$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft File: lddEZYkqyDm6JHn6BHVqXjBfJjw.mft (raw, json) Hash identifier: qKNpAkmuQkFA++mzuPSjEA+qjhJd5bSfA+C5J8TOQpk= Subject key identifier: 64:48:20:6A:56:FA:18:D8:55:21:D5:39:60:5D:C5:69:BC:71:71:CF Authority key identifier: 95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C Certificate issuer: /CN=A91557F2/serialNumber=95D74465892AC839BA2479FA04756A5E305F263C Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft Manifest number: 0187 Signing time: Tue 02 Sep 2025 22:08:11 +0000 Manifest this update: Tue 02 Sep 2025 22:08:10 +0000 Manifest next update: Tue 09 Sep 2025 22:08:10 +0000 Files and hashes: 1: lddEZYkqyDm6JHn6BHVqXjBfJjw.crl (hash: YLNwP6OFw//jdHk2wpYXIljppxEFtA2ToJOhBTOUFno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 22:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557F2, serialNumber=95D74465892AC839BA2479FA04756A5E305F263C Validity Not Before: Sep 2 22:08:10 2025 GMT Not After : Sep 9 22:08:10 2025 GMT Subject: CN=68b76aca-251e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bb:78:cf:40:c9:0b:6d:e6:db:bf:59:a1:63: cf:ab:45:c8:7b:fe:31:8a:bb:e5:75:3a:6c:0e:8c: 41:02:42:21:7c:bc:23:36:01:44:b9:b0:e9:1b:1f: 6b:4b:05:fe:08:4b:63:44:43:14:70:4e:b7:7b:d1: 9a:95:c1:4b:4e:63:20:70:a1:8c:b5:37:79:7f:b6: 3b:ef:23:de:72:14:08:99:d7:98:8e:55:7c:a3:d7: fd:0b:8a:0b:92:bc:50:33:3f:ca:94:b2:b7:4e:48: 7f:f7:99:1c:ea:a1:14:9f:a9:bd:61:4a:77:51:d5: 41:22:87:4d:fe:6c:cb:42:d2:ef:7c:c4:cf:ea:8e: 36:51:89:0c:fc:a5:7f:90:2c:05:51:f1:f0:75:ec: 48:ad:f9:30:6f:df:a6:43:ad:6d:87:53:97:01:82: a4:8a:9b:54:dc:32:de:d3:fc:30:3d:52:7d:6e:cd: ec:35:86:0f:68:c9:02:38:86:dd:ec:9d:56:2b:20: 94:cb:e7:da:39:90:b1:21:73:61:76:d0:81:9c:36: b6:fa:15:ad:9a:5a:49:5e:8c:62:ee:8e:e2:34:10: 7b:fa:19:4c:51:76:6f:cf:24:31:ce:4e:78:16:24: ae:d4:bb:c0:ee:08:eb:8e:41:e5:f5:d2:b0:e1:11: bc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:48:20:6A:56:FA:18:D8:55:21:D5:39:60:5D:C5:69:BC:71:71:CF X509v3 Authority Key Identifier: keyid:95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:c8:1a:12:21:f5:ed:46:5f:6a:5b:a2:27:d0:3d:1b:d4:3f: 1a:a3:ff:a5:81:cd:f5:db:0f:be:a6:b9:a6:2d:56:1e:c3:4c: 7e:ab:32:b8:63:e9:e4:7c:d4:6f:e5:af:21:d3:c5:98:08:44: 76:56:28:bc:2d:11:60:b4:7a:9d:be:da:07:99:dc:9b:bb:7d: 14:23:6c:57:e7:81:90:d0:db:f1:14:01:84:93:6b:19:d9:73: 80:95:b4:45:78:f8:55:95:6d:ec:4d:68:6e:e4:3a:a8:9c:98: 7f:34:95:8b:79:82:d5:e2:29:5a:00:0b:4b:f6:dd:9e:ce:56: c5:e4:71:c7:84:91:f0:bf:34:fc:1f:2f:1a:c6:ce:50:4c:3f: 99:d9:34:95:50:65:71:91:fa:69:6e:db:76:07:65:51:53:bb: 64:06:d0:e1:88:49:36:f2:40:5b:5d:b9:69:47:28:87:d4:51: e7:46:fc:42:c9:d6:cd:18:46:46:22:d2:70:80:3f:93:e5:00: 20:7c:93:b2:7e:0a:8e:93:76:62:cb:96:89:d8:ca:e8:38:f7: ad:53:f8:83:30:3f:1c:74:7f:86:12:08:49:69:39:b3:23:6d: d0:55:12:d6:87:1c:7a:99:ac:14:76:5d:86:34:a1:af:45:19: 13:43:a8:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3RjIxMTAvBgNVBAUTKDk1RDc0NDY1ODkyQUM4MzlCQTI0NzlGQTA0NzU2QTVF MzA1RjI2M0MwHhcNMjUwOTAyMjIwODEwWhcNMjUwOTA5MjIwODEwWjAYMRYwFAYD VQQDEw02OGI3NmFjYS0yNTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLt4z0DJC23m279ZoWPPq0XIe/4xirvldTpsDoxBAkIhfLwjNgFEubDpGx9r SwX+CEtjREMUcE63e9GalcFLTmMgcKGMtTd5f7Y77yPechQImdeYjlV8o9f9C4oL krxQMz/KlLK3Tkh/95kc6qEUn6m9YUp3UdVBIodN/mzLQtLvfMTP6o42UYkM/KV/ kCwFUfHwdexIrfkwb9+mQ61th1OXAYKkiptU3DLe0/wwPVJ9bs3sNYYPaMkCOIbd 7J1WKyCUy+faOZCxIXNhdtCBnDa2+hWtmlpJXoxi7o7iNBB7+hlMUXZvzyQxzk54 FiSu1LvA7gjrjkHl9dKw4RG8zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRIIGpW +hjYVSHVOWBdxWm8cXHPMB8GA1UdIwQYMBaAFJXXRGWJKsg5uiR5+gR1al4wXyY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGMi9CRjI3RkQ0NjQy RTgxMUVFOUJCRTY0NkNDNEY5QUUwMi9sZGRFWllrcXlEbTZKSG42QkhWcVhqQmZK ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xkZEVaWWtxeURtNkpIbjZCSFZxWGpCZkpqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdGMi9CRjI3RkQ0NjQyRTgxMUVFOUJCRTY0NkNDNEY5QUUwMi9sZGRFWllrcXlE bTZKSG42QkhWcVhqQmZKancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYyBoSIfXtRl9qW6In0D0b1D8ao/+lgc312w++prmmLVYew0x+qzK4 Y+nkfNRv5a8h08WYCER2Vii8LRFgtHqdvtoHmdybu30UI2xX54GQ0NvxFAGEk2sZ 2XOAlbRFePhVlW3sTWhu5DqonJh/NJWLeYLV4ilaAAtL9t2ezlbF5HHHhJHwvzT8 Hy8axs5QTD+Z2TSVUGVxkfppbtt2B2VRU7tkBtDhiEk28kBbXblpRyiH1FHnRvxC ydbNGEZGItJwgD+T5QAgfJOyfgqOk3Ziy5aJ2MroOPetU/iDMD8cdH+GEghJaTmz I23QVRLWhxx6mawUdl2GNKGvRRkTQ6i+ -----END CERTIFICATE-----Generated at Thu Sep 4 14:01:11 2025 by rpki-client