$ rpki-client -vvf rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft File: LDTzNZTMO-PAfo54N2v8QzJjFUg.mft (raw, json) Hash identifier: gBIB/2JFGmI/escVPLnVtuo8CWTfPphVt/SpOk1sCZc= Subject key identifier: B6:1E:8B:80:A8:1C:28:C8:26:33:96:3A:4C:CF:6A:AF:40:C7:4B:50 Authority key identifier: 2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48 Certificate issuer: /CN=A914ADD8/serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548 Certificate serial: 349E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft Manifest number: 349D Signing time: Fri 18 Jul 2025 14:30:24 +0000 Manifest this update: Fri 18 Jul 2025 14:30:24 +0000 Manifest next update: Fri 25 Jul 2025 14:30:24 +0000 Files and hashes: 1: LDTzNZTMO-PAfo54N2v8QzJjFUg.crl (hash: YwcSTYf8yK38D7k/QqVXAK8Vim+0cbNMWG6T+Hg8A3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13470 (0x349e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ADD8, serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548 Validity Not Before: Jul 18 14:30:24 2025 GMT Not After : Jul 25 14:30:24 2025 GMT Subject: CN=687a5a80-b187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:98:34:26:5d:ca:87:98:0f:6c:f8:1c:cd:ea: 20:e9:e9:b9:d2:8a:ff:4f:05:78:a1:57:9f:db:2b: f2:9c:e6:d3:a5:e6:2d:5c:69:df:39:e5:ea:d0:cc: 06:20:c1:f9:f2:9f:01:04:83:17:39:7b:e3:f7:77: 23:b6:d8:c2:67:d2:4f:57:ea:2f:bf:f6:f2:af:43: d5:f1:ce:d4:67:3c:b1:ca:7d:98:e4:84:b4:f3:42: 86:16:0a:cb:26:55:b8:09:a8:a7:5a:71:c4:2b:b5: 8c:d4:e9:ed:87:d9:02:63:ba:5a:b9:ff:26:83:7a: 03:ef:91:e1:b7:d2:99:69:79:a9:7e:a5:51:49:fb: c5:9d:54:74:99:81:89:cd:c2:3b:1b:ef:23:a0:ca: 08:93:e0:26:e1:08:ec:6c:2b:ca:de:30:ac:28:82: 75:bf:67:8c:c9:2c:05:d0:0d:ba:31:8c:44:e4:57: 6e:f9:7f:84:9c:4f:c1:72:56:75:c5:83:ee:06:c8: e2:af:85:91:a9:47:3f:f5:ea:dc:5c:7a:62:85:7a: 42:6a:d8:be:e2:14:73:cb:07:8f:4d:2b:ea:11:90: 7a:4e:c3:e0:7f:a9:aa:c5:1a:0d:7f:31:90:07:b1: ea:ba:20:53:9a:36:10:7a:c9:98:37:fa:62:07:01: 89:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1E:8B:80:A8:1C:28:C8:26:33:96:3A:4C:CF:6A:AF:40:C7:4B:50 X509v3 Authority Key Identifier: keyid:2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ce:1e:88:5f:fe:f7:84:44:cb:66:13:ea:8d:fe:78:19:39: 19:1b:81:04:da:a2:8c:aa:82:38:64:b3:0d:f4:7f:f3:ba:a4: 38:e1:b1:4a:54:5d:59:45:a6:1f:db:4c:ba:fe:95:38:c5:99: 8c:69:13:3b:5d:2a:6e:9e:e6:d6:db:7d:52:dd:78:c2:28:82: c9:ab:d2:a3:01:8f:d1:45:cd:0e:0e:98:64:50:49:33:00:65: d2:ac:e0:0b:a0:a5:ec:a4:dc:f3:c1:0d:dd:38:39:ff:91:39: 6c:1d:19:0b:00:01:fb:32:30:e9:bd:11:29:cc:c6:20:17:53: a6:2e:78:2e:4d:67:8a:f1:e7:96:d8:10:6f:ff:cc:19:f8:a1: c0:5f:2f:b2:76:f6:91:18:21:a6:23:c1:42:77:1e:e3:70:21: a7:68:b0:1c:0b:11:ce:da:5e:75:47:a6:8d:59:17:fd:6a:b1: 52:78:09:ec:e3:3f:36:7b:10:f3:44:af:47:3b:f8:6a:df:e0: 7a:51:22:87:5e:2d:e0:79:ca:26:b7:10:b8:b9:df:73:21:da: 71:69:71:25:64:cc:c7:d0:2d:70:87:44:29:97:a7:fd:64:79: 3b:ce:f0:83:3a:b7:fb:ec:a3:64:36:c5:3a:d0:7d:08:7f:3e: 8d:d8:89:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEFERDgxMTAvBgNVBAUTKDJDMzRGMzM1OTRDQzNCRTNDMDdFOEU3ODM3NkJGQzQz MzI2MzE1NDgwHhcNMjUwNzE4MTQzMDI0WhcNMjUwNzI1MTQzMDI0WjAYMRYwFAYD VQQDEw02ODdhNWE4MC1iMTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpg0Jl3Kh5gPbPgczeog6em50or/TwV4oVef2yvynObTpeYtXGnfOeXq0MwG IMH58p8BBIMXOXvj93cjttjCZ9JPV+ovv/byr0PV8c7UZzyxyn2Y5IS080KGFgrL JlW4CainWnHEK7WM1Onth9kCY7pauf8mg3oD75Hht9KZaXmpfqVRSfvFnVR0mYGJ zcI7G+8joMoIk+Am4QjsbCvK3jCsKIJ1v2eMySwF0A26MYxE5Fdu+X+EnE/BclZ1 xYPuBsjir4WRqUc/9ercXHpihXpCati+4hRzywePTSvqEZB6TsPgf6mqxRoNfzGQ B7HquiBTmjYQesmYN/piBwGJ7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYei4Co HCjIJjOWOkzPaq9Ax0tQMB8GA1UdIwQYMBaAFCw08zWUzDvjwH6OeDdr/EMyYxVI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUREOC9BNEQ4MTA0RTFE ODcxMUUyODM0Q0I5REYwOEIwMkNEMi9MRFR6TlpUTU8tUEFmbzU0TjJ2OFF6SmpG VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEVHpOWlRNTy1QQWZvNTROMnY4UXpKakZVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QUREOC9BNEQ4MTA0RTFEODcxMUUyODM0Q0I5REYwOEIwMkNEMi9MRFR6TlpUTU8t UEFmbzU0TjJ2OFF6SmpGVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7zh6IX/73hETLZhPqjf54GTkZG4EE2qKMqoI4ZLMN9H/zuqQ44bFK VF1ZRaYf20y6/pU4xZmMaRM7XSpunubW231S3XjCKILJq9KjAY/RRc0ODphkUEkz AGXSrOALoKXspNzzwQ3dODn/kTlsHRkLAAH7MjDpvREpzMYgF1OmLnguTWeK8eeW 2BBv/8wZ+KHAXy+ydvaRGCGmI8FCdx7jcCGnaLAcCxHO2l51R6aNWRf9arFSeAns 4z82exDzRK9HO/hq3+B6USKHXi3gecomtxC4ud9zIdpxaXElZMzH0C1wh0Qpl6f9 ZHk7zvCDOrf77KNkNsU60H0Ifz6N2ImS -----END CERTIFICATE-----Generated at Sun Jul 20 11:39:01 2025 by rpki-client