$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft File: ldziG17K3rBp3IG5JAXUdN5BwgY.mft (raw, json) Hash identifier: WKVfvDvkGi8ZW06fEj7+kYf16HP4fQJkCGNNUnn/eW4= Subject key identifier: 4C:17:E0:D4:85:6C:5C:08:39:79:D2:34:26:9F:6B:B7:02:2C:17:D3 Authority key identifier: 95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 Certificate issuer: /CN=A91CD174/serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Certificate serial: 0CEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft Manifest number: 0CDC Signing time: Tue 12 May 2026 18:25:24 +0000 Manifest this update: Tue 12 May 2026 18:25:24 +0000 Manifest next update: Tue 19 May 2026 18:25:24 +0000 Files and hashes: 1: ldziG17K3rBp3IG5JAXUdN5BwgY.crl (hash: fWayNyc/Aw7K9Rv5XPTNjwXsqutAiOroWeWmAF4agok=) 2: 54AD60AE0C2E11EABBBFA158C4F9AE02.roa (hash: T91CehV6Kilx5jipNUIxpW+jqQ75yMZ3U6hoSABekhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3306 (0xcea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD174, serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Validity Not Before: May 12 18:25:24 2026 GMT Not After : May 19 18:25:24 2026 GMT Subject: CN=6a037094-3a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:62:af:ec:b8:01:be:08:61:bf:b8:6b:48:fc: bc:96:cf:b1:ae:38:e1:46:a0:cc:56:1d:7d:15:1e: ff:a6:b1:d7:39:d6:83:eb:40:ac:f9:a2:62:9e:fc: eb:23:62:af:fa:22:97:e1:14:8b:1b:68:eb:fb:25: 2a:aa:ca:94:59:ae:c4:f7:7f:f6:f5:77:b0:b2:0b: 3a:56:d6:d9:ac:30:b8:8e:00:36:f1:13:a2:50:0d: 9c:91:4a:c2:e9:fe:47:0e:57:32:3a:7c:b0:c1:f6: b1:a0:43:e4:45:e8:ac:5c:d2:95:52:52:24:26:8d: 89:ae:d2:cf:c5:88:ac:c4:ff:68:9a:c0:4d:1e:a5: 05:70:c2:ef:dd:0a:36:d6:7a:94:68:e9:60:1a:32: cc:c1:c9:21:63:69:aa:57:5b:5f:1d:93:d1:0b:cb: 9c:1b:f8:bd:44:9b:c4:8e:ff:48:d5:e5:95:ce:d1: 64:ae:32:28:4a:25:a0:aa:1d:09:30:4a:0f:22:b6: 2f:47:3c:c9:fb:0e:64:14:bb:70:a4:64:d8:15:f9: b1:da:00:61:b0:c0:03:dd:18:82:4a:3e:7d:6f:d0: 21:95:93:0e:e7:64:bc:b2:7f:5b:5a:48:e4:f5:59: 13:3a:a6:45:6e:c8:76:63:cf:97:64:2d:46:a4:3f: 00:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:17:E0:D4:85:6C:5C:08:39:79:D2:34:26:9F:6B:B7:02:2C:17:D3 X509v3 Authority Key Identifier: keyid:95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:54:03:47:82:c0:53:18:a0:cb:25:90:fd:8b:e6:85:15:78: 0d:c4:44:3a:89:4c:42:5c:63:76:d5:18:59:b8:e5:e4:65:66: 35:4c:1a:ea:63:9e:ca:0e:36:e4:d6:54:2d:00:2b:4e:bb:6f: c6:c1:c5:4f:99:97:85:e8:fd:67:96:c9:1b:66:fe:4e:af:57: 63:43:9c:70:ea:db:69:f5:b8:e0:cb:9d:9c:10:d6:df:23:ca: 7d:ca:42:bd:ef:83:3e:75:a4:9b:71:a6:14:77:a0:5e:2f:06: 2e:18:ad:49:1e:80:80:d5:52:36:f6:80:0d:f4:23:5c:f4:94: 9b:db:de:77:b7:07:fa:9e:6e:11:ff:9c:ba:08:dc:24:20:e3: d2:b8:10:a9:cf:1d:4f:d5:da:5e:b4:f0:a0:fe:b7:c0:de:f4: 63:cd:4c:5f:77:64:60:5d:64:fe:ab:d9:d7:bb:77:5b:56:9e: 7c:91:f6:bf:d3:20:b4:e3:85:10:1d:54:11:90:4f:ea:36:cd: d3:d7:66:7a:e3:6d:bb:bd:c2:6d:3a:55:a4:c1:68:b8:6a:ca: ba:4e:74:0c:68:fd:26:9d:b1:76:eb:c2:7f:41:01:a2:5c:b3: ae:99:27:0b:bc:99:d8:8e:4b:3e:c2:1e:dd:e6:20:0a:be:11: 45:bd:8c:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxNzQxMTAvBgNVBAUTKDk1RENFMjFCNUVDQURFQjA2OURDODFCOTI0MDVENDc0 REU0MUMyMDYwHhcNMjYwNTEyMTgyNTI0WhcNMjYwNTE5MTgyNTI0WjAYMRYwFAYD VQQDEw02YTAzNzA5NC0zYTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmKv7LgBvghhv7hrSPy8ls+xrjjhRqDMVh19FR7/prHXOdaD60Cs+aJinvzr I2Kv+iKX4RSLG2jr+yUqqsqUWa7E93/29Xewsgs6VtbZrDC4jgA28ROiUA2ckUrC 6f5HDlcyOnywwfaxoEPkReisXNKVUlIkJo2JrtLPxYisxP9omsBNHqUFcMLv3Qo2 1nqUaOlgGjLMwckhY2mqV1tfHZPRC8ucG/i9RJvEjv9I1eWVztFkrjIoSiWgqh0J MEoPIrYvRzzJ+w5kFLtwpGTYFfmx2gBhsMAD3RiCSj59b9AhlZMO52S8sn9bWkjk 9VkTOqZFbsh2Y8+XZC1GpD8AKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEwX4NSF bFwIOXnSNCafa7cCLBfTMB8GA1UdIwQYMBaAFJXc4hteyt6wadyBuSQF1HTeQcIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDE3NC81MUMzRTU0ODBC NEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNyQnAzSUc1SkFYVWRONUJ3 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkemlHMTdLM3JCcDNJRzVKQVhVZE41QndnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDE3NC81MUMzRTU0ODBCNEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNy QnAzSUc1SkFYVWRONUJ3Z1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkVQDR4LAUxigyyWQ/YvmhRV4DcREOolMQlxjdtUYWbjl5GVmNUwa6mOeyg42 5NZULQArTrtvxsHFT5mXhej9Z5bJG2b+Tq9XY0OccOrbafW44MudnBDW3yPKfcpC ve+DPnWkm3GmFHegXi8GLhitSR6AgNVSNvaADfQjXPSUm9ved7cH+p5uEf+cugjc JCDj0rgQqc8dT9XaXrTwoP63wN70Y81MX3dkYF1k/qvZ17t3W1aefJH2v9MgtOOF EB1UEZBP6jbN09dmeuNtu73CbTpVpMFouGrKuk50DGj9Jp2xduvCf0EBolyzrpkn C7yZ2I5LPsIe3eYgCr4RRb2MEg== -----END CERTIFICATE-----Generated at Wed May 13 05:39:31 2026 by rpki-client