$ rpki-client -vvf rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft File: LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft (raw, json) Hash identifier: D6l/2nfB8fvWJIuYtGezLFHmtguAXT9WhXCGN2MFO5I= Subject key identifier: 8F:CB:CF:E0:7A:23:D4:FC:39:28:55:CA:AD:60:24:DD:AC:41:EF:C6 Authority key identifier: 2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9 Certificate issuer: /CN=A9147DCA/serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9 Certificate serial: 0759 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft Manifest number: 0747 Signing time: Wed 22 Jul 2026 22:23:59 +0000 Manifest this update: Wed 22 Jul 2026 22:23:58 +0000 Manifest next update: Wed 29 Jul 2026 22:23:58 +0000 Files and hashes: 1: LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl (hash: 4pKraWx+gFu/wZU94SmHHDd+FVYArr013OwHrK/OTWM=) 2: F100A1207F9911EBAFB6C91BC4F9AE02.roa (hash: HAOp0TvVsReYpfNF7VS+ecQ+ronnpAxEat5elqg2RPs=) 3: 0463FF50526C11EC80A31615C4F9AE02.roa (hash: B7D8niZNdbXyarYIfRZsjMzyjFHUhkkg3AnRqhXzd3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1881 (0x759) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147DCA, serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9 Validity Not Before: Jul 22 22:23:58 2026 GMT Not After : Jul 29 22:23:58 2026 GMT Subject: CN=6a6142ff-d833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b1:05:df:4f:95:e1:76:01:17:fd:13:4e:52: 01:3b:23:36:72:ad:07:99:32:a2:08:a1:c1:29:57: 02:ba:d5:3b:1f:a0:f4:06:27:85:6d:b2:ad:cf:34: 45:3f:aa:c7:f1:2c:4f:19:02:73:08:00:4b:e2:de: 24:34:73:74:34:99:8a:40:bc:53:d9:de:75:d1:17: 68:fc:b1:f4:de:92:c0:1b:6c:65:f3:e8:74:bd:a8: 8f:1e:cc:db:55:0a:bd:84:c4:71:34:26:e9:4c:ad: d7:d5:c6:13:4d:9c:20:0f:28:88:f6:3a:3e:a5:6c: 5b:c1:c4:6d:1e:bf:64:53:cf:c9:3f:97:6c:f3:63: 52:30:84:dc:df:1b:70:5b:17:8c:cb:85:d1:79:33: 10:b3:de:67:eb:95:d0:dd:ad:01:5c:40:57:d9:f5: 98:14:db:35:0e:70:77:4f:03:39:0f:43:58:ce:e1: db:f6:45:30:24:6b:48:9d:b8:1e:25:aa:94:5b:d7: 59:9b:69:e7:05:48:5d:ae:a7:07:d9:4d:58:b0:bb: 10:6b:79:b3:95:49:be:68:57:fb:d6:4e:5c:03:93: 46:f4:97:dd:a8:94:10:37:4c:e0:45:49:04:a4:a1: 23:bd:ac:d0:db:40:68:f5:68:d0:f5:03:a1:6c:3a: ac:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CB:CF:E0:7A:23:D4:FC:39:28:55:CA:AD:60:24:DD:AC:41:EF:C6 X509v3 Authority Key Identifier: keyid:2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:cb:b3:55:d4:d7:f2:5b:5d:18:d8:b1:24:ad:fa:3d:a2:7c: 11:ab:fe:79:ce:74:dc:fc:f0:d2:06:17:9f:6d:31:1f:50:31: 43:92:f7:f2:d0:f9:d8:89:4e:39:da:7d:41:3f:8e:81:bd:a9: a1:96:f4:07:57:b4:3c:b8:e0:a9:cc:84:48:f7:aa:1f:d8:2d: e5:71:b3:ec:77:e5:a9:80:e8:d2:6e:bb:61:ac:7c:4d:29:1a: 6d:4c:52:2d:19:99:68:12:92:bb:88:cc:03:e1:ac:22:43:25: 42:e5:1c:9b:bb:e9:4b:cc:7b:d4:04:12:57:fc:50:c5:e4:fa: 08:59:da:fb:a1:55:b2:d5:2d:fc:0f:86:cc:6e:98:85:e3:f4: e4:55:04:cb:7a:f0:70:34:84:53:b1:56:04:ea:88:68:dd:5b: 96:2d:8b:78:af:e2:2d:c9:2f:48:9a:d9:a2:2e:4d:54:7b:f9: c1:c1:76:e8:70:f8:98:c0:53:19:b2:f7:31:f2:e9:bf:7a:cf: df:9f:c1:5e:33:95:02:ba:f0:2a:b3:fa:4f:c2:99:54:37:0b: c2:4f:50:ec:61:2e:56:47:b3:05:df:3a:d5:b9:4f:89:15:b1: 11:fc:be:5b:7b:96:6c:0d:9b:82:90:63:4e:69:0e:82:a1:d8: c9:99:12:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdEQ0ExMTAvBgNVBAUTKDJDM0EyQTgxMjFDQ0Y4QTlCRkM3Q0I2NjkxODU0QUY1 RTREMjE5RjkwHhcNMjYwNzIyMjIyMzU4WhcNMjYwNzI5MjIyMzU4WjAYMRYwFAYD VQQDEw02YTYxNDJmZi1kODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrEF30+V4XYBF/0TTlIBOyM2cq0HmTKiCKHBKVcCutU7H6D0BieFbbKtzzRF P6rH8SxPGQJzCABL4t4kNHN0NJmKQLxT2d510Rdo/LH03pLAG2xl8+h0vaiPHszb VQq9hMRxNCbpTK3X1cYTTZwgDyiI9jo+pWxbwcRtHr9kU8/JP5ds82NSMITc3xtw WxeMy4XReTMQs95n65XQ3a0BXEBX2fWYFNs1DnB3TwM5D0NYzuHb9kUwJGtInbge JaqUW9dZm2nnBUhdrqcH2U1YsLsQa3mzlUm+aFf71k5cA5NG9JfdqJQQN0zgRUkE pKEjvazQ20Bo9WjQ9QOhbDqsDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI/Lz+B6 I9T8OShVyq1gJN2sQe/GMB8GA1UdIwQYMBaAFCw6KoEhzPipv8fLZpGFSvXk0hn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0RDQS8xQzc1RURBNjdE NkExMUVCQTRBNTk4MENDNEY5QUUwMi9MRG9xZ1NITS1LbV94OHRta1lWSzllVFNH ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEb3FnU0hNLUttX3g4dG1rWVZLOWVUU0dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0RDQS8xQzc1RURBNjdENkExMUVCQTRBNTk4MENDNEY5QUUwMi9MRG9xZ1NITS1L bV94OHRta1lWSzllVFNHZmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnsuzVdTX8ltdGNixJK36PaJ8Eav+ec503Pzw0gYXn20xH1AxQ5L38tD52IlO Odp9QT+Ogb2poZb0B1e0PLjgqcyESPeqH9gt5XGz7HflqYDo0m67Yax8TSkabUxS LRmZaBKSu4jMA+GsIkMlQuUcm7vpS8x71AQSV/xQxeT6CFna+6FVstUt/A+GzG6Y heP05FUEy3rwcDSEU7FWBOqIaN1bli2LeK/iLckvSJrZoi5NVHv5wcF26HD4mMBT GbL3MfLpv3rP35/BXjOVArrwKrP6T8KZVDcLwk9Q7GEuVkezBd861blPiRWxEfy+ W3uWbA2bgpBjTmkOgqHYyZkSCg== -----END CERTIFICATE-----Generated at Thu Jul 23 21:39:45 2026 by rpki-client