$ rpki-client -vvf rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft File: ldG-85ALQWWEFku3RjF3EwIpFog.mft (raw, json) Hash identifier: 7RNPX/kV+2Hse7a+04H24JX1JJwROFLUyYOmECwaoiA= Subject key identifier: AB:30:C3:4E:7E:4C:6E:54:06:4E:BB:F3:26:2B:AE:1B:61:5B:63:A0 Authority key identifier: 95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88 Certificate issuer: /CN=A91577DD/serialNumber=95D1BEF3900B416584164BB74631771302291688 Certificate serial: 34EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft Manifest number: 34DF Signing time: Sat 18 Oct 2025 14:56:41 +0000 Manifest this update: Sat 18 Oct 2025 14:56:40 +0000 Manifest next update: Sat 25 Oct 2025 14:56:40 +0000 Files and hashes: 1: ldG-85ALQWWEFku3RjF3EwIpFog.crl (hash: TGrWTs+UFywprXJSFM7K204i0joMCQHQpOkSN/ShsP8=) 2: C2F7AE40C03111EA9777314AC4F9AE02.roa (hash: 5UVYc1gM3pcN5MyLC+3d2F4QJ6pH7wnclugT6lLmPzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13547 (0x34eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91577DD, serialNumber=95D1BEF3900B416584164BB74631771302291688 Validity Not Before: Oct 18 14:56:40 2025 GMT Not After : Oct 25 14:56:40 2025 GMT Subject: CN=68f3aaa9-5a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:be:f8:aa:46:2f:3a:14:9e:24:8e:d2:cb:81: 71:28:19:a9:4f:ee:ac:97:e7:f0:f6:43:a7:1e:87: 13:fb:83:31:45:0a:7e:79:5d:ec:fe:e5:f1:a7:56: be:90:93:23:cd:93:9c:61:df:8c:42:6e:23:b1:e1: 2d:b5:21:05:b5:0e:c8:d0:ce:2b:c8:ae:81:62:35: 13:ba:cf:60:24:f4:6e:28:e8:ad:91:72:3e:ba:e3: 40:48:a0:49:c5:45:17:fe:c2:12:ed:d5:57:21:cc: bc:ee:23:7d:cd:16:03:8e:65:04:ee:73:90:bb:df: fc:ef:f0:19:88:a3:18:14:76:55:7b:ce:0f:19:31: 58:93:d4:bb:1d:29:52:75:22:99:28:43:f4:d5:3e: 28:5e:69:6f:39:1d:f6:34:bf:04:1c:27:50:69:70: 5c:fd:b2:d7:2b:5c:eb:78:9d:f7:c1:45:ad:b1:06: 10:25:c6:de:46:a4:b3:fa:e4:b2:5d:24:08:00:05: 13:86:99:b9:aa:b8:a8:ef:d7:3d:2d:97:46:87:ee: 20:ff:ab:c1:2c:e9:7e:45:98:61:5d:fa:fa:9c:be: 6b:06:d6:0f:67:cb:0b:cc:3a:96:d5:91:9f:30:62: 2e:4d:ab:d5:61:7e:01:fb:64:3c:57:38:f8:e1:13: 5b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:30:C3:4E:7E:4C:6E:54:06:4E:BB:F3:26:2B:AE:1B:61:5B:63:A0 X509v3 Authority Key Identifier: keyid:95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:ff:3f:d4:ed:f3:b8:b5:6f:88:01:11:1b:c1:58:82:3f:79: e6:37:61:fa:47:79:34:fa:44:42:ba:1f:e7:c0:eb:4c:9b:9f: b5:e9:fd:0b:33:cc:d7:1c:7d:94:37:50:c5:49:2a:af:f1:f4: 7d:1a:58:61:3b:26:02:14:0f:f0:d4:1f:ce:8d:1e:74:5f:69: 6e:6e:28:68:bc:e3:58:36:7b:b5:85:5e:c3:b6:cb:59:cd:93: 67:82:76:a6:c4:2d:37:51:87:44:87:66:0d:c7:86:ef:08:1c: e1:69:1d:fa:c3:8e:51:61:a4:b8:ca:a9:ef:8b:f1:0d:5a:d6: 11:6a:4a:b8:19:19:b5:a9:74:2e:e9:93:71:a5:4f:1b:36:03: c8:08:13:5d:e5:d1:4d:d5:12:3b:0c:31:a8:3f:18:51:d0:3a: b2:07:12:52:e6:72:8f:c3:19:7c:8e:a0:1b:68:9e:ef:64:cd: b4:b6:9f:29:2e:46:7c:77:78:35:97:02:3e:fa:17:81:a1:8b: 3c:5a:ca:99:53:ca:4c:1f:70:73:4b:8a:8e:23:e7:97:0f:d4: 46:55:0d:71:05:ff:10:3d:ee:11:e4:aa:7a:b8:45:ec:19:da: 94:c3:68:69:b1:39:f7:47:6f:63:6b:bd:e7:df:67:fb:28:0c: 80:89:50:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3REQxMTAvBgNVBAUTKDk1RDFCRUYzOTAwQjQxNjU4NDE2NEJCNzQ2MzE3NzEz MDIyOTE2ODgwHhcNMjUxMDE4MTQ1NjQwWhcNMjUxMDI1MTQ1NjQwWjAYMRYwFAYD VQQDEw02OGYzYWFhOS01YTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3r74qkYvOhSeJI7Sy4FxKBmpT+6sl+fw9kOnHocT+4MxRQp+eV3s/uXxp1a+ kJMjzZOcYd+MQm4jseEttSEFtQ7I0M4ryK6BYjUTus9gJPRuKOitkXI+uuNASKBJ xUUX/sIS7dVXIcy87iN9zRYDjmUE7nOQu9/87/AZiKMYFHZVe84PGTFYk9S7HSlS dSKZKEP01T4oXmlvOR32NL8EHCdQaXBc/bLXK1zreJ33wUWtsQYQJcbeRqSz+uSy XSQIAAUThpm5qrio79c9LZdGh+4g/6vBLOl+RZhhXfr6nL5rBtYPZ8sLzDqW1ZGf MGIuTavVYX4B+2Q8Vzj44RNbKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsww05+ TG5UBk678yYrrhthW2OgMB8GA1UdIwQYMBaAFJXRvvOQC0FlhBZLt0YxdxMCKRaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdERC9EMUM1QjAyQTFE OTYxMUUyQTFDQUI0N0YwOEIwMkNEMi9sZEctODVBTFFXV0VGa3UzUmpGM0V3SXBG b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkRy04NUFMUVdXRUZrdTNSakYzRXdJcEZvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzdERC9EMUM1QjAyQTFEOTYxMUUyQTFDQUI0N0YwOEIwMkNEMi9sZEctODVBTFFX V0VGa3UzUmpGM0V3SXBGb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl/z/U7fO4tW+IAREbwViCP3nmN2H6R3k0+kRCuh/nwOtMm5+16f0L M8zXHH2UN1DFSSqv8fR9GlhhOyYCFA/w1B/OjR50X2lubihovONYNnu1hV7DtstZ zZNngnamxC03UYdEh2YNx4bvCBzhaR36w45RYaS4yqnvi/ENWtYRakq4GRm1qXQu 6ZNxpU8bNgPICBNd5dFN1RI7DDGoPxhR0DqyBxJS5nKPwxl8jqAbaJ7vZM20tp8p LkZ8d3g1lwI++heBoYs8WsqZU8pMH3BzS4qOI+eXD9RGVQ1xBf8QPe4R5Kp6uEXs GdqUw2hpsTn3R29ja73n32f7KAyAiVCN -----END CERTIFICATE-----Generated at Mon Oct 20 12:04:21 2025 by rpki-client