$ rpki-client -vvvf rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft File: ldG-85ALQWWEFku3RjF3EwIpFog.mft (raw, json) Hash identifier: Fin6VjiT3Zvzqj484bXUdNAb6xVKtSZyYAQg7ZGO5iQ= Subject key identifier: 5F:72:7E:A6:1D:07:FA:3F:44:F0:AE:A8:76:AA:FF:1F:FE:A5:6D:D5 Authority key identifier: 95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88 Certificate issuer: /CN=A91577DD/serialNumber=95D1BEF3900B416584164BB74631771302291688 Certificate serial: 35A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft Manifest number: 3592 Signing time: Tue 22 Sep 2026 14:49:25 +0000 Manifest this update: Tue 22 Sep 2026 14:49:24 +0000 Manifest next update: Tue 29 Sep 2026 14:49:24 +0000 Files and hashes: 1: ldG-85ALQWWEFku3RjF3EwIpFog.crl (hash: 0svNsEmADPxi8FlCJeFlneH5BddPbZAxS48PZa/gtP0=) 2: C2F7AE40C03111EA9777314AC4F9AE02.roa (hash: JsmcN/iHNKGrr5+UdOJwBNNsYsjaqRo1Qt07Gdc3xmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13729 (0x35a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91577DD, serialNumber=95D1BEF3900B416584164BB74631771302291688 Validity Not Before: Sep 22 14:49:24 2026 GMT Not After : Sep 29 14:49:24 2026 GMT Subject: CN=6ab29575-fe0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bc:a0:52:a2:a0:c0:22:09:d3:a0:92:29:aa: f2:8f:25:a5:44:74:f9:f6:b6:99:93:65:fb:cc:0f: 31:9a:cf:07:9a:6c:4e:20:5f:43:3c:31:ac:7e:55: 14:cb:09:63:e9:23:d4:b7:33:a7:d4:e6:a9:cd:ab: 57:57:ec:8c:98:aa:f0:32:6d:35:58:37:d7:fa:df: c1:7a:f2:e1:ff:53:50:1f:1f:a3:b8:0e:23:7a:cc: 0f:d7:fb:71:8d:54:49:41:52:7d:23:38:13:6d:cc: aa:4d:45:6b:a4:c1:14:a7:8c:cd:41:db:4e:25:b4: a7:18:25:86:b7:5c:b1:a2:18:3a:41:3d:ee:ad:45: 61:b6:a6:70:3e:c4:5c:a2:15:0e:7f:c2:40:61:f6: 47:dd:ad:4d:fe:b3:7f:5c:17:98:28:60:7d:35:e8: 8c:af:0c:5f:22:0f:9d:e6:b9:c6:81:39:e2:0a:ef: 35:08:f7:a1:07:22:42:c6:fd:50:a0:fc:e8:73:ee: 9d:c9:c7:c1:dd:2d:a4:8c:7d:60:e2:dd:93:84:76: b5:dd:84:36:c8:03:13:ad:7b:7e:28:ce:62:64:de: 2e:46:8e:95:95:1e:73:d4:9a:d9:6f:7b:e6:6a:19: e6:77:b7:8b:9c:bc:fc:43:8b:da:db:89:70:84:74: 4a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:72:7E:A6:1D:07:FA:3F:44:F0:AE:A8:76:AA:FF:1F:FE:A5:6D:D5 X509v3 Authority Key Identifier: keyid:95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:72:f3:50:92:4f:4d:76:3c:26:7f:55:40:07:67:24:f5:57: 88:2d:43:dd:41:44:ff:77:c6:34:ae:f9:66:cf:ca:fd:4b:11: b4:95:a4:f8:a7:d1:9f:47:d3:12:1c:0e:86:ea:bf:24:ca:e4: 85:1f:1c:ef:44:a9:95:e0:2b:76:df:a3:eb:90:ba:53:96:ad: c0:93:93:f5:c2:3a:19:f0:d3:62:12:00:37:72:23:b2:3b:3f: 65:a6:fa:65:bb:6a:df:d1:1e:22:9b:07:bf:00:ce:30:34:d0: 0c:7c:69:28:9b:5b:10:c1:2c:f7:59:b1:8f:82:c6:ac:5a:2b: d0:9c:98:0f:04:70:bd:d5:d2:3b:f8:56:5a:7d:37:52:ef:53: f8:d4:28:2e:e3:01:0b:d5:f7:a4:67:ab:21:3f:fe:f2:e8:9a: 84:75:18:ab:2b:2e:f9:89:41:7f:1a:3e:2c:c1:2f:f5:d4:96: 8e:0a:ac:f5:03:5d:07:27:f9:74:39:56:27:5b:7a:75:2b:f1: 74:6c:c7:26:6d:81:3b:2b:0b:ca:ff:f6:3a:83:4a:6b:45:66: d7:5e:93:32:7b:61:dc:52:91:5a:3a:ec:ef:78:22:96:37:19: a0:82:ac:fb:8b:4a:f3:56:f7:17:8e:20:92:5e:e1:fe:28:aa: 73:6c:c7:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3REQxMTAvBgNVBAUTKDk1RDFCRUYzOTAwQjQxNjU4NDE2NEJCNzQ2MzE3NzEz MDIyOTE2ODgwHhcNMjYwOTIyMTQ0OTI0WhcNMjYwOTI5MTQ0OTI0WjAYMRYwFAYD VQQDEw02YWIyOTU3NS1mZTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7ygUqKgwCIJ06CSKaryjyWlRHT59raZk2X7zA8xms8HmmxOIF9DPDGsflUU ywlj6SPUtzOn1OapzatXV+yMmKrwMm01WDfX+t/BevLh/1NQHx+juA4jeswP1/tx jVRJQVJ9IzgTbcyqTUVrpMEUp4zNQdtOJbSnGCWGt1yxohg6QT3urUVhtqZwPsRc ohUOf8JAYfZH3a1N/rN/XBeYKGB9NeiMrwxfIg+d5rnGgTniCu81CPehByJCxv1Q oPzoc+6dycfB3S2kjH1g4t2ThHa13YQ2yAMTrXt+KM5iZN4uRo6VlR5z1JrZb3vm ahnmd7eLnLz8Q4va24lwhHRK6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF9yfqYd B/o/RPCuqHaq/x/+pW3VMB8GA1UdIwQYMBaAFJXRvvOQC0FlhBZLt0YxdxMCKRaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdERC9EMUM1QjAyQTFE OTYxMUUyQTFDQUI0N0YwOEIwMkNEMi9sZEctODVBTFFXV0VGa3UzUmpGM0V3SXBG b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkRy04NUFMUVdXRUZrdTNSakYzRXdJcEZvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzdERC9EMUM1QjAyQTFEOTYxMUUyQTFDQUI0N0YwOEIwMkNEMi9sZEctODVBTFFX V0VGa3UzUmpGM0V3SXBGb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABHLzUJJPTXY8Jn9VQAdnJPVXiC1D3UFE/3fGNK75Zs/K/UsRtJWk+KfRn0fT EhwOhuq/JMrkhR8c70SpleArdt+j65C6U5atwJOT9cI6GfDTYhIAN3Ijsjs/Zab6 Zbtq39EeIpsHvwDOMDTQDHxpKJtbEMEs91mxj4LGrFor0JyYDwRwvdXSO/hWWn03 Uu9T+NQoLuMBC9X3pGerIT/+8uiahHUYqysu+YlBfxo+LMEv9dSWjgqs9QNdByf5 dDlWJ1t6dSvxdGzHJm2BOysLyv/2OoNKa0Vm116TMnth3FKRWjrs73giljcZoIKs +4tK81b3F44gkl7h/iiqc2zH5w== -----END CERTIFICATE-----Generated at Thu Sep 24 10:51:31 2026 by rpki-client