$ rpki-client -vvf rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft File: LDTzNZTMO-PAfo54N2v8QzJjFUg.mft (raw, json) Hash identifier: RZP3Q8M01swTdGbfDWa+BjKPmRsnxtuV24hhje4Ewlw= Subject key identifier: D0:25:C8:2A:94:F7:17:FB:27:EA:12:A1:B6:69:BD:CC:A5:FC:2A:0A Authority key identifier: 2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48 Certificate issuer: /CN=A914ADD8/serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548 Certificate serial: 3496 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft Manifest number: 3495 Signing time: Wed 02 Jul 2025 14:29:07 +0000 Manifest this update: Wed 02 Jul 2025 14:29:07 +0000 Manifest next update: Wed 09 Jul 2025 14:29:07 +0000 Files and hashes: 1: LDTzNZTMO-PAfo54N2v8QzJjFUg.crl (hash: umCZpsufUB6ydoLKvl3VA5MiJCZETBxrSot5G/RNBZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13462 (0x3496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ADD8, serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548 Validity Not Before: Jul 2 14:29:07 2025 GMT Not After : Jul 9 14:29:07 2025 GMT Subject: CN=68654233-e1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ad:a9:69:d9:db:a0:68:5e:3a:a4:ff:8e:65: ac:5b:4c:21:94:c2:28:99:d4:b3:df:4d:53:c0:b6: 1f:94:12:10:87:61:9b:5d:47:8a:37:38:85:c8:94: c7:08:9f:48:97:61:66:3e:76:e8:65:7d:0a:ad:de: fd:df:ad:c1:0f:57:d4:91:29:fd:55:95:91:81:7f: 68:57:ac:5f:a6:08:78:93:2c:ab:d9:2b:b4:23:6d: b0:3d:d0:42:a4:3e:98:3e:61:60:93:f8:a2:ae:1b: 53:28:f7:02:0e:30:7f:39:b6:96:ee:93:65:6e:d7: 82:ee:80:aa:68:ec:c1:88:1f:39:61:0e:a8:b1:ea: f4:c3:af:93:c1:95:56:f9:3a:61:21:93:ce:4a:bc: 95:47:37:f5:79:6c:3a:dd:f3:0b:81:7f:90:f4:ae: a7:6c:04:da:08:1f:0c:5b:60:fa:98:70:4c:7d:2f: 6f:6f:70:77:01:7d:6b:35:91:09:13:de:ab:a3:aa: 30:10:25:26:ee:3f:12:1b:5d:ef:16:b3:3c:89:ff: 5b:f3:61:8b:8c:a9:89:06:8d:7d:a2:1e:c6:ed:ff: c0:cb:f1:77:d1:1c:b2:1b:d0:86:3b:35:47:7c:d9: ff:c0:b3:13:38:c8:42:69:d1:0e:96:65:bd:94:c7: ec:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:25:C8:2A:94:F7:17:FB:27:EA:12:A1:B6:69:BD:CC:A5:FC:2A:0A X509v3 Authority Key Identifier: keyid:2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:87:4f:ac:8a:a9:82:b5:67:2a:d2:85:62:f9:21:ea:55:32: bd:0b:fb:12:1f:48:a9:b5:fa:85:da:f2:fa:3b:6c:48:8a:c5: ef:e0:a5:26:7d:a3:36:88:df:a3:08:44:d4:67:8a:0c:1c:83: 58:06:ab:e6:ca:19:e2:37:eb:30:fa:2e:26:cf:34:9b:38:f5: f7:64:47:eb:d8:25:c3:c0:e2:29:89:76:ef:02:38:b8:b4:64: 45:5b:66:d1:fb:1e:1d:cb:e0:77:94:81:58:8f:b2:c0:cc:be: 26:5c:45:4b:d0:cf:43:a0:e7:33:ca:2a:2e:6f:c2:b8:80:13: 79:b3:25:ef:bf:80:89:31:50:2f:0c:76:f2:05:33:8d:a8:18: 3d:68:ad:4a:9b:f5:96:5b:e6:e1:05:94:0b:8e:cd:84:c2:38: 16:28:63:15:dc:9c:13:a0:e8:65:ae:68:54:d4:8e:99:99:20: e4:1a:7d:9e:f9:68:33:2e:e1:91:6e:cb:3c:0a:56:fb:05:f2: b9:ae:8f:e4:34:c6:0a:d1:fe:3b:01:61:72:33:1a:13:38:b0: 0b:7e:4a:56:9e:49:46:8f:db:63:88:e6:b8:c2:4b:4a:c7:6d: e8:b0:13:f8:ed:bf:4c:36:b1:43:51:d1:3e:07:2d:f8:50:4d: 05:69:e5:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEFERDgxMTAvBgNVBAUTKDJDMzRGMzM1OTRDQzNCRTNDMDdFOEU3ODM3NkJGQzQz MzI2MzE1NDgwHhcNMjUwNzAyMTQyOTA3WhcNMjUwNzA5MTQyOTA3WjAYMRYwFAYD VQQDEw02ODY1NDIzMy1lMWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6K2padnboGheOqT/jmWsW0whlMIomdSz301TwLYflBIQh2GbXUeKNziFyJTH CJ9Il2FmPnboZX0Krd79363BD1fUkSn9VZWRgX9oV6xfpgh4kyyr2Su0I22wPdBC pD6YPmFgk/iirhtTKPcCDjB/ObaW7pNlbteC7oCqaOzBiB85YQ6oser0w6+TwZVW +TphIZPOSryVRzf1eWw63fMLgX+Q9K6nbATaCB8MW2D6mHBMfS9vb3B3AX1rNZEJ E96ro6owECUm7j8SG13vFrM8if9b82GLjKmJBo19oh7G7f/Ay/F30RyyG9CGOzVH fNn/wLMTOMhCadEOlmW9lMfsQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAlyCqU 9xf7J+oSobZpvcyl/CoKMB8GA1UdIwQYMBaAFCw08zWUzDvjwH6OeDdr/EMyYxVI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUREOC9BNEQ4MTA0RTFE ODcxMUUyODM0Q0I5REYwOEIwMkNEMi9MRFR6TlpUTU8tUEFmbzU0TjJ2OFF6SmpG VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEVHpOWlRNTy1QQWZvNTROMnY4UXpKakZVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QUREOC9BNEQ4MTA0RTFEODcxMUUyODM0Q0I5REYwOEIwMkNEMi9MRFR6TlpUTU8t UEFmbzU0TjJ2OFF6SmpGVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIh0+siqmCtWcq0oVi+SHqVTK9C/sSH0iptfqF2vL6O2xIisXv4KUm faM2iN+jCETUZ4oMHINYBqvmyhniN+sw+i4mzzSbOPX3ZEfr2CXDwOIpiXbvAji4 tGRFW2bR+x4dy+B3lIFYj7LAzL4mXEVL0M9DoOczyioub8K4gBN5syXvv4CJMVAv DHbyBTONqBg9aK1Km/WWW+bhBZQLjs2EwjgWKGMV3JwToOhlrmhU1I6ZmSDkGn2e +WgzLuGRbss8Clb7BfK5ro/kNMYK0f47AWFyMxoTOLALfkpWnklGj9tjiOa4wktK x23osBP47b9MNrFDUdE+By34UE0FaeVh -----END CERTIFICATE-----Generated at Thu Jul 3 09:11:08 2025 by rpki-client