
$ rpki-client -vvf rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft
File: ldG-85ALQWWEFku3RjF3EwIpFog.mft (raw, json)
Hash identifier: w0yea9cVV8Xo6uQ3ZJXeaYZeiG13tjrG701ECj7V4Ec=
Subject key identifier: 95:9E:1E:22:59:C4:A1:F2:B2:D9:62:1C:FF:FB:3D:AE:F6:79:59:4E
Authority key identifier: 95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88
Certificate issuer: /CN=A91577DD/serialNumber=95D1BEF3900B416584164BB74631771302291688
Certificate serial: 355D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft
Manifest number: 354E
Signing time: Tue 12 May 2026 14:51:32 +0000
Manifest this update: Tue 12 May 2026 14:51:32 +0000
Manifest next update: Tue 19 May 2026 14:51:32 +0000
Files and hashes: 1: ldG-85ALQWWEFku3RjF3EwIpFog.crl (hash: QXdvjFPElt7veByh+HWDA1IoqZN8AU05ICWvcrX+LOo=)
2: C2F7AE40C03111EA9777314AC4F9AE02.roa (hash: JsmcN/iHNKGrr5+UdOJwBNNsYsjaqRo1Qt07Gdc3xmM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl
rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:51:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13661 (0x355d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91577DD, serialNumber=95D1BEF3900B416584164BB74631771302291688
Validity
Not Before: May 12 14:51:32 2026 GMT
Not After : May 19 14:51:32 2026 GMT
Subject: CN=6a033e74-2ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9b:37:a3:25:73:43:fb:3f:85:40:76:cc:06:
60:3a:c6:f4:b7:71:06:fd:d5:8c:c9:9c:e3:8a:b8:
fb:f1:20:af:ec:61:6d:c1:fa:4b:a9:d0:ca:f3:ae:
f9:7e:a3:da:03:c7:fa:b6:34:e3:3b:5d:d6:34:40:
b5:5b:15:ae:35:ff:1c:1e:b1:a4:41:c8:9a:7c:b4:
c4:d0:d2:cb:c8:9d:be:92:07:a6:ef:2e:88:83:3d:
36:4a:a3:26:45:04:6b:05:6c:c7:75:45:a3:0a:9b:
0f:82:3e:be:6b:a1:0e:1f:fe:97:e6:5b:ee:5a:bb:
36:ff:e6:28:c4:d3:80:9e:92:52:22:73:9d:c0:6e:
b6:67:b3:16:2e:4c:23:5a:4f:96:b3:25:13:78:92:
76:43:e9:8b:9b:81:1d:57:66:01:a8:dd:71:cd:13:
9d:3d:7b:7b:15:bb:82:93:7b:0b:59:3e:f0:a0:d0:
88:73:fa:37:f9:8b:72:e8:9e:96:80:ec:5a:6a:bc:
7c:ef:72:0c:09:89:67:17:69:b0:aa:a3:eb:04:3d:
35:06:48:f7:73:3f:e3:83:86:09:eb:b4:a7:4f:08:
87:60:8c:34:2e:c3:79:70:e2:7d:59:87:ea:75:c6:
81:f6:a6:47:6f:83:24:9a:6c:b4:01:4b:63:43:46:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9E:1E:22:59:C4:A1:F2:B2:D9:62:1C:FF:FB:3D:AE:F6:79:59:4E
X509v3 Authority Key Identifier:
keyid:95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:fb:cb:0e:a6:b3:79:e7:b7:bc:33:fe:f2:d9:81:cf:65:8a:
0a:de:e6:04:58:ae:6c:eb:e4:88:c6:a0:03:13:05:22:ae:cf:
f1:db:e7:f0:25:8d:d3:a0:88:50:08:7a:a6:23:02:9e:eb:60:
03:62:fb:97:1d:7a:ae:5c:5c:22:e9:de:72:71:6f:cc:76:35:
51:d5:79:ba:dd:e2:d5:55:ec:df:9b:08:65:22:29:b7:42:40:
61:a2:c1:ea:58:ef:8e:1d:6d:0e:9b:93:a2:52:a0:ae:60:86:
50:43:5c:43:dd:31:ac:fa:95:dc:4f:d3:de:72:a2:8b:52:05:
7e:90:e7:63:b9:1a:29:a7:f2:1f:49:73:48:80:d3:7e:66:f3:
8e:7c:0c:0d:1b:ab:29:2b:c6:2c:f3:2c:62:39:d8:68:d8:1e:
3b:bb:ad:97:94:4a:6e:04:8b:31:26:ef:e9:b8:e8:2c:38:93:
20:d7:1d:c4:3f:68:0c:b1:1b:d5:3b:f4:f0:30:8e:57:78:74:
2b:81:5e:98:13:73:af:6b:aa:d6:98:62:30:9a:51:1b:40:81:
1f:5e:08:89:fe:a9:38:c9:a5:9b:42:1c:cb:34:e4:78:f9:be:
28:3d:f2:91:37:47:72:ed:dd:dd:ee:c4:94:da:6d:b6:f5:ca:
63:ce:13:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:21:46 2026 by rpki-client