$ rpki-client -vvf rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft File: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft (raw, json) Hash identifier: ek+zBQ0Rks8rspmkxeh+kHQu3pLNcnZxTEqtHqG78BI= Subject key identifier: 80:80:93:AA:19:29:E8:36:34:A2:39:D0:49:20:65:7A:21:71:22:B9 Authority key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 Certificate issuer: /CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft Manifest number: 01DC Signing time: Tue 01 Jul 2025 03:08:31 +0000 Manifest this update: Tue 01 Jul 2025 03:08:30 +0000 Manifest next update: Tue 08 Jul 2025 03:08:30 +0000 Files and hashes: 1: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl (hash: J2Qd1SxKfjoGksYqETBoSwQ5DeAcztis/5yJEc6f9UQ=) 2: F40EE60A9B5C11EFAF221C2AC4F9AE02.roa (hash: jJCobfJLcL+bxm+0JuTzhdUR6TH06A3Cv8Ze73t5bJc=) 3: E8B7423A7DE911EDBCFD3082C4F9AE02.roa (hash: 30rh6IWxeAZSoQLXE8+fnFkH8FRjm++ff7WAqq69pt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EC3B, serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Validity Not Before: Jul 1 03:08:30 2025 GMT Not After : Jul 8 03:08:30 2025 GMT Subject: CN=6863512f-6c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:88:d1:bb:50:16:cf:22:b3:6b:64:31:92:f9: d5:2a:52:68:24:95:24:15:ad:2a:cb:b4:19:87:3a: 19:e8:96:ce:ba:3c:d2:37:fd:7b:33:fd:e4:aa:d0: af:2d:bc:2a:04:76:59:0e:59:31:81:2b:46:56:d0: 5b:c0:a9:a2:72:06:36:60:33:9f:8d:69:d4:fd:2b: 5a:5d:4b:d7:16:4e:9e:2f:e7:51:f0:e8:3a:0d:85: b1:9a:9d:e5:9e:42:61:aa:ee:b3:2d:79:e5:4d:8f: d1:8c:6a:bf:40:4f:91:c6:d9:d2:20:3b:9f:c8:50: 4f:72:c1:45:a7:ec:19:64:a1:1a:47:2b:72:d4:37: 40:4e:a9:f1:c6:ab:a7:04:33:b0:c8:b8:25:df:66: 56:f1:0e:f5:bc:1a:28:09:c0:8f:dc:1e:54:fd:4d: c6:1f:c8:d3:f4:11:d8:78:8c:ed:af:92:28:df:d6: 84:b3:48:e9:09:ed:b3:5e:12:9e:a3:d6:04:13:e5: 14:d5:fb:6b:31:5a:bd:29:9e:b0:ef:92:d1:37:d2: 67:89:4f:42:07:21:b5:36:46:34:4c:a2:02:33:83: ec:d8:97:0a:10:12:89:76:a2:bd:51:8a:2c:00:a7: 68:a9:f9:a2:a6:5d:99:f7:fe:4d:e8:8f:02:fc:d0: 28:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:80:93:AA:19:29:E8:36:34:A2:39:D0:49:20:65:7A:21:71:22:B9 X509v3 Authority Key Identifier: keyid:2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:2a:99:0d:7a:50:7e:26:6d:98:23:51:f4:88:47:51:ed:2a: b6:1d:e5:ec:31:ce:21:ba:28:c9:f7:88:f6:2e:de:a2:ab:f3: b8:48:aa:33:30:2c:8e:dd:2d:33:f9:91:bc:e0:7c:7c:e1:f9: 55:58:5d:2b:39:ba:bf:9c:1e:a9:01:5d:46:8e:eb:1a:76:e2: 48:32:43:99:d9:78:2b:7e:a6:1c:a5:b2:ae:18:d7:df:53:85: ad:cc:38:93:c5:59:f9:ca:e2:77:71:80:65:ff:f4:e0:54:4b: 5b:ea:0f:f2:29:a9:e4:38:c5:61:47:39:2e:63:d1:bb:5a:99: 98:11:5b:a2:0f:58:fb:4c:57:1a:81:ec:d6:1d:79:5b:63:b9: 63:82:2a:5d:f9:21:2b:c8:21:05:d6:3c:a7:b7:d8:b6:4a:a3: 22:3f:ee:1e:c0:b9:3f:b2:0a:85:9d:ad:ea:a7:ff:f5:d8:66: aa:bd:41:91:99:4c:49:df:04:1f:37:62:de:14:d9:57:cb:fc: 4d:8f:75:ac:08:22:d4:52:4d:fd:19:16:a7:c1:66:90:5b:ea: 97:71:57:4f:5d:8d:f9:51:e0:72:b9:ef:bd:5f:50:6a:60:3e: e3:bf:86:1d:0e:6c:47:5a:7c:25:b5:7e:19:d4:9b:41:fc:5b: d4:4a:54:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VDM0IxMTAvBgNVBAUTKDJERENEMDVEQ0UyQzU4MDM3RkUwMkY5NUUxQThCRkNC RDNFMEUzMjUwHhcNMjUwNzAxMDMwODMwWhcNMjUwNzA4MDMwODMwWjAYMRYwFAYD VQQDEw02ODYzNTEyZi02YzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuojRu1AWzyKza2QxkvnVKlJoJJUkFa0qy7QZhzoZ6JbOujzSN/17M/3kqtCv LbwqBHZZDlkxgStGVtBbwKmicgY2YDOfjWnU/StaXUvXFk6eL+dR8Og6DYWxmp3l nkJhqu6zLXnlTY/RjGq/QE+RxtnSIDufyFBPcsFFp+wZZKEaRyty1DdATqnxxqun BDOwyLgl32ZW8Q71vBooCcCP3B5U/U3GH8jT9BHYeIztr5Io39aEs0jpCe2zXhKe o9YEE+UU1ftrMVq9KZ6w75LRN9JniU9CByG1NkY0TKICM4Ps2JcKEBKJdqK9UYos AKdoqfmipl2Z9/5N6I8C/NAoKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICAk6oZ Keg2NKI50EkgZXohcSK5MB8GA1UdIwQYMBaAFC3c0F3OLFgDf+AvleGov8vT4OMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUMzQi9ERjRBNDM3MjdE RTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dBTl80Qy1WNGFpX3k5UGc0 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xkelFYYzRzV0FOXzRDLVY0YWlfeTlQZzR5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUMzQi9ERjRBNDM3MjdERTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dB Tl80Qy1WNGFpX3k5UGc0eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPKpkNelB+Jm2YI1H0iEdR7Sq2HeXsMc4huijJ94j2Lt6iq/O4SKoz MCyO3S0z+ZG84Hx84flVWF0rObq/nB6pAV1GjusaduJIMkOZ2XgrfqYcpbKuGNff U4WtzDiTxVn5yuJ3cYBl//TgVEtb6g/yKankOMVhRzkuY9G7WpmYEVuiD1j7TFca gezWHXlbY7ljgipd+SEryCEF1jynt9i2SqMiP+4ewLk/sgqFna3qp//12GaqvUGR mUxJ3wQfN2LeFNlXy/xNj3WsCCLUUk39GRanwWaQW+qXcVdPXY35UeByue+9X1Bq YD7jv4YdDmxHWnwltX4Z1JtB/FvUSlT5 -----END CERTIFICATE-----Generated at Tue Jul 1 14:41:51 2025 by rpki-client