$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft File: ldziG17K3rBp3IG5JAXUdN5BwgY.mft (raw, json) Hash identifier: fB/2sRR3wuM5ZmWfXx/RnAD1nTBgzr3p/cvU59jTaQQ= Subject key identifier: A5:DA:AC:15:64:D9:51:D8:77:0C:89:BC:9F:AD:FA:93:E6:7B:41:CF Authority key identifier: 95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 Certificate issuer: /CN=A91CD174/serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Certificate serial: 0C41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft Manifest number: 0C36 Signing time: Fri 04 Jul 2025 18:54:05 +0000 Manifest this update: Fri 04 Jul 2025 18:54:04 +0000 Manifest next update: Fri 11 Jul 2025 18:54:04 +0000 Files and hashes: 1: ldziG17K3rBp3IG5JAXUdN5BwgY.crl (hash: kjh8UhcpKF/lbu06PyJFaKBDXP/VwYBbz9ocmncUmfI=) 2: 54AD60AE0C2E11EABBBFA158C4F9AE02.roa (hash: /1zN6Gwwi0zP2Xs45slEdMpw3TT72EUNYyQ6n/qRBPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3137 (0xc41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD174, serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Validity Not Before: Jul 4 18:54:04 2025 GMT Not After : Jul 11 18:54:04 2025 GMT Subject: CN=6868234c-a16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8a:25:3a:ba:96:37:01:a3:65:ae:18:62:75: af:26:11:eb:cc:6f:04:84:b8:ee:d3:0b:91:b5:de: 09:e5:6d:3a:ec:ca:73:71:6d:e8:a7:ad:55:bc:0d: 1f:66:4e:c2:6d:82:8b:dd:5e:30:d0:9d:d5:9d:a5: 50:6f:ef:44:a2:2d:23:e8:93:e7:52:f9:2c:35:c1: 89:ea:af:ca:e1:09:f4:1b:46:04:18:c5:b3:1f:de: 40:d6:b6:b2:3e:a2:1e:eb:b6:f1:e6:e1:ad:5c:76: 27:de:ae:6b:11:dc:9d:84:96:0f:b5:56:7b:81:42: 2e:35:a6:41:82:b0:09:06:60:de:d7:b6:aa:00:74: 15:22:d7:ae:e9:c3:67:f8:60:fe:29:ec:78:52:66: 4d:47:bc:39:fd:37:1d:41:f8:bd:c4:8c:51:3c:f3: a2:78:73:c8:06:77:9a:5f:92:d1:67:6f:6f:1c:e8: 69:00:01:ac:0d:0e:0c:15:03:cf:04:12:34:2a:ed: c7:7f:66:64:e6:d3:c6:25:86:8d:c7:52:8c:63:51: 14:f7:2d:38:90:69:5d:6b:57:9e:f4:d6:64:5c:ef: a5:0f:9e:38:b0:cc:51:87:90:5a:40:de:b6:ad:b9: 47:22:65:54:d7:4f:7b:d1:57:6a:f6:0b:03:87:5b: 59:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DA:AC:15:64:D9:51:D8:77:0C:89:BC:9F:AD:FA:93:E6:7B:41:CF X509v3 Authority Key Identifier: keyid:95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:39:ad:76:74:f0:ff:68:70:e1:ab:ce:ee:d2:9f:3d:39:a5: c1:5c:8b:5e:99:51:40:8b:3f:32:c9:02:d4:b1:4b:f2:26:01: 7d:3d:d4:fe:fd:01:af:16:41:de:80:72:85:5b:e4:f5:76:5c: a1:97:56:e8:02:e6:5f:29:19:42:c1:fe:48:76:fa:1b:f0:4e: a3:a8:12:b6:6d:8c:69:5a:c6:2f:98:d8:0a:e6:a2:35:05:96: bb:b2:80:4f:30:b7:68:9a:49:94:bf:89:41:eb:44:19:c5:23: 30:de:5b:f1:de:05:74:9c:b3:09:02:27:7c:ba:74:87:c8:bf: db:91:e0:15:68:cb:d0:71:2f:a2:61:c8:47:17:2d:76:e1:76: 00:c2:9e:95:f6:ac:36:a4:20:a8:22:68:51:2f:6a:f5:df:96: a6:26:b4:b6:e6:d9:48:80:1c:e2:cd:02:cd:5e:15:bd:37:0e: aa:94:bc:de:af:45:31:ac:96:1b:0d:8e:be:ec:07:e3:b1:52: c7:75:43:b6:d2:b6:2c:9a:a5:ee:7c:5d:0c:40:95:32:97:fc: 68:16:6f:3b:dd:df:b7:1a:55:ce:47:c1:0c:da:18:b9:18:cf: 1e:1d:98:b7:6d:d4:ef:57:7c:40:6b:8f:f0:ac:52:7d:52:89: f1:68:37:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxNzQxMTAvBgNVBAUTKDk1RENFMjFCNUVDQURFQjA2OURDODFCOTI0MDVENDc0 REU0MUMyMDYwHhcNMjUwNzA0MTg1NDA0WhcNMjUwNzExMTg1NDA0WjAYMRYwFAYD VQQDEw02ODY4MjM0Yy1hMTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmIolOrqWNwGjZa4YYnWvJhHrzG8EhLju0wuRtd4J5W067MpzcW3op61VvA0f Zk7CbYKL3V4w0J3VnaVQb+9Eoi0j6JPnUvksNcGJ6q/K4Qn0G0YEGMWzH95A1ray PqIe67bx5uGtXHYn3q5rEdydhJYPtVZ7gUIuNaZBgrAJBmDe17aqAHQVIteu6cNn +GD+Kex4UmZNR7w5/TcdQfi9xIxRPPOieHPIBneaX5LRZ29vHOhpAAGsDQ4MFQPP BBI0Ku3Hf2Zk5tPGJYaNx1KMY1EU9y04kGlda1ee9NZkXO+lD544sMxRh5BaQN62 rblHImVU10970Vdq9gsDh1tZoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXarBVk 2VHYdwyJvJ+t+pPme0HPMB8GA1UdIwQYMBaAFJXc4hteyt6wadyBuSQF1HTeQcIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDE3NC81MUMzRTU0ODBC NEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNyQnAzSUc1SkFYVWRONUJ3 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkemlHMTdLM3JCcDNJRzVKQVhVZE41QndnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDE3NC81MUMzRTU0ODBCNEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNy QnAzSUc1SkFYVWRONUJ3Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+Oa12dPD/aHDhq87u0p89OaXBXItemVFAiz8yyQLUsUvyJgF9PdT+ /QGvFkHegHKFW+T1dlyhl1boAuZfKRlCwf5Idvob8E6jqBK2bYxpWsYvmNgK5qI1 BZa7soBPMLdomkmUv4lB60QZxSMw3lvx3gV0nLMJAid8unSHyL/bkeAVaMvQcS+i YchHFy124XYAwp6V9qw2pCCoImhRL2r135amJrS25tlIgBzizQLNXhW9Nw6qlLze r0UxrJYbDY6+7AfjsVLHdUO20rYsmqXufF0MQJUyl/xoFm873d+3GlXOR8EM2hi5 GM8eHZi3bdTvV3xAa4/wrFJ9UonxaDd0 -----END CERTIFICATE-----Generated at Sat Jul 5 08:16:21 2025 by rpki-client