$ rpki-client -vvf rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft File: LDTzNZTMO-PAfo54N2v8QzJjFUg.mft (raw, json) Hash identifier: PTxRZTXg5kATVVu13HbutKUD1uexe8fnjDzp62Z12hw= Subject key identifier: 4C:C4:57:58:26:2B:8F:BD:01:CD:83:2A:34:CC:85:13:E3:13:3B:27 Authority key identifier: 2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48 Certificate issuer: /CN=A914ADD8/serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548 Certificate serial: 34B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft Manifest number: 34AF Signing time: Fri 22 Aug 2025 14:29:00 +0000 Manifest this update: Fri 22 Aug 2025 14:28:59 +0000 Manifest next update: Fri 29 Aug 2025 14:28:59 +0000 Files and hashes: 1: LDTzNZTMO-PAfo54N2v8QzJjFUg.crl (hash: EFQFiG1WITKIvRCI328qqujjgl8h1SixVuO/72/IU0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13488 (0x34b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ADD8, serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548 Validity Not Before: Aug 22 14:28:59 2025 GMT Not After : Aug 29 14:28:59 2025 GMT Subject: CN=68a87eac-550a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:26:0b:2e:9a:92:98:80:84:a2:c4:b0:bf:b5: 13:23:9b:5b:0b:5e:c0:f3:20:4f:45:5d:92:2f:e7: 17:32:c3:7e:00:b3:b1:e8:32:76:8a:2c:d4:2b:91: 49:8a:08:70:12:7b:85:c8:66:fa:5f:f0:c8:ce:4b: 83:10:6f:2b:73:53:ec:32:f4:2f:ab:ed:29:19:32: 5b:46:cb:b7:91:3b:25:7e:fa:9d:8f:cb:44:c4:a9: bd:eb:36:ca:3e:76:9a:90:23:9d:34:79:f7:f1:3f: b7:08:5e:90:2f:88:df:d3:14:41:60:11:b3:1a:14: c5:c3:9a:a4:1a:ae:35:3a:05:e6:9b:13:f6:e2:02: 4e:d9:a4:49:26:3e:50:13:e1:a0:83:09:4e:c3:2e: 88:e1:6b:7f:90:5a:a7:67:16:1e:05:22:5b:b5:ad: 37:90:d6:0a:23:de:5d:35:b0:8c:0d:b9:0a:87:b1: 9e:8f:99:27:f3:ec:9c:70:0e:ec:5b:2b:53:d9:c0: d4:52:e3:c8:4f:da:35:86:10:bf:c7:58:a9:4e:a1: 44:1d:2b:b7:76:67:c9:9b:e0:39:a8:c9:89:0e:39: aa:5f:fe:51:51:ed:a2:12:c1:67:57:00:3c:a5:e9: 18:52:cf:f7:5b:1d:ab:0d:2f:9a:11:77:52:d8:f9: ff:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C4:57:58:26:2B:8F:BD:01:CD:83:2A:34:CC:85:13:E3:13:3B:27 X509v3 Authority Key Identifier: keyid:2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:90:97:26:65:b5:21:5f:e8:bf:a3:8b:be:5f:63:54:56:3c: 10:c5:32:63:c7:f5:da:28:d3:fb:c3:f1:8b:ee:ca:f8:fa:a1: 3d:37:da:49:87:1e:86:98:64:5c:1f:22:68:08:b1:6a:5b:90: b7:12:9d:6a:b2:4c:e3:38:0f:95:27:e4:53:c5:6f:cf:b7:ce: f2:66:da:f8:9e:9f:d8:74:d4:01:49:bc:c9:fb:11:2a:4e:01: 81:1c:a4:20:14:b7:dc:a5:a3:6b:12:ec:0d:3c:d0:84:7c:08: 84:b9:41:c3:2b:52:30:83:55:1c:47:4d:1b:9f:ab:3a:58:96: ee:f8:50:69:f5:de:f4:dc:38:3b:b6:53:7f:c1:f6:8b:60:2b: 35:2b:d9:5e:64:ad:1e:6f:eb:ab:bb:4b:13:6b:ce:3d:d7:8e: c6:0a:d6:60:83:e3:1d:d1:cb:67:49:77:ea:4b:28:6b:3f:1a: 13:ce:a9:22:1d:4f:2c:0a:0e:f2:dc:1a:95:d0:77:ae:6a:64: fc:53:d8:51:9b:f9:27:cb:d9:d8:16:2b:de:7b:74:13:64:11: ed:10:61:32:50:58:9a:f5:89:f5:15:4e:67:06:f5:17:7a:4a: f1:ee:dd:0c:c3:af:0a:0b:60:e8:89:24:9e:1c:cd:70:b2:f2: 1b:1b:b9:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEFERDgxMTAvBgNVBAUTKDJDMzRGMzM1OTRDQzNCRTNDMDdFOEU3ODM3NkJGQzQz MzI2MzE1NDgwHhcNMjUwODIyMTQyODU5WhcNMjUwODI5MTQyODU5WjAYMRYwFAYD VQQDEw02OGE4N2VhYy01NTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyYLLpqSmICEosSwv7UTI5tbC17A8yBPRV2SL+cXMsN+ALOx6DJ2iizUK5FJ ighwEnuFyGb6X/DIzkuDEG8rc1PsMvQvq+0pGTJbRsu3kTslfvqdj8tExKm96zbK PnaakCOdNHn38T+3CF6QL4jf0xRBYBGzGhTFw5qkGq41OgXmmxP24gJO2aRJJj5Q E+GggwlOwy6I4Wt/kFqnZxYeBSJbta03kNYKI95dNbCMDbkKh7Gej5kn8+yccA7s WytT2cDUUuPIT9o1hhC/x1ipTqFEHSu3dmfJm+A5qMmJDjmqX/5RUe2iEsFnVwA8 pekYUs/3Wx2rDS+aEXdS2Pn/LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEzEV1gm K4+9Ac2DKjTMhRPjEzsnMB8GA1UdIwQYMBaAFCw08zWUzDvjwH6OeDdr/EMyYxVI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUREOC9BNEQ4MTA0RTFE ODcxMUUyODM0Q0I5REYwOEIwMkNEMi9MRFR6TlpUTU8tUEFmbzU0TjJ2OFF6SmpG VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEVHpOWlRNTy1QQWZvNTROMnY4UXpKakZVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QUREOC9BNEQ4MTA0RTFEODcxMUUyODM0Q0I5REYwOEIwMkNEMi9MRFR6TlpUTU8t UEFmbzU0TjJ2OFF6SmpGVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHkJcmZbUhX+i/o4u+X2NUVjwQxTJjx/XaKNP7w/GL7sr4+qE9N9pJ hx6GmGRcHyJoCLFqW5C3Ep1qskzjOA+VJ+RTxW/Pt87yZtr4np/YdNQBSbzJ+xEq TgGBHKQgFLfcpaNrEuwNPNCEfAiEuUHDK1Iwg1UcR00bn6s6WJbu+FBp9d703Dg7 tlN/wfaLYCs1K9leZK0eb+uru0sTa849147GCtZgg+Md0ctnSXfqSyhrPxoTzqki HU8sCg7y3BqV0HeuamT8U9hRm/kny9nYFivee3QTZBHtEGEyUFia9Yn1FU5nBvUX ekrx7t0Mw68KC2DoiSSeHM1wsvIbG7lb -----END CERTIFICATE-----Generated at Sat Aug 23 20:22:52 2025 by rpki-client