$ rpki-client -vvf rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft File: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft (raw, json) Hash identifier: jpaGVyk6Y7RKpcukjKD9ESnIspmUpkEccPZ6bk3aSWM= Subject key identifier: 23:4B:5B:FE:C4:22:39:57:CC:EE:E3:9A:A4:8D:94:A3:EA:4F:AD:BA Authority key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 Certificate issuer: /CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft Manifest number: 01F5 Signing time: Tue 19 Aug 2025 02:47:14 +0000 Manifest this update: Tue 19 Aug 2025 02:47:13 +0000 Manifest next update: Tue 26 Aug 2025 02:47:13 +0000 Files and hashes: 1: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl (hash: N0jChoKlCYHWLb2Ge8aMWdxzZ8G0lmsnYAFiyZJxvSE=) 2: F40EE60A9B5C11EFAF221C2AC4F9AE02.roa (hash: jJCobfJLcL+bxm+0JuTzhdUR6TH06A3Cv8Ze73t5bJc=) 3: E8B7423A7DE911EDBCFD3082C4F9AE02.roa (hash: 30rh6IWxeAZSoQLXE8+fnFkH8FRjm++ff7WAqq69pt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EC3B, serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Validity Not Before: Aug 19 02:47:13 2025 GMT Not After : Aug 26 02:47:13 2025 GMT Subject: CN=68a3e5b2-f1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:df:61:f5:b8:57:33:d9:13:8e:59:38:81:87: 1a:2e:3c:9e:1a:1e:d7:42:27:3b:18:6a:59:af:bf: 94:67:80:0a:69:18:0d:63:e1:33:65:1e:ce:d3:52: 93:50:c4:5c:3d:a2:dd:b8:d5:5d:c5:eb:ce:37:31: 34:ab:46:5d:a4:e3:15:51:3b:ab:5b:c4:b2:57:77: 7e:2d:d5:64:63:06:2c:fe:dc:48:0b:82:66:44:ff: 5e:75:58:4a:85:1d:94:15:18:31:af:4e:29:c6:49: 82:4e:db:72:77:e7:28:4f:b6:d6:aa:9a:73:61:63: f7:25:5c:02:97:8d:ae:79:1a:de:b4:2c:2f:31:c2: 99:eb:a5:43:7f:94:e1:8f:15:8b:66:10:17:5c:a4: 23:22:6a:b0:35:3e:d9:c6:4f:b6:21:ba:9e:a1:c9: ac:0d:2c:d3:6d:c5:6a:1f:41:a4:a7:fa:15:9c:38: 8c:27:90:b6:e6:4b:c4:99:74:98:8b:f1:37:63:55: ab:98:e3:89:af:00:cc:bc:92:2b:50:1e:60:db:e4: e7:64:61:c2:8e:46:dc:cd:57:b8:30:94:a6:6f:06: d6:7f:d2:62:79:df:b9:6f:7e:8d:9f:17:35:87:3a: 92:e0:9a:f0:ac:89:dc:9c:af:0a:1b:24:45:80:3c: b4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4B:5B:FE:C4:22:39:57:CC:EE:E3:9A:A4:8D:94:A3:EA:4F:AD:BA X509v3 Authority Key Identifier: keyid:2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f2:e5:11:9a:25:fa:a9:f6:96:39:ed:a2:7c:50:a1:d7:e8: 01:e9:0d:cd:de:53:14:d7:8a:7c:a7:90:1b:27:e1:9b:8e:6f: 02:f7:d2:ab:4b:75:56:eb:de:49:0a:47:38:5d:c4:b6:42:cf: f5:66:ed:29:68:68:e4:2f:29:37:82:c9:4f:42:35:6d:89:72: 7a:79:0c:a0:19:15:d2:31:b8:c9:0a:f1:c4:51:cf:d7:27:a4: 32:3c:2e:5b:f2:26:38:61:48:64:51:4f:54:9a:84:1b:23:72: 65:1c:e8:89:87:b5:2f:a5:fe:8a:06:dd:49:64:62:23:3f:7f: a8:8d:79:ad:dc:f9:df:d9:9f:ea:b8:f7:84:74:2b:2b:46:3e: 63:e7:df:c6:2e:a6:06:6b:59:33:8c:e0:42:8d:00:b7:41:3c: 91:9a:2a:38:59:10:64:37:5b:24:00:b2:15:d1:6a:85:74:fc: 7e:b0:76:51:00:2d:d7:64:b8:82:c5:ce:84:ca:cd:63:07:4e: ae:f2:0d:f4:90:75:98:64:d3:be:ac:45:fd:89:76:5e:d3:a0: d7:53:5c:cf:30:eb:c7:e5:19:af:68:8f:2d:40:b3:d4:d8:c7: fe:c3:74:cd:1d:28:2a:69:5c:ad:76:36:97:67:4d:84:48:3f: 65:d7:80:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VDM0IxMTAvBgNVBAUTKDJERENEMDVEQ0UyQzU4MDM3RkUwMkY5NUUxQThCRkNC RDNFMEUzMjUwHhcNMjUwODE5MDI0NzEzWhcNMjUwODI2MDI0NzEzWjAYMRYwFAYD VQQDEw02OGEzZTViMi1mMWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo99h9bhXM9kTjlk4gYcaLjyeGh7XQic7GGpZr7+UZ4AKaRgNY+EzZR7O01KT UMRcPaLduNVdxevONzE0q0ZdpOMVUTurW8SyV3d+LdVkYwYs/txIC4JmRP9edVhK hR2UFRgxr04pxkmCTttyd+coT7bWqppzYWP3JVwCl42ueRretCwvMcKZ66VDf5Th jxWLZhAXXKQjImqwNT7Zxk+2IbqeocmsDSzTbcVqH0Gkp/oVnDiMJ5C25kvEmXSY i/E3Y1WrmOOJrwDMvJIrUB5g2+TnZGHCjkbczVe4MJSmbwbWf9Jied+5b36Nnxc1 hzqS4JrwrIncnK8KGyRFgDy0mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNLW/7E IjlXzO7jmqSNlKPqT626MB8GA1UdIwQYMBaAFC3c0F3OLFgDf+AvleGov8vT4OMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUMzQi9ERjRBNDM3MjdE RTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dBTl80Qy1WNGFpX3k5UGc0 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xkelFYYzRzV0FOXzRDLVY0YWlfeTlQZzR5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUMzQi9ERjRBNDM3MjdERTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dB Tl80Qy1WNGFpX3k5UGc0eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB88uURmiX6qfaWOe2ifFCh1+gB6Q3N3lMU14p8p5AbJ+Gbjm8C99Kr S3VW695JCkc4XcS2Qs/1Zu0paGjkLyk3gslPQjVtiXJ6eQygGRXSMbjJCvHEUc/X J6QyPC5b8iY4YUhkUU9UmoQbI3JlHOiJh7Uvpf6KBt1JZGIjP3+ojXmt3Pnf2Z/q uPeEdCsrRj5j59/GLqYGa1kzjOBCjQC3QTyRmio4WRBkN1skALIV0WqFdPx+sHZR AC3XZLiCxc6Eys1jB06u8g30kHWYZNO+rEX9iXZe06DXU1zPMOvH5RmvaI8tQLPU 2Mf+w3TNHSgqaVytdjaXZ02ESD9l14D7 -----END CERTIFICATE-----Generated at Wed Aug 20 17:20:25 2025 by rpki-client