$ rpki-client -vvf rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft File: ldG-85ALQWWEFku3RjF3EwIpFog.mft (raw, json) Hash identifier: IQAWgDG3twBbn8Blt0j1unkQZGpSBuyW3p8IXVo44ac= Subject key identifier: 3C:C1:92:88:73:16:06:F1:ED:E4:68:86:42:3B:05:0D:2C:C1:B3:2F Authority key identifier: 95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88 Certificate issuer: /CN=A91577DD/serialNumber=95D1BEF3900B416584164BB74631771302291688 Certificate serial: 34CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft Manifest number: 34C2 Signing time: Fri 22 Aug 2025 14:52:08 +0000 Manifest this update: Fri 22 Aug 2025 14:52:07 +0000 Manifest next update: Fri 29 Aug 2025 14:52:07 +0000 Files and hashes: 1: ldG-85ALQWWEFku3RjF3EwIpFog.crl (hash: j6/GWoxavtn34cZ4mrLTjMF+3YFVHTvHyWLQcBABViA=) 2: C2F7AE40C03111EA9777314AC4F9AE02.roa (hash: 5UVYc1gM3pcN5MyLC+3d2F4QJ6pH7wnclugT6lLmPzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13518 (0x34ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91577DD, serialNumber=95D1BEF3900B416584164BB74631771302291688 Validity Not Before: Aug 22 14:52:07 2025 GMT Not After : Aug 29 14:52:07 2025 GMT Subject: CN=68a88417-2c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f0:c8:02:34:29:01:85:96:9d:c2:15:7b:0e: 09:89:56:fc:e4:1c:ad:fc:96:98:62:b8:e7:3f:4d: 73:3f:98:ef:14:01:39:18:35:b0:2f:f6:c9:d1:d7: 57:00:95:12:74:4f:9d:f3:88:50:35:1e:25:8e:7c: a7:08:d2:57:80:21:84:2b:8d:31:7f:43:32:f7:ed: f6:01:43:60:92:7e:b9:88:cf:ab:73:0b:79:aa:59: 9f:19:8e:2c:5d:ed:14:92:d3:cb:73:77:95:e6:84: c0:5a:d4:6a:12:01:9a:80:02:1a:36:06:da:b2:38: 17:2c:11:23:70:83:0e:39:f1:cc:01:fc:74:c6:c1: 81:89:c1:ba:5b:38:49:67:e1:99:94:d5:29:5b:98: e7:21:12:18:32:e9:cc:6b:fa:27:7b:fc:5e:17:78: 4c:0a:c4:ef:23:73:45:67:8d:02:7c:87:8c:3f:a7: c0:d0:0e:fa:e0:6a:1c:0d:24:7b:62:da:80:92:26: d3:5c:ee:80:1b:fc:5d:03:3c:8a:19:6d:4e:ed:5b: 21:02:d9:64:93:e2:73:59:2e:ea:90:25:32:57:24: cc:a9:64:85:ee:c6:4f:51:6b:cf:03:0b:3d:20:f5: 95:87:f1:8d:60:1b:87:5b:85:12:66:d9:41:11:a0: 79:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C1:92:88:73:16:06:F1:ED:E4:68:86:42:3B:05:0D:2C:C1:B3:2F X509v3 Authority Key Identifier: keyid:95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:47:58:31:97:60:d0:9a:40:14:22:a9:2b:44:92:64:16:d5: 8c:08:db:cb:91:dd:3d:60:a1:99:7d:5d:e4:6b:f1:93:bc:c2: 94:56:ce:f4:7b:17:62:e0:27:3a:c4:dd:a9:ea:01:d8:30:b0: 74:af:8a:a3:49:74:29:06:f8:34:7b:cb:ba:f4:b3:3f:3d:ea: 60:0c:a8:2b:83:77:4c:8a:8e:98:c4:b3:7a:9b:18:f1:91:42: 02:c2:fc:99:1a:71:52:e9:6a:52:16:4f:b2:af:11:87:f9:b4: 5f:74:73:55:89:b6:1c:81:32:a0:87:21:4a:2f:4e:a5:2c:fc: d6:e3:b8:e6:7a:20:86:98:64:bf:b7:58:ac:ac:e1:de:d2:c7: 09:78:75:10:8b:24:8b:1b:6e:9b:1e:64:c4:e8:a6:37:2f:49: f6:1f:2c:74:23:e4:0e:6e:7d:b5:a5:60:88:de:8c:e1:21:28: d0:af:b4:f1:c8:02:b7:66:00:9e:95:9b:2e:83:5a:34:54:76: d3:40:6c:80:ca:c0:47:0f:f8:6d:58:d3:87:f6:5d:3c:5c:89: 8b:78:09:d0:61:4b:11:72:ae:f3:c3:92:2d:1c:81:bd:9a:01: 46:67:37:af:bb:84:fa:0b:05:4b:b3:7b:8f:ab:e2:bf:c8:32: e6:4c:74:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3REQxMTAvBgNVBAUTKDk1RDFCRUYzOTAwQjQxNjU4NDE2NEJCNzQ2MzE3NzEz MDIyOTE2ODgwHhcNMjUwODIyMTQ1MjA3WhcNMjUwODI5MTQ1MjA3WjAYMRYwFAYD VQQDEw02OGE4ODQxNy0yYzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfDIAjQpAYWWncIVew4JiVb85Byt/JaYYrjnP01zP5jvFAE5GDWwL/bJ0ddX AJUSdE+d84hQNR4ljnynCNJXgCGEK40xf0My9+32AUNgkn65iM+rcwt5qlmfGY4s Xe0UktPLc3eV5oTAWtRqEgGagAIaNgbasjgXLBEjcIMOOfHMAfx0xsGBicG6WzhJ Z+GZlNUpW5jnIRIYMunMa/one/xeF3hMCsTvI3NFZ40CfIeMP6fA0A764GocDSR7 YtqAkibTXO6AG/xdAzyKGW1O7VshAtlkk+JzWS7qkCUyVyTMqWSF7sZPUWvPAws9 IPWVh/GNYBuHW4USZtlBEaB5vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzBkohz Fgbx7eRohkI7BQ0swbMvMB8GA1UdIwQYMBaAFJXRvvOQC0FlhBZLt0YxdxMCKRaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdERC9EMUM1QjAyQTFE OTYxMUUyQTFDQUI0N0YwOEIwMkNEMi9sZEctODVBTFFXV0VGa3UzUmpGM0V3SXBG b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkRy04NUFMUVdXRUZrdTNSakYzRXdJcEZvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzdERC9EMUM1QjAyQTFEOTYxMUUyQTFDQUI0N0YwOEIwMkNEMi9sZEctODVBTFFX V0VGa3UzUmpGM0V3SXBGb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFR1gxl2DQmkAUIqkrRJJkFtWMCNvLkd09YKGZfV3ka/GTvMKUVs70 exdi4Cc6xN2p6gHYMLB0r4qjSXQpBvg0e8u69LM/PepgDKgrg3dMio6YxLN6mxjx kUICwvyZGnFS6WpSFk+yrxGH+bRfdHNVibYcgTKghyFKL06lLPzW47jmeiCGmGS/ t1isrOHe0scJeHUQiySLG26bHmTE6KY3L0n2Hyx0I+QObn21pWCI3ozhISjQr7Tx yAK3ZgCelZsug1o0VHbTQGyAysBHD/htWNOH9l08XImLeAnQYUsRcq7zw5ItHIG9 mgFGZzevu4T6CwVLs3uPq+K/yDLmTHSD -----END CERTIFICATE-----Generated at Sat Aug 23 13:39:02 2025 by rpki-client