91:38:87:09:bb:22:4e:7d:fe:79:b6:9e:
80:11:4c:09:ad:1b:36:a7:45:5e:21:84:ff:c9:c3:6d:db:db:
bc:7a:87:f4:40:e6:8b:b8:7c:7f:ad:9a:fd:d7:85:e7:80:cd:
b4:0f:25:6c:ab:ed:b9:04:6e:b2:bc:fc:94:38:a1:22:f7:80:
69:40:c3:0f:57:76:55:10:ba:63:f2:10:d7:c0:12:06:17:f9:
9f:f0:f0:38:b4:73:2e:f6:9a:59:e2:82:c2:92:9c:0a:6a:42:
74:58:75:b9:98:ec:05:ae:71:4e:3f:93:68:6c:15:14:ef:d3:
c7:de:29:80:3a:02:bd:ea:13:bf:04:b7:02:b1:e3:f4:7f:4b:
c7:11:cf:5a:eb:24:20:30:72:20:f9:51:3a:64:40:dd:e0:10:
b9:df:be:5a:dc:12:0f:ce:1e:05:f1:3a:6b:c5:80:b4:8c:76:
94:b5:0e:23:3d:6c:12:49:ae:b9:e9:d8:3b:34:31:74:9e:3a:
a6:27:97:3b:92:ca:d5:2b:24:9b:82:0f:83:2e:1a:00:23:e3:
fc:1c:99:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VDM0IxMTAvBgNVBAUTKDJERENEMDVEQ0UyQzU4MDM3RkUwMkY5NUUxQThCRkNC
RDNFMEUzMjUwHhcNMjYwNTEzMDE1ODM4WhcNMjYwNTIwMDE1ODM4WjAYMRYwFAYD
VQQDEw02YTAzZGFjZS02ZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2W5+DF4+GzQqjEG+7fNJ+ySTedbxQ3+ObuFf8XmrbIIr1nzxnWwPiLujLOf0
Vo8xm1wCdaLrSi6jnAdzx5KqglXeev+hGiUtkhhkyOgGy5JzQAO8wNrjC7qAV/gE
ziYhcOxtOpnF6p8gz9ZaUqX6+6ixgQX4zSDN1zDLP/Vx0e0jim3w+oPp7EIVtJIk
MZURZJr94ShcKY2Uq79Vmdg3Gg7klX018BjIXLhMV3DVxhP3iQsscxaIZF4YuklD
2cDCEh9/m4RlrKM8RBCHlK/aArLeWquseYrO4F4XQfMdY72d8MiXyjvyK94xHMIs
Wm9Eptu5Qjn7ntsKTngrUnQ9tQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLHpn/4y
B4bOnj9K8rp8Sye9TJisMB8GA1UdIwQYMBaAFC3c0F3OLFgDf+AvleGov8vT4OMl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUMzQi9ERjRBNDM3MjdE
RTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dBTl80Qy1WNGFpX3k5UGc0
eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xkelFYYzRzV0FOXzRDLVY0YWlfeTlQZzR5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RUMzQi9ERjRBNDM3MjdERTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dB
Tl80Qy1WNGFpX3k5UGc0eVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYAmCPlHQsPZVMdAzqrg5CtQnJnmKClPbUZsLbTdc7oprm2lOXOnimfYtkTiH
CbsiTn3+ebaegBFMCa0bNqdFXiGE/8nDbdvbvHqH9EDmi7h8f62a/deF54DNtA8l
bKvtuQRusrz8lDihIveAaUDDD1d2VRC6Y/IQ18ASBhf5n/DwOLRzLvaaWeKCwpKc
CmpCdFh1uZjsBa5xTj+TaGwVFO/Tx94pgDoCveoTvwS3ArHj9H9LxxHPWuskIDBy
IPlROmRA3eAQud++WtwSD84eBfE6a8WAtIx2lLUOIz1sEkmuuenYOzQxdJ46pieX
O5LK1Sskm4IPgy4aACPj/ByZpg==
-----END CERTIFICATE-----
Generated at Wed May 13 08:08:08 2026 by rpki-client