$ rpki-client -vvf rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft File: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft (raw, json) Hash identifier: jBYUHvaEwFPu2W2kagb+vXxHEGbuDoajj4gbgYgj8Go= Subject key identifier: D9:15:4F:1A:21:CC:F6:64:F2:34:01:BC:58:48:93:F0:B3:51:0A:47 Authority key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 Certificate issuer: /CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft Manifest number: 01C3 Signing time: Sun 11 May 2025 02:00:08 +0000 Manifest this update: Sun 11 May 2025 02:00:07 +0000 Manifest next update: Sun 18 May 2025 02:00:07 +0000 Files and hashes: 1: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl (hash: vx40S7mGbd3PnfnMDnM/E5h+GlU1HsgHUMdDlgLt1ik=) 2: F40EE60A9B5C11EFAF221C2AC4F9AE02.roa (hash: jJCobfJLcL+bxm+0JuTzhdUR6TH06A3Cv8Ze73t5bJc=) 3: E8B7423A7DE911EDBCFD3082C4F9AE02.roa (hash: 30rh6IWxeAZSoQLXE8+fnFkH8FRjm++ff7WAqq69pt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EC3B, serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Validity Not Before: May 11 02:00:07 2025 GMT Not After : May 18 02:00:07 2025 GMT Subject: CN=682004a8-7ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7e:e2:29:11:5a:22:2d:84:4a:62:f9:57:5a: c6:44:09:3f:42:78:fb:3e:0f:56:ab:bc:37:d5:c9: 71:5d:61:25:ee:84:e0:0f:bc:cb:7a:d3:75:86:b8: 09:7f:3c:aa:6d:4a:ba:d3:9c:62:23:5a:3f:1a:bb: a8:e1:36:6f:44:f1:c7:6e:b3:79:34:e8:13:0a:d1: 9f:c1:27:44:6f:43:66:97:8b:0d:20:6a:e4:e4:ed: 2d:aa:16:57:9d:16:66:15:fc:c1:b8:1d:9d:d5:c6: c2:c1:5a:ea:fa:72:94:0d:b1:df:fe:60:74:37:4a: 36:76:ed:8a:18:ac:52:36:39:81:dd:bb:5b:11:e1: 87:86:60:69:f0:67:81:72:97:6c:2b:26:83:eb:27: 8a:3e:f1:5f:14:57:6a:dd:77:ce:ee:86:21:71:f3: 67:b9:13:50:7f:25:31:37:b9:7e:cb:07:de:56:df: e6:98:d8:9f:d2:79:52:18:74:c4:25:ac:d7:e5:54: cd:c8:f3:15:b8:12:25:ae:83:35:27:6d:52:14:c6: 49:b7:48:6d:6a:8b:10:3b:63:3b:fd:81:5d:cf:fa: 65:07:aa:37:16:2c:f1:8e:0d:50:b6:f3:bd:a3:90: 09:2b:08:2b:99:53:ea:4a:e6:5a:16:78:64:3d:27: 20:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:15:4F:1A:21:CC:F6:64:F2:34:01:BC:58:48:93:F0:B3:51:0A:47 X509v3 Authority Key Identifier: keyid:2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ec:68:47:71:f1:bf:c8:bd:92:72:1d:58:76:bf:ee:67:5f: 57:cd:d9:aa:94:78:39:45:57:64:ca:94:ec:94:81:87:cf:02: 46:07:b0:73:e8:c4:5f:3b:06:e7:1c:71:9f:14:0e:13:7b:ea: 51:ac:24:8e:36:aa:d1:07:a4:10:4a:1a:b9:65:c6:c3:bd:c3: 16:ae:40:47:fb:a6:10:66:b0:d9:80:07:1f:f2:a1:68:e6:71: 62:84:97:da:c6:75:02:92:99:ea:1e:7e:86:74:3f:3a:71:43: 2e:9a:61:50:93:61:78:a2:e6:ba:fb:d0:85:2e:39:c2:16:c4: 40:c9:ab:16:0c:97:52:01:42:a2:95:3a:1e:c2:82:2b:40:c1: 56:ef:af:d7:8d:a1:d2:fc:ed:c6:01:82:2a:6e:20:05:ff:42: 7a:2e:ec:f2:d3:2e:27:3f:97:e9:ea:4c:86:37:ae:fc:e7:e2: b9:00:61:ca:88:98:08:14:d9:d8:d5:c4:25:fb:3b:f3:52:52: 18:8b:0a:c2:09:33:d8:7c:52:4b:a3:9f:46:2c:04:37:00:f3: d3:55:46:e6:5b:29:8b:ab:59:8c:42:17:21:bc:85:43:3a:d7: d3:de:b4:7c:c1:9d:a2:94:2e:d6:cd:39:b3:1d:e2:d7:0f:d7: f5:dd:06:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VDM0IxMTAvBgNVBAUTKDJERENEMDVEQ0UyQzU4MDM3RkUwMkY5NUUxQThCRkNC RDNFMEUzMjUwHhcNMjUwNTExMDIwMDA3WhcNMjUwNTE4MDIwMDA3WjAYMRYwFAYD VQQDEw02ODIwMDRhOC03Y2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz37iKRFaIi2ESmL5V1rGRAk/Qnj7Pg9Wq7w31clxXWEl7oTgD7zLetN1hrgJ fzyqbUq605xiI1o/Gruo4TZvRPHHbrN5NOgTCtGfwSdEb0Nml4sNIGrk5O0tqhZX nRZmFfzBuB2d1cbCwVrq+nKUDbHf/mB0N0o2du2KGKxSNjmB3btbEeGHhmBp8GeB cpdsKyaD6yeKPvFfFFdq3XfO7oYhcfNnuRNQfyUxN7l+ywfeVt/mmNif0nlSGHTE JazX5VTNyPMVuBIlroM1J21SFMZJt0htaosQO2M7/YFdz/plB6o3Fizxjg1QtvO9 o5AJKwgrmVPqSuZaFnhkPScgZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkVTxoh zPZk8jQBvFhIk/CzUQpHMB8GA1UdIwQYMBaAFC3c0F3OLFgDf+AvleGov8vT4OMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUMzQi9ERjRBNDM3MjdE RTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dBTl80Qy1WNGFpX3k5UGc0 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xkelFYYzRzV0FOXzRDLVY0YWlfeTlQZzR5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUMzQi9ERjRBNDM3MjdERTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dB Tl80Qy1WNGFpX3k5UGc0eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO7GhHcfG/yL2Sch1Ydr/uZ19XzdmqlHg5RVdkypTslIGHzwJGB7Bz 6MRfOwbnHHGfFA4Te+pRrCSONqrRB6QQShq5ZcbDvcMWrkBH+6YQZrDZgAcf8qFo 5nFihJfaxnUCkpnqHn6GdD86cUMummFQk2F4oua6+9CFLjnCFsRAyasWDJdSAUKi lToewoIrQMFW76/XjaHS/O3GAYIqbiAF/0J6Luzy0y4nP5fp6kyGN6785+K5AGHK iJgIFNnY1cQl+zvzUlIYiwrCCTPYfFJLo59GLAQ3APPTVUbmWymLq1mMQhchvIVD OtfT3rR8wZ2ilC7WzTmzHeLXD9f13QbJ -----END CERTIFICATE-----Generated at Sun May 11 12:33:20 2025 by rpki-client