$ rpki-client -vvf rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft File: ldG-85ALQWWEFku3RjF3EwIpFog.mft (raw, json) Hash identifier: 4LNOcXo9RhXdwcDQ7ZpCkLzX9xb/T0UkTfZeJCIPI7w= Subject key identifier: CD:82:BA:EC:52:62:A9:5F:4C:81:2F:D0:91:34:A0:44:E3:F2:4C:BF Authority key identifier: 95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88 Certificate issuer: /CN=A91577DD/serialNumber=95D1BEF3900B416584164BB74631771302291688 Certificate serial: 34B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft Manifest number: 34A6 Signing time: Sat 28 Jun 2025 14:48:37 +0000 Manifest this update: Sat 28 Jun 2025 14:48:37 +0000 Manifest next update: Sat 05 Jul 2025 14:48:37 +0000 Files and hashes: 1: ldG-85ALQWWEFku3RjF3EwIpFog.crl (hash: 66wJtS1EbuebeOsFkBBx1Z/OmHlz0X7Dd+tIaXkrGiY=) 2: C2F7AE40C03111EA9777314AC4F9AE02.roa (hash: 5UVYc1gM3pcN5MyLC+3d2F4QJ6pH7wnclugT6lLmPzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 14:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13490 (0x34b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91577DD, serialNumber=95D1BEF3900B416584164BB74631771302291688 Validity Not Before: Jun 28 14:48:37 2025 GMT Not After : Jul 5 14:48:37 2025 GMT Subject: CN=686000c5-1e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:93:93:b0:13:1d:aa:ca:78:3e:64:95:e7:41: 48:d1:bb:90:ba:e7:18:b5:b7:9a:20:9e:35:0d:d9: ef:37:a4:7b:28:e2:41:e6:a6:b0:be:33:9e:c5:ec: 62:b6:9f:00:36:48:3d:23:58:9b:c9:38:d3:33:94: 5b:a8:74:cd:19:4a:31:85:c0:f3:4a:57:28:9f:df: 7b:ed:28:03:2f:4d:f3:b8:4c:69:22:c9:6e:8e:5b: 1b:46:b8:d1:28:f3:8c:ba:d1:19:21:15:34:d3:d9: c2:a0:aa:6e:aa:8f:c4:34:8b:eb:fd:d7:8a:fa:b2: 85:4b:41:55:63:d0:d7:77:07:34:af:2a:c5:aa:a5: fd:59:27:6f:c8:00:de:7b:96:94:c1:93:4c:6b:e4: 93:1a:5f:51:9a:ee:17:d7:88:ac:b7:d7:c3:94:08: 61:ce:b8:04:a9:73:56:b3:6b:de:55:f2:e2:35:50: d0:49:56:46:a6:3b:d7:17:50:e7:19:d9:2e:ef:4e: fa:15:06:a8:00:b9:1f:fb:8e:62:0b:92:0a:e9:81: c3:60:42:b5:13:c0:c2:52:5c:55:5c:41:b7:8d:88: c7:5e:d9:37:80:19:2c:0b:2b:82:86:d8:3a:fd:6f: d2:a6:3d:a0:a4:c0:1f:cd:66:9d:d7:de:61:40:74: 90:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:82:BA:EC:52:62:A9:5F:4C:81:2F:D0:91:34:A0:44:E3:F2:4C:BF X509v3 Authority Key Identifier: keyid:95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:2b:1c:0d:28:f9:01:49:23:78:3d:39:24:ad:49:07:73:8e: b1:4f:2a:8b:11:31:a9:7e:5c:c4:b5:07:3c:86:53:ad:64:3d: 2e:8b:a9:34:13:b8:b0:4d:b6:5f:64:ef:bd:07:37:54:16:16: 1a:dd:22:25:20:d8:7b:c9:15:b6:be:2d:c3:0a:77:eb:b6:0a: c2:02:63:c9:b4:33:bc:91:c5:43:54:6e:a7:92:08:09:cc:ff: 9f:6f:12:bb:aa:2d:47:bb:d4:ce:52:4f:8b:c8:5f:53:fe:95: 9f:c3:71:96:32:e5:43:2d:b8:70:70:43:d4:77:15:01:a5:1d: 51:fd:ea:9c:9a:38:2b:ac:81:7c:88:06:7d:49:b0:c1:c6:7b: a4:dc:f0:14:5b:71:26:eb:9d:62:ca:6d:1d:67:de:6a:d1:1b: d4:b1:aa:f7:1b:8d:cf:36:b7:40:d8:1b:f9:7c:cb:de:fc:ba: f4:d9:12:bc:12:ef:66:62:f9:ff:26:8a:8d:4a:91:be:b7:03: c9:d5:db:cf:71:1d:6c:1a:c9:da:04:5b:9e:7d:16:79:4f:30: c6:b1:9a:a9:c0:d8:d6:bf:4b:b9:ad:bf:ee:ec:18:a7:bd:0d: 33:c1:3c:ea:17:ca:69:d2:1c:a2:76:17:a2:88:b9:e8:b9:5d: 9f:4f:8d:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3REQxMTAvBgNVBAUTKDk1RDFCRUYzOTAwQjQxNjU4NDE2NEJCNzQ2MzE3NzEz MDIyOTE2ODgwHhcNMjUwNjI4MTQ0ODM3WhcNMjUwNzA1MTQ0ODM3WjAYMRYwFAYD VQQDEw02ODYwMDBjNS0xZTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pOTsBMdqsp4PmSV50FI0buQuucYtbeaIJ41DdnvN6R7KOJB5qawvjOexexi tp8ANkg9I1ibyTjTM5RbqHTNGUoxhcDzSlcon9977SgDL03zuExpIslujlsbRrjR KPOMutEZIRU009nCoKpuqo/ENIvr/deK+rKFS0FVY9DXdwc0ryrFqqX9WSdvyADe e5aUwZNMa+STGl9Rmu4X14ist9fDlAhhzrgEqXNWs2veVfLiNVDQSVZGpjvXF1Dn Gdku7076FQaoALkf+45iC5IK6YHDYEK1E8DCUlxVXEG3jYjHXtk3gBksCyuChtg6 /W/Spj2gpMAfzWad195hQHSQZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2CuuxS YqlfTIEv0JE0oETj8ky/MB8GA1UdIwQYMBaAFJXRvvOQC0FlhBZLt0YxdxMCKRaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdERC9EMUM1QjAyQTFE OTYxMUUyQTFDQUI0N0YwOEIwMkNEMi9sZEctODVBTFFXV0VGa3UzUmpGM0V3SXBG b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkRy04NUFMUVdXRUZrdTNSakYzRXdJcEZvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzdERC9EMUM1QjAyQTFEOTYxMUUyQTFDQUI0N0YwOEIwMkNEMi9sZEctODVBTFFX V0VGa3UzUmpGM0V3SXBGb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlKxwNKPkBSSN4PTkkrUkHc46xTyqLETGpflzEtQc8hlOtZD0ui6k0 E7iwTbZfZO+9BzdUFhYa3SIlINh7yRW2vi3DCnfrtgrCAmPJtDO8kcVDVG6nkggJ zP+fbxK7qi1Hu9TOUk+LyF9T/pWfw3GWMuVDLbhwcEPUdxUBpR1R/eqcmjgrrIF8 iAZ9SbDBxnuk3PAUW3Em651iym0dZ95q0RvUsar3G43PNrdA2Bv5fMve/Lr02RK8 Eu9mYvn/JoqNSpG+twPJ1dvPcR1sGsnaBFuefRZ5TzDGsZqpwNjWv0u5rb/u7Bin vQ0zwTzqF8pp0hyidheiiLnouV2fT41O -----END CERTIFICATE-----Generated at Sun Jun 29 14:36:26 2025 by rpki-client