$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft File: ldziG17K3rBp3IG5JAXUdN5BwgY.mft (raw, json) Hash identifier: o4qv61sCumtZl1FOLOfT07rAg0SLMTb1bDHNnEgzFlY= Subject key identifier: E0:91:C5:3C:13:53:3E:01:F2:8B:0B:20:8D:D0:CD:1F:FE:FC:6C:CB Authority key identifier: 95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 Certificate issuer: /CN=A91CD174/serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Certificate serial: 0C16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft Manifest number: 0C0B Signing time: Tue 08 Apr 2025 18:34:37 +0000 Manifest this update: Tue 08 Apr 2025 18:34:37 +0000 Manifest next update: Tue 15 Apr 2025 18:34:37 +0000 Files and hashes: 1: ldziG17K3rBp3IG5JAXUdN5BwgY.crl (hash: L1iS1npS3t1h4TKKmVhr7LZRZ0rqmLOpiZ+snXmfRVI=) 2: 54AD60AE0C2E11EABBBFA158C4F9AE02.roa (hash: /1zN6Gwwi0zP2Xs45slEdMpw3TT72EUNYyQ6n/qRBPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 18:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3094 (0xc16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD174 Validity Not Before: Apr 8 18:34:37 2025 GMT Not After : Apr 15 18:34:37 2025 GMT Subject: CN=67f56c3d-b93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:08:f7:e4:3e:8d:54:2e:a9:3d:b6:71:b4:c3: b3:be:5a:08:06:da:48:3d:46:93:57:fe:15:d7:4d: 3b:f5:0b:41:c3:2e:68:1d:b6:b7:44:01:35:03:bb: f4:62:84:17:7b:aa:56:e4:c0:bb:a4:79:b6:4f:19: dd:a5:b3:85:98:34:a6:55:0e:e6:9f:33:9c:54:bc: 1c:d4:29:0f:66:0f:eb:c2:6a:e3:c5:53:58:98:13: 0a:5a:e8:ae:4c:40:39:49:80:b1:0a:24:6a:14:53: 4a:22:cd:88:21:29:d2:71:5b:55:06:2c:b9:26:03: b0:aa:64:fb:2d:60:16:c1:9a:75:9a:c5:2f:3e:d7: 63:cf:1a:cb:8b:7b:c3:7e:07:f3:40:71:be:45:32: 06:8f:af:4f:15:50:1e:5d:80:40:57:e4:74:6a:dd: 18:d7:fc:5c:cb:b4:97:ec:67:95:2e:0f:20:71:4c: 3b:af:f4:6e:f9:33:b5:96:3f:74:a1:51:a1:4c:cb: b5:40:8a:2b:a6:5f:1d:54:34:94:19:52:67:54:5b: 84:36:16:b8:00:8e:73:13:78:18:22:88:31:0d:3c: ae:38:e0:f1:41:1f:6f:2c:10:f0:91:20:9d:b9:21: 6a:2e:b6:61:9a:3b:e3:fe:b2:7e:e5:e3:05:27:ee: da:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:91:C5:3C:13:53:3E:01:F2:8B:0B:20:8D:D0:CD:1F:FE:FC:6C:CB X509v3 Authority Key Identifier: keyid:95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:a6:31:db:1a:f3:d9:15:d8:b9:1a:c8:bf:e2:d8:15:58:90: 30:ec:de:37:61:49:ae:eb:92:17:dd:c3:f5:b2:18:e1:9e:8a: 6a:36:b6:d1:65:a1:46:c1:48:51:e2:9f:dc:a0:c2:c3:5e:72: 62:a5:47:94:03:9a:d2:c0:c1:02:03:23:fe:38:2b:84:f5:6d: 37:b1:8d:cf:04:31:1e:f4:ee:0e:3a:4a:28:49:b4:0f:a6:b0: 68:c1:5c:8b:83:67:13:60:3f:f5:1d:cd:f9:ea:95:ab:78:d6: ea:29:1c:97:43:2a:2e:c0:9e:83:41:8c:24:59:9a:61:b5:76: 27:1c:10:ca:08:f3:31:34:7a:25:67:b3:30:ef:ae:3d:0c:ad: d7:90:da:d9:cf:f9:38:b7:f8:9a:ba:2a:08:52:64:77:ca:cc: cb:0e:11:a7:24:77:bd:61:f6:7d:3f:2a:d0:a1:1c:ea:17:d5: 38:b0:30:de:75:76:1b:cf:32:57:fb:c7:b5:74:44:13:8b:07: 7c:3c:05:82:35:a7:29:eb:6c:c3:46:8c:58:8e:9b:6a:be:83: 2e:f7:75:ee:4b:06:1b:b4:2a:e6:e9:0d:f0:8f:73:52:65:e8: 47:de:37:55:9a:f0:5d:3e:90:ed:e9:1a:6a:d6:4a:7a:fe:df: 25:87:64:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxNzQxMTAvBgNVBAUTKDk1RENFMjFCNUVDQURFQjA2OURDODFCOTI0MDVENDc0 REU0MUMyMDYwHhcNMjUwNDA4MTgzNDM3WhcNMjUwNDE1MTgzNDM3WjAYMRYwFAYD VQQDEw02N2Y1NmMzZC1iOTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQj35D6NVC6pPbZxtMOzvloIBtpIPUaTV/4V10079QtBwy5oHba3RAE1A7v0 YoQXe6pW5MC7pHm2TxndpbOFmDSmVQ7mnzOcVLwc1CkPZg/rwmrjxVNYmBMKWuiu TEA5SYCxCiRqFFNKIs2IISnScVtVBiy5JgOwqmT7LWAWwZp1msUvPtdjzxrLi3vD fgfzQHG+RTIGj69PFVAeXYBAV+R0at0Y1/xcy7SX7GeVLg8gcUw7r/Ru+TO1lj90 oVGhTMu1QIorpl8dVDSUGVJnVFuENha4AI5zE3gYIogxDTyuOODxQR9vLBDwkSCd uSFqLrZhmjvj/rJ+5eMFJ+7a8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCRxTwT Uz4B8osLII3QzR/+/GzLMB8GA1UdIwQYMBaAFJXc4hteyt6wadyBuSQF1HTeQcIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDE3NC81MUMzRTU0ODBC NEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNyQnAzSUc1SkFYVWRONUJ3 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkemlHMTdLM3JCcDNJRzVKQVhVZE41QndnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDE3NC81MUMzRTU0ODBCNEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNy QnAzSUc1SkFYVWRONUJ3Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQpjHbGvPZFdi5Gsi/4tgVWJAw7N43YUmu65IX3cP1shjhnopqNrbR ZaFGwUhR4p/coMLDXnJipUeUA5rSwMECAyP+OCuE9W03sY3PBDEe9O4OOkooSbQP prBowVyLg2cTYD/1Hc356pWreNbqKRyXQyouwJ6DQYwkWZphtXYnHBDKCPMxNHol Z7Mw7649DK3XkNrZz/k4t/iauioIUmR3yszLDhGnJHe9YfZ9PyrQoRzqF9U4sDDe dXYbzzJX+8e1dEQTiwd8PAWCNacp62zDRoxYjptqvoMu93XuSwYbtCrm6Q3wj3NS ZehH3jdVmvBdPpDt6Rpq1kp6/t8lh2RD -----END CERTIFICATE-----Generated at Thu Apr 10 18:59:50 2025 by rpki-client