$ rpki-client -vvf rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft File: ldG-85ALQWWEFku3RjF3EwIpFog.mft (raw, json) Hash identifier: 2+vIt8VSGqxs+hDcf/letdytHx2KPABnzWs1D2IWhIg= Subject key identifier: B1:FD:83:F8:EC:5B:4F:4D:AC:22:5C:EE:26:C0:43:7D:7D:D3:1A:51 Authority key identifier: 95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88 Certificate issuer: /CN=A91577DD/serialNumber=95D1BEF3900B416584164BB74631771302291688 Certificate serial: 348B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft Manifest number: 347F Signing time: Sat 12 Apr 2025 14:50:03 +0000 Manifest this update: Sat 12 Apr 2025 14:50:02 +0000 Manifest next update: Sat 19 Apr 2025 14:50:02 +0000 Files and hashes: 1: ldG-85ALQWWEFku3RjF3EwIpFog.crl (hash: mEZ7etLOvjNBkWxh0hD12cJDznAOy5qSZhA2+/+Chg4=) 2: C2F7AE40C03111EA9777314AC4F9AE02.roa (hash: 5UVYc1gM3pcN5MyLC+3d2F4QJ6pH7wnclugT6lLmPzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 14:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13451 (0x348b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91577DD, serialNumber=95D1BEF3900B416584164BB74631771302291688 Validity Not Before: Apr 12 14:50:02 2025 GMT Not After : Apr 19 14:50:02 2025 GMT Subject: CN=67fa7d9b-6a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:02:5d:fc:c7:df:4c:ea:a8:3d:48:3c:bd:c8: 85:15:f6:b0:0c:76:ef:4a:92:e8:d7:3b:50:21:cc: ab:7b:3d:6d:73:55:d0:91:92:e0:4f:59:37:c2:0a: c6:10:b8:3c:8b:dc:1f:a8:8e:a1:da:af:8a:ec:25: 62:2a:a8:02:49:e2:9c:3a:ef:17:ed:4b:ad:2d:e2: 82:9f:d1:fe:f7:49:6c:e8:8f:88:f9:ca:61:68:01: e4:40:cf:5c:f7:7a:ba:66:84:e2:d4:3a:97:13:d3: 1b:90:2a:90:2a:6d:33:c7:8a:f4:ca:d7:d9:ec:c2: b4:1e:ea:41:87:46:9a:c0:56:7b:52:d7:4a:c0:e3: b3:23:cd:7a:37:ac:ac:2d:d7:74:e6:93:9b:5d:fa: 25:24:75:45:c0:43:b5:c5:48:ab:5c:37:b5:8b:77: e1:48:9f:56:1e:09:23:c9:fe:29:f0:91:ec:90:f2: 68:a4:63:5c:4f:cb:93:06:3f:ed:d0:b4:43:a9:15: 86:51:9e:ed:5d:f3:21:ad:4d:02:27:e4:fd:51:29: 13:b5:5d:9f:01:8e:98:f0:31:33:9f:7b:c7:66:30: d6:1d:59:60:ac:58:ec:2a:2f:a1:f8:62:1d:f4:65: 8f:a5:c5:89:83:d5:88:1d:05:28:e8:65:10:84:5a: 39:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FD:83:F8:EC:5B:4F:4D:AC:22:5C:EE:26:C0:43:7D:7D:D3:1A:51 X509v3 Authority Key Identifier: keyid:95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:58:e8:82:9e:ba:6e:9d:61:7a:66:19:09:c6:b4:8d:50:2a: ad:50:f4:af:e9:62:d0:4e:e4:f8:9e:df:55:dc:79:7b:69:f7: a1:53:c8:b4:f2:d2:c0:57:85:a6:3c:c9:d5:2c:74:5b:df:d6: ba:f5:76:73:3f:76:81:cb:47:c8:25:fd:62:aa:bf:8a:05:e3: c9:c2:24:55:14:de:f6:2a:9f:cb:d0:60:8a:e5:f0:4f:c4:64: 26:a2:e0:ef:70:28:3a:4b:a1:78:95:28:ae:fb:0b:1f:40:1c: f0:cd:94:1f:bd:e2:e9:28:d4:35:9d:79:ce:e5:00:e3:69:e8: 6b:45:4b:17:45:f7:0c:fc:30:b7:2d:45:d5:36:db:29:61:67: 94:1d:3c:42:7b:54:1c:10:c1:23:ff:32:8b:52:f1:1b:c0:a1: 1d:e9:b1:02:6f:ae:7c:b4:70:e5:25:d9:31:c1:69:ce:8a:bb: 50:c6:a8:f0:6d:fd:7b:d6:40:cf:d1:50:58:bc:00:2f:a4:80: dc:be:83:10:59:c7:24:2d:4c:f1:e0:2f:d4:f9:de:b1:51:c7: 70:18:96:f7:b0:9d:6c:3a:76:44:48:b5:5a:56:78:75:e4:1c: ad:08:d9:98:23:90:e9:1d:dc:a9:e8:c2:bf:7e:6c:aa:13:03: d9:f3:99:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3REQxMTAvBgNVBAUTKDk1RDFCRUYzOTAwQjQxNjU4NDE2NEJCNzQ2MzE3NzEz MDIyOTE2ODgwHhcNMjUwNDEyMTQ1MDAyWhcNMjUwNDE5MTQ1MDAyWjAYMRYwFAYD VQQDEw02N2ZhN2Q5Yi02YTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQJd/MffTOqoPUg8vciFFfawDHbvSpLo1ztQIcyrez1tc1XQkZLgT1k3wgrG ELg8i9wfqI6h2q+K7CViKqgCSeKcOu8X7UutLeKCn9H+90ls6I+I+cphaAHkQM9c 93q6ZoTi1DqXE9MbkCqQKm0zx4r0ytfZ7MK0HupBh0aawFZ7UtdKwOOzI816N6ys Ldd05pObXfolJHVFwEO1xUirXDe1i3fhSJ9WHgkjyf4p8JHskPJopGNcT8uTBj/t 0LRDqRWGUZ7tXfMhrU0CJ+T9USkTtV2fAY6Y8DEzn3vHZjDWHVlgrFjsKi+h+GId 9GWPpcWJg9WIHQUo6GUQhFo5IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLH9g/js W09NrCJc7ibAQ3190xpRMB8GA1UdIwQYMBaAFJXRvvOQC0FlhBZLt0YxdxMCKRaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdERC9EMUM1QjAyQTFE OTYxMUUyQTFDQUI0N0YwOEIwMkNEMi9sZEctODVBTFFXV0VGa3UzUmpGM0V3SXBG b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkRy04NUFMUVdXRUZrdTNSakYzRXdJcEZvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzdERC9EMUM1QjAyQTFEOTYxMUUyQTFDQUI0N0YwOEIwMkNEMi9sZEctODVBTFFX V0VGa3UzUmpGM0V3SXBGb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEWOiCnrpunWF6ZhkJxrSNUCqtUPSv6WLQTuT4nt9V3Hl7afehU8i0 8tLAV4WmPMnVLHRb39a69XZzP3aBy0fIJf1iqr+KBePJwiRVFN72Kp/L0GCK5fBP xGQmouDvcCg6S6F4lSiu+wsfQBzwzZQfveLpKNQ1nXnO5QDjaehrRUsXRfcM/DC3 LUXVNtspYWeUHTxCe1QcEMEj/zKLUvEbwKEd6bECb658tHDlJdkxwWnOirtQxqjw bf171kDP0VBYvAAvpIDcvoMQWcckLUzx4C/U+d6xUcdwGJb3sJ1sOnZESLVaVnh1 5BytCNmYI5DpHdyp6MK/fmyqEwPZ85k0 -----END CERTIFICATE-----Generated at Sun Apr 13 01:31:40 2025 by rpki-client