$ rpki-client -vvf rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft File: ldG-85ALQWWEFku3RjF3EwIpFog.mft (raw, json) Hash identifier: ebPSqWoG15awjozZH31he1JzUmjkbHPuybfTzioFUhA= Subject key identifier: 89:2B:BE:61:F7:03:8C:EB:68:89:6F:42:58:61:4F:BB:EB:93:95:38 Authority key identifier: 95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88 Certificate issuer: /CN=A91577DD/serialNumber=95D1BEF3900B416584164BB74631771302291688 Certificate serial: 349A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft Manifest number: 348E Signing time: Mon 12 May 2025 14:49:24 +0000 Manifest this update: Mon 12 May 2025 14:49:23 +0000 Manifest next update: Mon 19 May 2025 14:49:23 +0000 Files and hashes: 1: ldG-85ALQWWEFku3RjF3EwIpFog.crl (hash: uaF3AG/6w5AwXcCBMrdxq3Y0nzwHSZjQtCwB/pLmBes=) 2: C2F7AE40C03111EA9777314AC4F9AE02.roa (hash: 5UVYc1gM3pcN5MyLC+3d2F4QJ6pH7wnclugT6lLmPzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13466 (0x349a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91577DD, serialNumber=95D1BEF3900B416584164BB74631771302291688 Validity Not Before: May 12 14:49:23 2025 GMT Not After : May 19 14:49:23 2025 GMT Subject: CN=68220a74-2de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:98:4b:be:58:75:6f:42:b2:27:26:8e:18:98: b7:14:9a:66:81:b7:1b:d5:50:64:01:c3:0c:ff:67: 4f:5e:1d:b5:aa:a0:1d:cc:65:35:39:22:9c:c2:99: 32:b5:76:62:24:41:16:12:ec:ee:e7:3f:c2:46:42: 05:88:48:c5:0e:2a:32:e1:b7:35:7d:fc:e1:ea:72: 22:bf:81:4c:fe:0d:10:70:d8:53:bf:19:cb:7a:cb: 2e:2f:78:07:43:88:4a:98:4b:e4:cc:75:13:3b:69: d6:d1:1c:30:e2:97:21:dc:44:94:8e:55:55:28:1c: df:09:b2:12:93:7c:70:94:29:bd:5e:89:07:1c:7b: b0:b9:56:3c:8a:d2:8d:c7:60:77:d7:ea:94:0b:64: 40:30:4f:d2:54:7c:a3:fa:78:67:ee:be:1d:dc:a4: e6:4a:11:b5:8f:8b:5f:cf:b6:0e:1b:11:72:1d:38: 02:91:4b:75:bd:5f:f7:cc:01:45:33:6f:2b:f4:47: d5:5d:f0:31:4b:e5:f2:17:1f:0a:4f:b9:03:04:1d: 35:c4:3f:a4:7f:4e:dd:1c:c3:9b:9a:f5:8f:46:bd: fc:6e:c5:42:15:e8:85:cb:96:ce:9d:ed:59:06:65: df:fd:64:e9:90:cc:40:da:42:21:0d:cc:e2:18:96: 0f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2B:BE:61:F7:03:8C:EB:68:89:6F:42:58:61:4F:BB:EB:93:95:38 X509v3 Authority Key Identifier: keyid:95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:01:1c:08:00:4c:cd:46:99:05:fe:6b:96:8e:9b:be:ba:a0: b4:fc:9d:bb:64:8c:b7:50:41:d6:18:8e:ad:9a:04:e7:fa:a7: f5:c2:9e:07:df:dc:62:16:21:ea:18:b4:b8:05:85:0f:7f:f8: 1c:b2:e6:87:17:74:46:8c:47:13:2f:00:2b:2d:c8:7e:f1:c5: a8:e3:9d:57:f6:58:66:b5:ea:e7:5d:f4:db:a3:4d:a9:06:72: ac:ff:45:c5:3a:2f:6e:7d:5c:6a:86:fc:fc:80:ba:65:d9:dd: ca:1a:3e:e4:c3:de:6e:d9:c5:ed:1f:84:ae:1b:bf:b0:b6:33: 07:c0:20:c2:3a:54:43:d7:d1:a1:a4:95:8c:3d:83:e5:61:85: 18:85:cd:b5:0c:e4:df:5c:99:b4:02:41:46:82:7f:b5:23:82: 27:3d:b9:a9:31:db:ce:73:25:e1:1a:fd:2e:8e:fa:78:15:d6: ab:3b:ae:c4:94:bf:cf:39:b3:c0:73:13:df:3f:de:af:7e:3a: 87:bc:41:db:85:8a:ae:b7:e1:e2:e9:00:21:48:09:ac:33:3e: b5:02:37:ba:ca:29:7c:a9:27:1b:96:59:24:a7:8c:c7:a0:d9: 6d:7f:b1:a7:fd:0f:c6:18:a2:45:3d:76:06:11:2c:cf:54:58: c8:7e:66:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3REQxMTAvBgNVBAUTKDk1RDFCRUYzOTAwQjQxNjU4NDE2NEJCNzQ2MzE3NzEz MDIyOTE2ODgwHhcNMjUwNTEyMTQ0OTIzWhcNMjUwNTE5MTQ0OTIzWjAYMRYwFAYD VQQDEw02ODIyMGE3NC0yZGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5hLvlh1b0KyJyaOGJi3FJpmgbcb1VBkAcMM/2dPXh21qqAdzGU1OSKcwpky tXZiJEEWEuzu5z/CRkIFiEjFDioy4bc1ffzh6nIiv4FM/g0QcNhTvxnLessuL3gH Q4hKmEvkzHUTO2nW0Rww4pch3ESUjlVVKBzfCbISk3xwlCm9XokHHHuwuVY8itKN x2B31+qUC2RAME/SVHyj+nhn7r4d3KTmShG1j4tfz7YOGxFyHTgCkUt1vV/3zAFF M28r9EfVXfAxS+XyFx8KT7kDBB01xD+kf07dHMObmvWPRr38bsVCFeiFy5bOne1Z BmXf/WTpkMxA2kIhDcziGJYP9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkrvmH3 A4zraIlvQlhhT7vrk5U4MB8GA1UdIwQYMBaAFJXRvvOQC0FlhBZLt0YxdxMCKRaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdERC9EMUM1QjAyQTFE OTYxMUUyQTFDQUI0N0YwOEIwMkNEMi9sZEctODVBTFFXV0VGa3UzUmpGM0V3SXBG b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkRy04NUFMUVdXRUZrdTNSakYzRXdJcEZvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzdERC9EMUM1QjAyQTFEOTYxMUUyQTFDQUI0N0YwOEIwMkNEMi9sZEctODVBTFFX V0VGa3UzUmpGM0V3SXBGb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALARwIAEzNRpkF/muWjpu+uqC0/J27ZIy3UEHWGI6tmgTn+qf1wp4H 39xiFiHqGLS4BYUPf/gcsuaHF3RGjEcTLwArLch+8cWo451X9lhmternXfTbo02p BnKs/0XFOi9ufVxqhvz8gLpl2d3KGj7kw95u2cXtH4SuG7+wtjMHwCDCOlRD19Gh pJWMPYPlYYUYhc21DOTfXJm0AkFGgn+1I4InPbmpMdvOcyXhGv0ujvp4FdarO67E lL/PObPAcxPfP96vfjqHvEHbhYqut+Hi6QAhSAmsMz61Aje6yil8qScbllkkp4zH oNltf7Gn/Q/GGKJFPXYGESzPVFjIfmZV -----END CERTIFICATE-----Generated at Tue May 13 03:05:14 2025 by rpki-client