$ rpki-client -vvf rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft File: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft (raw, json) Hash identifier: gezOndzXEN4xxGbhj4ZKi1g7fc5VkDZMR5tMHeYN64I= Subject key identifier: 11:0A:B1:5C:BB:F5:EE:B0:CE:73:19:26:E8:C9:14:98:C4:44:6E:E4 Authority key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 Certificate issuer: /CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Certificate serial: 01D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft Manifest number: 01CC Signing time: Sat 31 May 2025 02:38:53 +0000 Manifest this update: Sat 31 May 2025 02:38:52 +0000 Manifest next update: Sat 07 Jun 2025 02:38:52 +0000 Files and hashes: 1: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl (hash: ccUrx3YhFnVilPcC62K2PP858sBzx/7koukDSgZXRvo=) 2: F40EE60A9B5C11EFAF221C2AC4F9AE02.roa (hash: jJCobfJLcL+bxm+0JuTzhdUR6TH06A3Cv8Ze73t5bJc=) 3: E8B7423A7DE911EDBCFD3082C4F9AE02.roa (hash: 30rh6IWxeAZSoQLXE8+fnFkH8FRjm++ff7WAqq69pt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EC3B, serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Validity Not Before: May 31 02:38:52 2025 GMT Not After : Jun 7 02:38:52 2025 GMT Subject: CN=683a6bbc-1262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b4:33:7a:32:00:09:a1:03:17:67:b3:bc:5d: fe:37:25:82:63:47:3f:d4:9f:2a:dd:06:d2:e0:40: e3:99:45:36:d6:76:60:15:5a:59:e4:b2:b9:75:d2: b5:58:37:52:ed:4f:b3:50:8d:00:a6:13:a8:94:7d: 01:82:b1:06:4c:6b:23:f8:91:45:f4:e7:9c:6b:64: 67:d4:01:37:63:ca:3d:b5:a0:78:36:f2:d7:63:b9: b2:ec:7b:b9:3e:1c:c6:84:61:03:1c:f2:97:a7:c9: 2d:8a:81:64:7a:f9:d1:6a:e6:d8:2b:12:b3:21:73: 4c:61:16:b1:a2:b7:6c:cd:75:41:06:d9:92:4c:4e: 7d:36:d5:fd:b2:a8:78:8f:8c:d2:56:a7:35:df:2a: 26:c5:be:98:3f:f0:b9:18:cc:f8:25:cb:bc:2d:6d: b3:3f:bb:e8:ca:3f:8e:07:92:1b:6e:b2:c3:dd:b7: 3d:52:01:a2:8d:95:1a:d4:6f:4b:0e:54:59:46:54: c7:ce:56:3a:38:83:12:dc:63:48:0c:20:ab:b9:20: ea:7c:a6:4e:8a:10:83:f8:fb:87:04:a0:1e:68:ce: b3:8b:70:ea:6b:d4:cd:57:1f:21:10:31:8f:36:9c: 80:9c:00:b1:4b:70:9f:12:79:24:5a:57:65:10:00: e4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0A:B1:5C:BB:F5:EE:B0:CE:73:19:26:E8:C9:14:98:C4:44:6E:E4 X509v3 Authority Key Identifier: keyid:2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:dd:16:50:62:4f:a9:94:ee:16:75:96:14:76:c7:00:87:40: 77:9f:2c:af:bc:10:af:17:19:8d:3b:df:ed:9f:72:71:e6:90: c2:03:a4:66:35:cf:2d:d7:2c:ea:34:95:15:65:b1:b3:f0:80: 62:6f:12:f9:67:64:31:06:a6:f1:11:c9:e7:36:6a:15:96:68: 39:b4:22:94:07:55:20:6a:7d:2f:ae:e9:72:99:01:07:22:db: 07:8a:09:74:59:cb:4b:6c:da:90:71:79:3a:e1:e0:d5:b0:32: 2f:17:a0:01:03:4b:c5:44:86:ed:c5:ed:16:97:32:f4:42:5b: 7a:22:25:a0:8f:75:b4:cb:6c:3d:4a:b6:a5:64:28:2d:01:8f: 6a:6d:be:e2:b9:8d:17:20:9b:95:d3:c2:c6:b9:d0:94:1a:2b: f4:2e:91:3d:f4:10:fb:2b:ab:cf:57:3c:bf:3a:81:ad:e3:3f: 77:12:28:2e:74:1b:95:74:91:1a:13:d3:c2:af:26:72:c2:d3: 34:ed:93:01:f1:61:5d:45:51:85:a8:1a:e6:f3:0d:81:8e:9b: 6f:7e:ba:65:5b:81:b8:59:c7:82:0a:be:41:43:b1:5e:e1:be: 1e:6b:f3:e3:ad:e5:4e:95:4c:47:a3:0b:4f:12:76:1b:40:ba: 57:65:76:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VDM0IxMTAvBgNVBAUTKDJERENEMDVEQ0UyQzU4MDM3RkUwMkY5NUUxQThCRkNC RDNFMEUzMjUwHhcNMjUwNTMxMDIzODUyWhcNMjUwNjA3MDIzODUyWjAYMRYwFAYD VQQDEw02ODNhNmJiYy0xMjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LQzejIACaEDF2ezvF3+NyWCY0c/1J8q3QbS4EDjmUU21nZgFVpZ5LK5ddK1 WDdS7U+zUI0AphOolH0BgrEGTGsj+JFF9Oeca2Rn1AE3Y8o9taB4NvLXY7my7Hu5 PhzGhGEDHPKXp8ktioFkevnRaubYKxKzIXNMYRaxordszXVBBtmSTE59NtX9sqh4 j4zSVqc13yomxb6YP/C5GMz4Jcu8LW2zP7voyj+OB5IbbrLD3bc9UgGijZUa1G9L DlRZRlTHzlY6OIMS3GNIDCCruSDqfKZOihCD+PuHBKAeaM6zi3Dqa9TNVx8hEDGP NpyAnACxS3CfEnkkWldlEADkSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBEKsVy7 9e6wznMZJujJFJjERG7kMB8GA1UdIwQYMBaAFC3c0F3OLFgDf+AvleGov8vT4OMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUMzQi9ERjRBNDM3MjdE RTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dBTl80Qy1WNGFpX3k5UGc0 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xkelFYYzRzV0FOXzRDLVY0YWlfeTlQZzR5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUMzQi9ERjRBNDM3MjdERTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dB Tl80Qy1WNGFpX3k5UGc0eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv3RZQYk+plO4WdZYUdscAh0B3nyyvvBCvFxmNO9/tn3Jx5pDCA6Rm Nc8t1yzqNJUVZbGz8IBibxL5Z2QxBqbxEcnnNmoVlmg5tCKUB1Ugan0vrulymQEH ItsHigl0WctLbNqQcXk64eDVsDIvF6ABA0vFRIbtxe0WlzL0Qlt6IiWgj3W0y2w9 SralZCgtAY9qbb7iuY0XIJuV08LGudCUGiv0LpE99BD7K6vPVzy/OoGt4z93Eigu dBuVdJEaE9PCryZywtM07ZMB8WFdRVGFqBrm8w2BjptvfrplW4G4WceCCr5BQ7Fe 4b4ea/PjreVOlUxHowtPEnYbQLpXZXYW -----END CERTIFICATE-----Generated at Sat May 31 16:38:56 2025 by rpki-client