$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft File: lddEZYkqyDm6JHn6BHVqXjBfJjw.mft (raw, json) Hash identifier: kxMoUk/HOr7rSduzMEMv6obgf0kxwb1DEbs2pFFfoyY= Subject key identifier: 05:A3:99:77:57:6F:64:71:FD:17:F8:6D:59:89:76:DE:DE:F0:23:05 Authority key identifier: 95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C Certificate issuer: /CN=A91557F2/serialNumber=95D74465892AC839BA2479FA04756A5E305F263C Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft Manifest number: 0157 Signing time: Mon 02 Jun 2025 22:11:57 +0000 Manifest this update: Mon 02 Jun 2025 22:11:57 +0000 Manifest next update: Mon 09 Jun 2025 22:11:57 +0000 Files and hashes: 1: lddEZYkqyDm6JHn6BHVqXjBfJjw.crl (hash: OEJlTlM/ABexsTivK85mnFSP4CnzhiBxdId5xPxuHV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 22:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557F2, serialNumber=95D74465892AC839BA2479FA04756A5E305F263C Validity Not Before: Jun 2 22:11:57 2025 GMT Not After : Jun 9 22:11:57 2025 GMT Subject: CN=683e21ad-9ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fa:7d:96:92:99:ab:db:a9:76:bb:11:4e:9f: 8f:c2:af:c8:fb:dc:ed:26:34:8a:2d:24:bf:52:fe: 5f:2a:cc:9f:bf:83:29:1b:9a:11:37:9c:e4:47:89: 0c:9c:e0:85:69:7e:0f:1a:da:23:f8:e0:79:b7:a1: 63:e6:82:cd:70:9e:d2:1a:62:4e:cc:42:fc:ba:08: 6b:0f:e7:34:63:a3:36:4d:ba:37:9f:20:a7:9b:50: d2:88:61:87:0a:66:c1:45:c5:ed:90:db:47:70:61: 38:60:62:08:09:87:e2:e3:9a:d1:8f:e0:89:94:b7: 06:a2:83:e0:3f:c8:36:09:6a:70:31:e6:3f:96:76: 85:8d:78:87:1d:49:78:5b:36:1c:9f:6b:8e:df:15: bb:61:6d:d9:8d:a5:92:b1:42:b4:32:8e:37:77:94: 26:2e:dd:6f:c2:c4:2d:99:53:2d:bf:5d:30:62:40: e0:e5:37:71:f9:36:16:c8:00:cd:1d:f4:eb:6d:50: 86:00:9d:93:cb:25:8a:06:72:ef:2b:f1:52:34:e2: 5b:3d:87:91:3f:9b:26:83:04:cf:4e:cc:41:fd:6c: 16:e4:75:ec:4d:da:33:c5:d7:a0:8b:21:67:cb:b9: 5b:c1:ee:13:4a:49:5b:21:2e:23:3f:55:b5:52:2c: 24:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A3:99:77:57:6F:64:71:FD:17:F8:6D:59:89:76:DE:DE:F0:23:05 X509v3 Authority Key Identifier: keyid:95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:bc:87:31:0d:21:5d:ec:6a:ae:7d:d3:0d:c6:21:1f:86:f1: 7a:6a:50:fe:02:cb:cf:c9:08:a1:99:91:7b:e5:aa:10:9b:87: 87:c7:9b:da:04:c6:5e:a0:c9:99:65:a2:01:e3:a3:13:11:97: ef:57:b1:9f:20:eb:23:87:7c:1c:00:ef:7c:a5:7e:8d:1d:5d: 7d:51:8c:39:43:52:e2:74:37:66:94:fd:d5:8e:51:fa:c3:85: fa:b1:22:45:57:b5:a1:12:54:8b:85:e4:9f:55:dd:aa:35:2c: ef:61:26:7d:a8:17:62:fb:b8:57:2e:7b:2f:f9:53:85:c2:55: bd:52:7f:a9:04:15:7c:9a:1f:d8:94:10:eb:24:59:5c:17:8e: 9c:06:ec:7b:ab:18:b5:7a:91:b0:70:ec:fb:c7:88:82:f8:36: e9:17:a7:ee:2c:ec:66:80:a9:18:04:04:0b:2a:17:a5:d3:22: d1:2c:b4:d2:65:1d:a9:d4:ec:14:0d:f5:a3:0c:06:db:b1:37: 0b:70:1f:f3:68:5f:22:ed:6b:57:34:9a:2a:13:3f:c9:e8:a8: ce:95:70:c1:0e:33:74:38:1b:63:57:b2:9d:f1:92:9b:76:07: a8:38:87:6d:db:8b:5f:8a:d5:fa:07:32:f6:e6:b6:0e:e1:3a: 5a:ec:a2:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3RjIxMTAvBgNVBAUTKDk1RDc0NDY1ODkyQUM4MzlCQTI0NzlGQTA0NzU2QTVF MzA1RjI2M0MwHhcNMjUwNjAyMjIxMTU3WhcNMjUwNjA5MjIxMTU3WjAYMRYwFAYD VQQDEw02ODNlMjFhZC05ZWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Pp9lpKZq9updrsRTp+Pwq/I+9ztJjSKLSS/Uv5fKsyfv4MpG5oRN5zkR4kM nOCFaX4PGtoj+OB5t6Fj5oLNcJ7SGmJOzEL8ughrD+c0Y6M2Tbo3nyCnm1DSiGGH CmbBRcXtkNtHcGE4YGIICYfi45rRj+CJlLcGooPgP8g2CWpwMeY/lnaFjXiHHUl4 WzYcn2uO3xW7YW3ZjaWSsUK0Mo43d5QmLt1vwsQtmVMtv10wYkDg5Tdx+TYWyADN HfTrbVCGAJ2TyyWKBnLvK/FSNOJbPYeRP5smgwTPTsxB/WwW5HXsTdozxdegiyFn y7lbwe4TSklbIS4jP1W1UiwkFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWjmXdX b2Rx/Rf4bVmJdt7e8CMFMB8GA1UdIwQYMBaAFJXXRGWJKsg5uiR5+gR1al4wXyY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGMi9CRjI3RkQ0NjQy RTgxMUVFOUJCRTY0NkNDNEY5QUUwMi9sZGRFWllrcXlEbTZKSG42QkhWcVhqQmZK ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xkZEVaWWtxeURtNkpIbjZCSFZxWGpCZkpqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdGMi9CRjI3RkQ0NjQyRTgxMUVFOUJCRTY0NkNDNEY5QUUwMi9sZGRFWllrcXlE bTZKSG42QkhWcVhqQmZKancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkvIcxDSFd7GqufdMNxiEfhvF6alD+AsvPyQihmZF75aoQm4eHx5va BMZeoMmZZaIB46MTEZfvV7GfIOsjh3wcAO98pX6NHV19UYw5Q1LidDdmlP3VjlH6 w4X6sSJFV7WhElSLheSfVd2qNSzvYSZ9qBdi+7hXLnsv+VOFwlW9Un+pBBV8mh/Y lBDrJFlcF46cBux7qxi1epGwcOz7x4iC+DbpF6fuLOxmgKkYBAQLKhel0yLRLLTS ZR2p1OwUDfWjDAbbsTcLcB/zaF8i7WtXNJoqEz/J6KjOlXDBDjN0OBtjV7Kd8ZKb dgeoOIdt24tfitX6BzL25rYO4Tpa7KKv -----END CERTIFICATE-----Generated at Tue Jun 3 23:48:40 2025 by rpki-client