$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft File: ldziG17K3rBp3IG5JAXUdN5BwgY.mft (raw, json) Hash identifier: kfvftD/aR/XUvL9SfzzRLeBS3cpN+k1Ae7p/38hGwdw= Subject key identifier: 27:D4:EC:FB:FC:68:AD:6E:5B:CF:7C:04:68:DD:DD:39:8B:92:B9:68 Authority key identifier: 95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 Certificate issuer: /CN=A91CD174/serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Certificate serial: 0C77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft Manifest number: 0C6C Signing time: Sat 18 Oct 2025 19:15:52 +0000 Manifest this update: Sat 18 Oct 2025 19:15:51 +0000 Manifest next update: Sat 25 Oct 2025 19:15:51 +0000 Files and hashes: 1: ldziG17K3rBp3IG5JAXUdN5BwgY.crl (hash: JRBFk32jN/cAr13+E0NrEK7tmdJiHrAqd8nVYCUkYl4=) 2: 54AD60AE0C2E11EABBBFA158C4F9AE02.roa (hash: /1zN6Gwwi0zP2Xs45slEdMpw3TT72EUNYyQ6n/qRBPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3191 (0xc77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD174, serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Validity Not Before: Oct 18 19:15:51 2025 GMT Not After : Oct 25 19:15:51 2025 GMT Subject: CN=68f3e767-eb8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c5:b6:66:9a:a0:f1:40:ea:09:67:6a:22:22: bd:72:4e:55:ac:b7:2d:0e:a7:04:34:50:7c:d9:31: 9d:83:52:6b:ac:ce:fd:1f:f8:a9:29:a8:96:b2:bf: 28:42:36:0a:73:bd:ee:d2:9c:f7:e7:5f:b3:29:b1: 5c:7b:ee:18:9d:27:4d:87:09:10:8b:68:5b:98:f5: 99:06:b5:dc:44:f2:b5:55:db:aa:69:f1:5c:00:ac: 15:f6:1d:a5:7e:9f:dd:fb:cb:e1:db:94:31:f7:3f: 84:76:b9:52:67:62:a1:ef:5b:4b:d7:8c:3f:cb:f4: 79:5f:e7:de:34:cf:e2:89:c9:3a:65:f5:9a:0f:46: be:3b:bf:ef:52:20:7d:e4:7a:eb:fa:ac:55:93:5d: 2d:65:7c:55:82:5c:c7:84:32:0b:50:7d:99:95:22: fa:5b:98:c6:68:c8:18:c8:34:68:20:b5:fa:2e:ec: b2:13:3f:58:d5:aa:c4:26:58:a8:fb:e0:62:96:81: 1e:07:41:39:6d:b5:ef:a7:7a:24:a6:8b:22:12:9f: ad:21:2f:7f:65:93:3a:ae:32:69:74:a8:fc:54:d6: 54:d0:50:6f:a6:ce:b9:01:88:32:ca:a6:70:f5:32: b6:6c:1b:15:7e:9a:6a:d5:02:df:13:a5:16:ed:3f: 3e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D4:EC:FB:FC:68:AD:6E:5B:CF:7C:04:68:DD:DD:39:8B:92:B9:68 X509v3 Authority Key Identifier: keyid:95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:27:95:ab:6c:e2:a6:7a:01:e2:03:fa:a4:3b:18:91:33:7d: 0f:f1:69:aa:44:76:be:b8:7a:be:db:3a:2a:c0:4a:be:0b:44: 65:cb:3d:44:e3:e5:83:a2:aa:e4:47:4a:0f:47:e1:fb:75:19: ff:5b:bb:51:50:95:9b:64:d8:44:ef:98:ea:1a:0c:34:82:fd: ab:f1:1b:79:d4:ac:23:d6:83:c3:90:95:14:df:1b:2f:ec:83: 40:03:c6:2b:12:51:a1:02:25:e1:3a:07:3d:6a:c9:6f:e8:9d: c5:bf:36:57:33:f8:c7:e9:01:6a:66:d8:9d:1f:1c:89:80:32: f9:4a:72:3f:33:e6:47:94:c3:1d:d9:78:62:9a:ec:e0:4a:16: f0:80:af:44:0d:94:6e:6a:60:52:45:ce:26:b4:82:f6:0b:f2: 14:d6:60:fc:b7:d8:70:6b:59:5f:dd:e9:da:1c:0d:71:a9:61: 46:a0:28:de:76:22:59:79:b5:98:3d:60:dd:62:2d:51:c0:c3: 4b:df:dd:40:01:a5:e9:4e:5d:96:84:74:8a:5b:93:6c:58:01: 63:a9:10:b3:97:26:31:cb:1d:a6:19:f8:b8:1f:76:2f:3a:76: ca:24:b5:85:2f:1e:03:f9:a0:42:02:51:cf:70:39:25:92:1a: b9:cf:89:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxNzQxMTAvBgNVBAUTKDk1RENFMjFCNUVDQURFQjA2OURDODFCOTI0MDVENDc0 REU0MUMyMDYwHhcNMjUxMDE4MTkxNTUxWhcNMjUxMDI1MTkxNTUxWjAYMRYwFAYD VQQDEw02OGYzZTc2Ny1lYjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmsW2Zpqg8UDqCWdqIiK9ck5VrLctDqcENFB82TGdg1JrrM79H/ipKaiWsr8o QjYKc73u0pz351+zKbFce+4YnSdNhwkQi2hbmPWZBrXcRPK1VduqafFcAKwV9h2l fp/d+8vh25Qx9z+EdrlSZ2Kh71tL14w/y/R5X+feNM/iick6ZfWaD0a+O7/vUiB9 5Hrr+qxVk10tZXxVglzHhDILUH2ZlSL6W5jGaMgYyDRoILX6LuyyEz9Y1arEJlio ++BiloEeB0E5bbXvp3okposiEp+tIS9/ZZM6rjJpdKj8VNZU0FBvps65AYgyyqZw 9TK2bBsVfppq1QLfE6UW7T8+3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfU7Pv8 aK1uW898BGjd3TmLkrloMB8GA1UdIwQYMBaAFJXc4hteyt6wadyBuSQF1HTeQcIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDE3NC81MUMzRTU0ODBC NEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNyQnAzSUc1SkFYVWRONUJ3 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkemlHMTdLM3JCcDNJRzVKQVhVZE41QndnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDE3NC81MUMzRTU0ODBCNEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNy QnAzSUc1SkFYVWRONUJ3Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJJ5WrbOKmegHiA/qkOxiRM30P8WmqRHa+uHq+2zoqwEq+C0Rlyz1E 4+WDoqrkR0oPR+H7dRn/W7tRUJWbZNhE75jqGgw0gv2r8Rt51Kwj1oPDkJUU3xsv 7INAA8YrElGhAiXhOgc9aslv6J3FvzZXM/jH6QFqZtidHxyJgDL5SnI/M+ZHlMMd 2XhimuzgShbwgK9EDZRuamBSRc4mtIL2C/IU1mD8t9hwa1lf3enaHA1xqWFGoCje diJZebWYPWDdYi1RwMNL391AAaXpTl2WhHSKW5NsWAFjqRCzlyYxyx2mGfi4H3Yv OnbKJLWFLx4D+aBCAlHPcDklkhq5z4kb -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:36 2025 by rpki-client