$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft File: ldziG17K3rBp3IG5JAXUdN5BwgY.mft (raw, json) Hash identifier: /mpkOArnF+DoRqYFy/zHrlUyPKTk8ANvOY/pBggD0fM= Subject key identifier: D6:AA:1D:6F:71:0E:F4:4E:71:B0:65:8B:7A:F3:4F:99:82:C2:95:D9 Authority key identifier: 95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 Certificate issuer: /CN=A91CD174/serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Certificate serial: 0C5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft Manifest number: 0C4F Signing time: Fri 22 Aug 2025 18:39:39 +0000 Manifest this update: Fri 22 Aug 2025 18:39:38 +0000 Manifest next update: Fri 29 Aug 2025 18:39:38 +0000 Files and hashes: 1: ldziG17K3rBp3IG5JAXUdN5BwgY.crl (hash: 3wrDv7oHgEu9SLIEUSaFKJXCarn+O7+4LTMPlO65f1w=) 2: 54AD60AE0C2E11EABBBFA158C4F9AE02.roa (hash: /1zN6Gwwi0zP2Xs45slEdMpw3TT72EUNYyQ6n/qRBPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3162 (0xc5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD174, serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Validity Not Before: Aug 22 18:39:38 2025 GMT Not After : Aug 29 18:39:38 2025 GMT Subject: CN=68a8b96a-6eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:57:71:f5:20:95:72:6f:2b:d7:c9:5d:d6:ca: de:0a:f4:f5:53:6e:ca:6c:05:17:51:2a:a3:3d:86: 48:7c:24:39:06:fc:7b:ab:38:4e:78:94:ea:15:e0: aa:0f:c2:f6:2d:2a:b5:67:7d:c9:0c:95:1a:c0:48: a5:58:9a:ce:2a:e0:51:ac:b4:24:1d:08:86:30:2e: 1d:10:5c:02:e9:c7:40:cd:08:9d:0c:4a:f8:c4:19: 55:cb:ef:d4:a2:24:c8:7e:28:73:95:be:3e:a7:25: d2:0c:b8:b9:35:b3:39:23:0d:06:a0:38:4c:0c:56: fd:6c:8a:f4:db:f6:d0:0d:16:db:a0:e1:15:e1:38: b7:24:29:27:11:92:77:fb:d8:2b:a7:7e:c9:b4:a0: e0:58:6a:94:85:3e:5d:90:38:4f:c7:c0:c4:81:82: fe:64:a5:c8:c6:05:5d:d9:f2:03:16:97:0c:d8:f1: 34:bc:42:8e:99:a7:3b:79:65:27:96:d8:1c:67:85: 0e:c9:1a:58:67:6c:3f:f5:9a:fc:2c:32:f8:9f:02: f1:a6:65:c3:85:45:81:f6:db:04:71:b6:57:39:b1: ea:56:50:72:ae:31:ce:5f:e1:86:f5:fe:0c:74:28: c6:74:4b:72:bc:f7:ce:25:bc:a9:5d:f6:6a:cd:25: 00:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AA:1D:6F:71:0E:F4:4E:71:B0:65:8B:7A:F3:4F:99:82:C2:95:D9 X509v3 Authority Key Identifier: keyid:95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:c4:c1:91:ce:57:ae:24:d1:b8:fb:77:17:11:8f:ae:a5:2b: e0:5a:b7:3a:06:6d:16:3d:86:64:81:a2:bc:ad:a9:d0:bf:84: c9:9f:62:4a:91:76:4f:e7:60:be:bc:c6:43:e7:77:60:3b:2c: d3:eb:43:bc:7a:c6:a6:46:0f:73:dd:65:a9:41:a5:63:9e:bd: a7:81:fc:ba:0e:65:08:f0:8d:6a:3e:57:6e:a3:df:2e:81:41: 44:5c:9d:89:e7:5f:e6:a4:ad:9b:bd:28:13:e1:e7:e0:24:d8: 76:c4:0d:34:97:56:c2:e3:3e:15:14:26:a2:e8:73:7e:4f:a5: 38:6d:fe:f3:b8:dd:d3:20:e8:5c:e6:5d:97:0b:0a:08:b9:1f: c9:15:3d:25:d2:cf:2e:e7:34:3b:fd:38:64:04:bb:e2:9a:09: 5b:2b:ba:db:1e:30:0e:91:88:77:91:85:c6:b0:1b:bd:60:57: 4d:c9:24:2e:de:67:10:3d:02:f7:44:d1:7f:10:4a:b8:7a:c0: 5b:e2:80:2a:a1:a5:f8:af:1e:c8:99:29:b2:a5:d9:a7:0d:e8: f2:e4:7a:8f:fb:af:ed:1c:94:42:9a:a3:34:a3:06:29:ab:24: af:83:6d:f3:77:16:f9:66:ae:b9:ec:8b:c6:aa:33:44:66:48: 92:9f:3e:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxNzQxMTAvBgNVBAUTKDk1RENFMjFCNUVDQURFQjA2OURDODFCOTI0MDVENDc0 REU0MUMyMDYwHhcNMjUwODIyMTgzOTM4WhcNMjUwODI5MTgzOTM4WjAYMRYwFAYD VQQDEw02OGE4Yjk2YS02ZWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1dx9SCVcm8r18ld1sreCvT1U27KbAUXUSqjPYZIfCQ5Bvx7qzhOeJTqFeCq D8L2LSq1Z33JDJUawEilWJrOKuBRrLQkHQiGMC4dEFwC6cdAzQidDEr4xBlVy+/U oiTIfihzlb4+pyXSDLi5NbM5Iw0GoDhMDFb9bIr02/bQDRbboOEV4Ti3JCknEZJ3 +9grp37JtKDgWGqUhT5dkDhPx8DEgYL+ZKXIxgVd2fIDFpcM2PE0vEKOmac7eWUn ltgcZ4UOyRpYZ2w/9Zr8LDL4nwLxpmXDhUWB9tsEcbZXObHqVlByrjHOX+GG9f4M dCjGdEtyvPfOJbypXfZqzSUAdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaqHW9x DvROcbBli3rzT5mCwpXZMB8GA1UdIwQYMBaAFJXc4hteyt6wadyBuSQF1HTeQcIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDE3NC81MUMzRTU0ODBC NEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNyQnAzSUc1SkFYVWRONUJ3 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkemlHMTdLM3JCcDNJRzVKQVhVZE41QndnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDE3NC81MUMzRTU0ODBCNEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNy QnAzSUc1SkFYVWRONUJ3Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBxMGRzleuJNG4+3cXEY+upSvgWrc6Bm0WPYZkgaK8ranQv4TJn2JK kXZP52C+vMZD53dgOyzT60O8esamRg9z3WWpQaVjnr2ngfy6DmUI8I1qPlduo98u gUFEXJ2J51/mpK2bvSgT4efgJNh2xA00l1bC4z4VFCai6HN+T6U4bf7zuN3TIOhc 5l2XCwoIuR/JFT0l0s8u5zQ7/ThkBLvimglbK7rbHjAOkYh3kYXGsBu9YFdNySQu 3mcQPQL3RNF/EEq4esBb4oAqoaX4rx7ImSmypdmnDejy5HqP+6/tHJRCmqM0owYp qySvg23zdxb5Zq657IvGqjNEZkiSnz7f -----END CERTIFICATE-----Generated at Sun Aug 24 00:19:16 2025 by rpki-client