$ rpki-client -vvf rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft File: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft (raw, json) Hash identifier: E2y+/57k8DO3oGPJyrfoZxlokecqatLkSWj8IakN7c4= Subject key identifier: F2:F0:09:AE:96:8F:50:1C:19:3C:63:9F:4E:C2:2D:A5:45:18:D5:AE Authority key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 Certificate issuer: /CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Certificate serial: 0273 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft Manifest number: 0267 Signing time: Wed 25 Mar 2026 01:32:56 +0000 Manifest this update: Wed 25 Mar 2026 01:32:56 +0000 Manifest next update: Wed 01 Apr 2026 01:32:56 +0000 Files and hashes: 1: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl (hash: 0O0G1+jimPWwe0hCxF56kQF7cbe4c+4H7mzr+5zao1o=) 2: E8B7423A7DE911EDBCFD3082C4F9AE02.roa (hash: GFXgxmEoBQzCrsm/fS7lTOgYerzl4oJDvOwjqKvAb0Y=) 3: F40EE60A9B5C11EFAF221C2AC4F9AE02.roa (hash: wMJcy9/RZ84DRy4ocrFd613aXU3WIp1EJ/+o6ekr43M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 627 (0x273) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EC3B, serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Validity Not Before: Mar 25 01:32:56 2026 GMT Not After : Apr 1 01:32:56 2026 GMT Subject: CN=69c33b48-b4da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:32:9a:9e:af:21:a7:9a:a0:b7:07:9e:d6:c7: 45:a5:8f:1b:65:fa:85:fd:e0:d3:2a:29:4d:5b:a2: cf:42:1a:1c:69:84:d8:9f:84:3d:ca:ac:ac:0c:d0: 19:70:b4:2b:12:aa:af:1a:da:e0:34:00:d1:be:37: 01:ca:30:85:24:6e:ba:63:7c:0e:d1:02:17:6c:1a: 58:1b:8c:d8:e3:4d:70:68:84:58:14:ab:cc:e7:94: c0:2a:1e:cc:af:d0:59:a4:fa:a7:0e:3b:7d:d2:51: 6a:ad:8c:d5:a1:2a:36:6f:1a:09:e6:22:ad:3e:75: 1f:f1:2b:06:b6:53:6e:e6:41:87:06:f4:a9:28:0a: 8e:0a:7f:4f:21:4a:ac:af:37:60:7b:36:ce:13:5c: 72:10:fd:cb:5d:7b:10:d4:6f:31:6c:1d:01:85:2d: 81:d1:3a:9f:3e:ff:8e:78:29:9b:73:0e:b5:0c:45: 1e:ca:8d:00:f4:8a:dc:96:dc:3b:b1:94:27:fc:3b: fd:2a:e2:97:aa:c6:6e:2d:cc:d2:cc:d7:6f:90:6d: fa:63:9b:33:86:0c:d9:06:d3:fe:7d:49:a5:db:4e: 97:7c:f6:53:b2:cf:2d:bd:80:e4:7e:72:fa:4b:e4: 4a:9a:3f:bb:24:76:6a:b1:91:e2:99:25:ef:e1:64: 34:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F0:09:AE:96:8F:50:1C:19:3C:63:9F:4E:C2:2D:A5:45:18:D5:AE X509v3 Authority Key Identifier: keyid:2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:e9:c9:b4:9f:f5:b9:cf:8d:00:7c:cd:81:27:7c:3e:da:f1: 6b:e6:b3:39:25:52:13:e9:31:bb:5c:a5:bc:4a:ff:65:c2:77: 3b:44:83:58:74:f5:ef:77:87:d1:51:86:18:55:a9:ca:b9:81: f8:ac:36:25:4c:9d:53:7b:44:4f:a1:c8:30:64:2c:de:81:1c: 23:99:e8:e6:a3:36:6e:da:37:43:8c:8a:ae:35:2b:bb:a7:c2: 4b:9b:6e:0f:81:cc:6b:3b:2b:94:97:20:cb:62:86:c8:e7:45: 49:64:8a:c0:d8:f4:fc:df:db:f8:5f:56:ac:55:30:4a:0c:61: 21:d8:94:26:ae:56:af:67:7b:e8:3d:47:d0:e0:f6:43:4b:bf: 15:09:33:84:cc:da:b0:53:0f:68:98:ae:3c:43:d9:89:d0:ed: 02:8d:17:ef:4d:f7:7e:c9:0f:29:0f:24:a8:d6:4f:64:8d:60: b3:3b:24:bf:d0:1a:91:8b:05:81:12:ef:09:6d:5f:a4:29:e2: 44:6d:ca:28:42:4a:f2:e3:05:6e:7a:c0:e5:89:d4:b6:73:7b: 79:2c:e1:e2:c3:47:ce:fb:36:e6:db:c5:b0:26:b9:0f:da:8c: 3f:ee:ad:f7:d0:d8:a3:47:32:e4:d2:23:43:d9:de:ba:57:0d: df:4a:1e:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VDM0IxMTAvBgNVBAUTKDJERENEMDVEQ0UyQzU4MDM3RkUwMkY5NUUxQThCRkNC RDNFMEUzMjUwHhcNMjYwMzI1MDEzMjU2WhcNMjYwNDAxMDEzMjU2WjAYMRYwFAYD VQQDEw02OWMzM2I0OC1iNGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjKanq8hp5qgtwee1sdFpY8bZfqF/eDTKilNW6LPQhocaYTYn4Q9yqysDNAZ cLQrEqqvGtrgNADRvjcByjCFJG66Y3wO0QIXbBpYG4zY401waIRYFKvM55TAKh7M r9BZpPqnDjt90lFqrYzVoSo2bxoJ5iKtPnUf8SsGtlNu5kGHBvSpKAqOCn9PIUqs rzdgezbOE1xyEP3LXXsQ1G8xbB0BhS2B0TqfPv+OeCmbcw61DEUeyo0A9Ircltw7 sZQn/Dv9KuKXqsZuLczSzNdvkG36Y5szhgzZBtP+fUml206XfPZTss8tvYDkfnL6 S+RKmj+7JHZqsZHimSXv4WQ0IQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPLwCa6W j1AcGTxjn07CLaVFGNWuMB8GA1UdIwQYMBaAFC3c0F3OLFgDf+AvleGov8vT4OMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUMzQi9ERjRBNDM3MjdE RTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dBTl80Qy1WNGFpX3k5UGc0 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xkelFYYzRzV0FOXzRDLVY0YWlfeTlQZzR5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUMzQi9ERjRBNDM3MjdERTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dB Tl80Qy1WNGFpX3k5UGc0eVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYOnJtJ/1uc+NAHzNgSd8Ptrxa+azOSVSE+kxu1ylvEr/ZcJ3O0SDWHT173eH 0VGGGFWpyrmB+Kw2JUydU3tET6HIMGQs3oEcI5no5qM2bto3Q4yKrjUru6fCS5tu D4HMazsrlJcgy2KGyOdFSWSKwNj0/N/b+F9WrFUwSgxhIdiUJq5Wr2d76D1H0OD2 Q0u/FQkzhMzasFMPaJiuPEPZidDtAo0X7033fskPKQ8kqNZPZI1gszskv9AakYsF gRLvCW1fpCniRG3KKEJK8uMFbnrA5YnUtnN7eSzh4sNHzvs25tvFsCa5D9qMP+6t 99DYo0cy5NIjQ9neulcN30oegA== -----END CERTIFICATE-----Generated at Thu Mar 26 06:19:34 2026 by rpki-client