$ rpki-client -vvf rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft File: LDTzNZTMO-PAfo54N2v8QzJjFUg.mft (raw, json) Hash identifier: tFKFP9exmDuzBZhvYZlRlkRdEPvcpyies1hXbXoWm/k= Subject key identifier: D5:1D:37:7B:57:46:25:BA:BD:99:EA:F9:7B:5D:84:A8:32:2C:36:DD Authority key identifier: 2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48 Certificate issuer: /CN=A914ADD8/serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548 Certificate serial: 3522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft Manifest number: 3521 Signing time: Tue 24 Mar 2026 14:28:46 +0000 Manifest this update: Tue 24 Mar 2026 14:28:46 +0000 Manifest next update: Tue 31 Mar 2026 14:28:46 +0000 Files and hashes: 1: LDTzNZTMO-PAfo54N2v8QzJjFUg.crl (hash: uFexdIlFH6mgt3HT2gDh1GCzoB80Qrr/YpssiDR0GTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13602 (0x3522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ADD8, serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548 Validity Not Before: Mar 24 14:28:46 2026 GMT Not After : Mar 31 14:28:46 2026 GMT Subject: CN=69c29f9e-e0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e1:63:a3:37:e6:18:cc:71:5e:63:c1:94:a8: 6d:40:42:59:be:35:32:f7:bb:7e:1c:d0:c6:d1:a9: 62:8a:8c:c8:cf:d3:81:c5:64:fb:fd:c2:82:8e:57: e7:7b:01:58:a8:92:b3:1c:f4:37:02:5d:0b:ce:87: 6a:e7:e5:59:c9:de:91:5a:08:85:48:bf:95:69:7d: 14:3e:24:c2:6e:65:fc:c1:10:6b:e8:ee:d8:ee:87: f0:89:e0:83:fa:bc:17:df:94:74:68:c3:5e:82:51: 2f:3b:33:32:4b:44:ad:a7:d2:bf:11:bd:f9:a1:fb: 2b:db:a2:9b:15:7f:8b:c1:c1:b7:b2:7a:45:9f:62: b0:0b:ad:39:8f:e4:fa:b9:bf:30:37:e5:da:2a:5a: 37:57:d4:a6:5a:8b:3e:fe:6f:1d:bc:24:6a:67:2e: d8:08:77:13:68:3e:24:5f:fa:ef:f0:b8:f4:0b:ac: 48:63:e5:ab:0a:b5:c2:5d:83:73:6f:de:45:94:7d: 14:f7:e3:3c:99:7f:35:6d:de:e2:e0:ef:34:ff:06: 24:28:2b:23:58:ca:7c:bd:95:96:56:85:78:2f:0b: 42:d0:dc:84:95:06:90:27:ac:f0:57:75:ae:42:e3: 15:9c:fd:82:e3:0e:de:ef:3d:61:af:77:b7:2d:18: 12:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1D:37:7B:57:46:25:BA:BD:99:EA:F9:7B:5D:84:A8:32:2C:36:DD X509v3 Authority Key Identifier: keyid:2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:af:3e:fe:3c:cf:ea:b6:00:5f:90:ff:94:d2:0a:7a:3d:ae: c1:8a:e6:dd:0d:9d:52:7f:47:03:ff:e1:aa:89:5f:99:f6:05: ec:41:17:7f:ab:30:d3:f6:90:ae:41:c6:be:3f:9d:55:10:f7: f5:24:9f:68:e5:3a:11:3e:a8:03:75:b2:e9:ab:17:37:59:32: 3c:01:40:22:2d:81:c5:41:b6:8c:2f:9e:d3:d7:1b:f4:37:70: 6c:03:2e:51:51:bd:b3:b7:13:ec:46:35:16:76:88:62:a8:83: 87:02:b1:bd:70:80:89:1d:26:67:73:76:d5:f8:c6:ea:1a:5b: 24:34:57:e5:2f:4d:ca:08:58:a6:53:e2:45:bb:43:29:a8:fd: 5d:a1:f8:0e:85:1f:48:a5:ca:43:30:49:9f:01:cd:a1:15:1a: 8f:6e:ff:72:dd:50:df:40:99:98:a1:9b:97:bc:e4:21:6d:87: 21:58:ad:32:7d:dc:5a:35:a2:9e:2f:6a:12:a4:09:ac:63:7a: fa:79:04:85:ba:3a:71:16:1e:f3:a2:88:22:cf:49:41:6d:2d: 03:5c:fe:80:80:86:48:a8:ea:aa:bf:71:8b:bb:b8:e9:48:b9: ea:b1:1d:f2:ab:8d:86:91:6a:cc:aa:4a:79:0f:de:73:ee:6c: bc:ff:ef:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEFERDgxMTAvBgNVBAUTKDJDMzRGMzM1OTRDQzNCRTNDMDdFOEU3ODM3NkJGQzQz MzI2MzE1NDgwHhcNMjYwMzI0MTQyODQ2WhcNMjYwMzMxMTQyODQ2WjAYMRYwFAYD VQQDEw02OWMyOWY5ZS1lMGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6eFjozfmGMxxXmPBlKhtQEJZvjUy97t+HNDG0aliiozIz9OBxWT7/cKCjlfn ewFYqJKzHPQ3Al0Lzodq5+VZyd6RWgiFSL+VaX0UPiTCbmX8wRBr6O7Y7ofwieCD +rwX35R0aMNeglEvOzMyS0Stp9K/Eb35ofsr26KbFX+LwcG3snpFn2KwC605j+T6 ub8wN+XaKlo3V9SmWos+/m8dvCRqZy7YCHcTaD4kX/rv8Lj0C6xIY+WrCrXCXYNz b95FlH0U9+M8mX81bd7i4O80/wYkKCsjWMp8vZWWVoV4LwtC0NyElQaQJ6zwV3Wu QuMVnP2C4w7e7z1hr3e3LRgSiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNUdN3tX RiW6vZnq+XtdhKgyLDbdMB8GA1UdIwQYMBaAFCw08zWUzDvjwH6OeDdr/EMyYxVI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUREOC9BNEQ4MTA0RTFE ODcxMUUyODM0Q0I5REYwOEIwMkNEMi9MRFR6TlpUTU8tUEFmbzU0TjJ2OFF6SmpG VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEVHpOWlRNTy1QQWZvNTROMnY4UXpKakZVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QUREOC9BNEQ4MTA0RTFEODcxMUUyODM0Q0I5REYwOEIwMkNEMi9MRFR6TlpUTU8t UEFmbzU0TjJ2OFF6SmpGVWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmq8+/jzP6rYAX5D/lNIKej2uwYrm3Q2dUn9HA//hqolfmfYF7EEXf6sw0/aQ rkHGvj+dVRD39SSfaOU6ET6oA3Wy6asXN1kyPAFAIi2BxUG2jC+e09cb9DdwbAMu UVG9s7cT7EY1FnaIYqiDhwKxvXCAiR0mZ3N21fjG6hpbJDRX5S9NyghYplPiRbtD Kaj9XaH4DoUfSKXKQzBJnwHNoRUaj27/ct1Q30CZmKGbl7zkIW2HIVitMn3cWjWi ni9qEqQJrGN6+nkEhbo6cRYe86KIIs9JQW0tA1z+gICGSKjqqr9xi7u46Ui56rEd 8quNhpFqzKpKeQ/ec+5svP/vjA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:42:21 2026 by rpki-client