$ rpki-client -vvf rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft File: LDTzNZTMO-PAfo54N2v8QzJjFUg.mft (raw, json) Hash identifier: GFN/CQ7tRd4TONB4CsdoA0ZT/wZBgtkrDhke96jIQNk= Subject key identifier: 79:F7:F0:48:E8:3D:D5:47:57:03:9E:B9:CD:B8:F7:48:6A:3F:D8:D3 Authority key identifier: 2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48 Certificate issuer: /CN=A914ADD8/serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548 Certificate serial: 34CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft Manifest number: 34CC Signing time: Sat 18 Oct 2025 14:31:14 +0000 Manifest this update: Sat 18 Oct 2025 14:31:13 +0000 Manifest next update: Sat 25 Oct 2025 14:31:13 +0000 Files and hashes: 1: LDTzNZTMO-PAfo54N2v8QzJjFUg.crl (hash: ofxtRqXDXR/xQendZmXMAxUKtG4kDRMdQ9q6WGGU60w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:31:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13517 (0x34cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ADD8, serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548 Validity Not Before: Oct 18 14:31:13 2025 GMT Not After : Oct 25 14:31:13 2025 GMT Subject: CN=68f3a4b2-707a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:31:58:c5:35:14:3d:1a:8b:a2:42:c3:85:54: c8:aa:54:fe:55:42:56:b4:dc:c5:2a:77:3f:a2:14: ae:b1:3c:cb:13:72:08:5a:53:4c:0c:44:83:47:f6: 93:da:55:9a:d8:23:bf:74:45:94:93:b4:16:13:9d: 67:a8:46:3a:1c:23:b0:c6:b8:4a:4b:e2:2f:5f:10: e8:ec:da:a9:ba:90:ba:49:c1:05:5f:4c:a6:2a:e5: 52:10:3a:1a:f7:23:07:c3:62:1c:d3:5d:0d:c4:24: fd:95:21:ab:91:44:03:ab:2a:d7:4b:2c:02:98:e3: 2b:ba:26:8e:91:f7:d9:b5:41:a6:41:eb:93:9e:7e: dc:18:23:a0:e8:38:25:fa:99:8d:32:46:5f:9c:3a: 79:1b:0b:cb:41:9e:de:9e:05:48:8a:92:bf:4e:33: 70:03:e2:15:50:b9:bb:ed:cd:a6:1e:7f:49:03:52: 7d:4e:60:8c:c5:9e:12:06:a2:22:0c:2c:a3:e4:b2: c7:9b:81:fc:12:61:d0:55:c2:c5:61:08:e1:43:68: 5b:cc:c3:cb:1a:71:f4:80:5b:fc:f3:e7:33:ef:90: f4:6d:66:08:b8:ad:e5:69:59:ca:36:ce:0c:3a:d7: 1c:c8:2b:82:20:97:27:2b:1b:8c:24:66:3f:77:dc: 23:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F7:F0:48:E8:3D:D5:47:57:03:9E:B9:CD:B8:F7:48:6A:3F:D8:D3 X509v3 Authority Key Identifier: keyid:2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:8b:1a:ef:7b:37:ea:38:2e:96:ab:17:58:fb:3f:a1:7e:5b: 8a:e9:61:d6:53:0e:51:ae:e8:9b:bd:24:66:1a:e8:94:69:e0: bb:0d:59:03:24:2b:7f:2c:32:99:54:dc:54:0a:59:bd:f6:a4: 0a:17:4b:b5:d5:12:e7:5f:38:08:9c:4c:94:89:31:1f:a6:4e: 78:4a:d0:50:1e:f1:ef:e8:09:45:ec:58:4f:d0:3d:12:fa:39: 79:aa:28:d0:69:37:14:0b:db:95:0c:1d:f3:86:28:da:ab:62: af:e3:9a:02:fe:f9:95:7e:ba:1f:30:9b:2a:97:88:d9:da:ca: 05:eb:73:e2:c3:c9:8a:22:af:8e:f1:3e:9b:ac:bf:05:a4:7c: d0:fb:7f:c7:e0:1f:d8:f7:78:59:10:8a:6b:45:c9:72:79:88: 17:8c:7c:42:ef:6e:46:2c:48:0f:80:fb:8f:ed:34:e4:22:d3: 05:13:36:3f:5a:05:f8:5a:26:a2:ac:f3:4a:15:d1:f4:67:f0: 9b:9a:7f:27:58:be:5d:9e:c2:47:46:e3:7d:5f:ab:99:5e:1b: 3b:68:60:c5:89:d7:aa:06:4a:07:0b:01:40:0c:0b:06:4a:05: cb:f1:7d:f2:8a:f0:10:51:8c:ae:31:24:d4:ba:a7:07:49:cf: 0e:17:7a:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEFERDgxMTAvBgNVBAUTKDJDMzRGMzM1OTRDQzNCRTNDMDdFOEU3ODM3NkJGQzQz MzI2MzE1NDgwHhcNMjUxMDE4MTQzMTEzWhcNMjUxMDI1MTQzMTEzWjAYMRYwFAYD VQQDEw02OGYzYTRiMi03MDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDFYxTUUPRqLokLDhVTIqlT+VUJWtNzFKnc/ohSusTzLE3IIWlNMDESDR/aT 2lWa2CO/dEWUk7QWE51nqEY6HCOwxrhKS+IvXxDo7NqpupC6ScEFX0ymKuVSEDoa 9yMHw2Ic010NxCT9lSGrkUQDqyrXSywCmOMruiaOkffZtUGmQeuTnn7cGCOg6Dgl +pmNMkZfnDp5GwvLQZ7engVIipK/TjNwA+IVULm77c2mHn9JA1J9TmCMxZ4SBqIi DCyj5LLHm4H8EmHQVcLFYQjhQ2hbzMPLGnH0gFv88+cz75D0bWYIuK3laVnKNs4M OtccyCuCIJcnKxuMJGY/d9wjZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHn38Ejo PdVHVwOeuc2490hqP9jTMB8GA1UdIwQYMBaAFCw08zWUzDvjwH6OeDdr/EMyYxVI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUREOC9BNEQ4MTA0RTFE ODcxMUUyODM0Q0I5REYwOEIwMkNEMi9MRFR6TlpUTU8tUEFmbzU0TjJ2OFF6SmpG VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEVHpOWlRNTy1QQWZvNTROMnY4UXpKakZVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QUREOC9BNEQ4MTA0RTFEODcxMUUyODM0Q0I5REYwOEIwMkNEMi9MRFR6TlpUTU8t UEFmbzU0TjJ2OFF6SmpGVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzixrvezfqOC6WqxdY+z+hfluK6WHWUw5RruibvSRmGuiUaeC7DVkD JCt/LDKZVNxUClm99qQKF0u11RLnXzgInEyUiTEfpk54StBQHvHv6AlF7FhP0D0S +jl5qijQaTcUC9uVDB3zhijaq2Kv45oC/vmVfrofMJsql4jZ2soF63Piw8mKIq+O 8T6brL8FpHzQ+3/H4B/Y93hZEIprRclyeYgXjHxC725GLEgPgPuP7TTkItMFEzY/ WgX4WiairPNKFdH0Z/Cbmn8nWL5dnsJHRuN9X6uZXhs7aGDFideqBkoHCwFADAsG SgXL8X3yivAQUYyuMSTUuqcHSc8OF3oe -----END CERTIFICATE-----Generated at Mon Oct 20 16:04:58 2025 by rpki-client