$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft File: ldziG17K3rBp3IG5JAXUdN5BwgY.mft (raw, json) Hash identifier: ez+xYPnOCpwq9mnR0W2ly+4QsJzd6wynQChJ13ewabo= Subject key identifier: BA:7A:D0:5E:E0:93:FD:CF:EF:93:3A:C0:68:9C:2F:A7:45:FC:D4:D4 Authority key identifier: 95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 Certificate issuer: /CN=A91CD174/serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Certificate serial: 0C80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft Manifest number: 0C75 Signing time: Tue 04 Nov 2025 18:35:38 +0000 Manifest this update: Tue 04 Nov 2025 18:35:37 +0000 Manifest next update: Tue 11 Nov 2025 18:35:37 +0000 Files and hashes: 1: ldziG17K3rBp3IG5JAXUdN5BwgY.crl (hash: hsUVYc2mcZzzxVtd8FAt22gwYCwBshBh/Q/VuE8oPgE=) 2: 54AD60AE0C2E11EABBBFA158C4F9AE02.roa (hash: /1zN6Gwwi0zP2Xs45slEdMpw3TT72EUNYyQ6n/qRBPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3200 (0xc80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD174, serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Validity Not Before: Nov 4 18:35:37 2025 GMT Not After : Nov 11 18:35:37 2025 GMT Subject: CN=690a477a-6f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:30:62:fe:c9:72:cd:57:eb:f6:a5:e4:01:6f: e2:df:10:10:a1:48:4f:b0:30:4b:42:94:db:ec:a3: e6:27:aa:02:35:e8:29:e8:bc:aa:3f:22:13:e6:71: d2:09:01:67:28:8f:39:05:a7:eb:36:66:fc:95:00: 6f:ae:04:6b:5e:2f:56:0e:0b:e1:1d:8c:ba:f6:27: 1d:2b:19:6a:2d:cc:fa:6e:82:c4:3b:35:47:76:fd: 41:fc:3c:d1:3c:9c:21:46:d6:9e:6f:ec:f5:9e:09: 8f:22:ee:e6:c3:16:d3:86:af:9b:30:59:18:53:0c: 1b:b9:2a:c4:a7:12:03:05:13:64:33:71:4a:17:1b: 47:77:b2:72:7b:24:49:e9:a0:d4:54:19:cd:d9:2d: 69:e5:18:ce:a2:ca:df:ea:87:f5:92:7e:2f:e6:d7: 61:a5:ce:26:d6:40:26:ee:f5:6b:19:37:9a:e1:eb: d4:85:c2:a9:e7:38:e1:ef:51:81:f8:d0:d2:b8:46: 6b:e3:83:4e:d8:33:3c:2e:6f:37:b4:bc:a1:a7:c7: 76:4f:80:54:64:71:92:0b:11:2f:28:75:85:6d:14: 1d:2e:04:90:be:05:c8:af:87:cd:34:08:8b:72:23: 3d:26:2e:43:b9:89:7e:3a:11:12:f6:ec:fb:71:ec: f8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7A:D0:5E:E0:93:FD:CF:EF:93:3A:C0:68:9C:2F:A7:45:FC:D4:D4 X509v3 Authority Key Identifier: keyid:95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:25:0d:94:a6:ad:00:8c:6f:09:32:68:ff:9d:0e:67:9d:fd: 8b:bc:80:df:ac:f0:3f:73:62:7b:22:bc:f1:6c:a8:d2:22:79: 64:24:e4:93:3e:72:bb:f8:ff:1a:6a:45:13:38:db:1f:22:2d: f8:a1:b6:ed:9e:f8:cb:87:f3:81:a4:4a:8d:4a:c4:86:fc:c7: 9f:38:65:3d:03:db:ad:e1:03:7f:a2:24:d6:9e:14:00:2b:11: f0:6d:6c:c9:bc:3f:56:cc:d9:b2:52:14:2b:3a:e0:e6:66:3b: f3:65:53:d6:07:d5:43:84:de:23:44:55:b6:1a:25:4d:51:25: d1:5c:43:43:dd:54:07:15:2b:95:3f:86:b4:9a:c1:18:c6:56: db:7b:03:ff:30:80:a5:8b:14:a8:a2:82:70:75:39:7b:d8:c1: d1:34:02:b7:8e:e1:14:4f:9f:fb:70:10:ea:30:7c:9a:a4:16: 2f:3c:16:24:ae:8d:ff:02:a6:cd:91:96:69:8b:f3:de:8f:65: 77:2e:81:40:9d:a3:e3:61:08:b0:20:55:89:fb:4c:cc:c6:f5: af:42:ef:d4:bf:0f:8b:a1:d7:f6:d9:01:67:7f:93:56:e4:76: 80:d0:3d:78:b4:4b:96:c2:2e:b3:78:bf:88:3f:46:b2:e1:4d: 1c:62:6b:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxNzQxMTAvBgNVBAUTKDk1RENFMjFCNUVDQURFQjA2OURDODFCOTI0MDVENDc0 REU0MUMyMDYwHhcNMjUxMTA0MTgzNTM3WhcNMjUxMTExMTgzNTM3WjAYMRYwFAYD VQQDEw02OTBhNDc3YS02Zjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7DBi/slyzVfr9qXkAW/i3xAQoUhPsDBLQpTb7KPmJ6oCNegp6LyqPyIT5nHS CQFnKI85BafrNmb8lQBvrgRrXi9WDgvhHYy69icdKxlqLcz6boLEOzVHdv1B/DzR PJwhRtaeb+z1ngmPIu7mwxbThq+bMFkYUwwbuSrEpxIDBRNkM3FKFxtHd7JyeyRJ 6aDUVBnN2S1p5RjOosrf6of1kn4v5tdhpc4m1kAm7vVrGTea4evUhcKp5zjh71GB +NDSuEZr44NO2DM8Lm83tLyhp8d2T4BUZHGSCxEvKHWFbRQdLgSQvgXIr4fNNAiL ciM9Ji5DuYl+OhES9uz7cez4iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLp60F7g k/3P75M6wGicL6dF/NTUMB8GA1UdIwQYMBaAFJXc4hteyt6wadyBuSQF1HTeQcIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDE3NC81MUMzRTU0ODBC NEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNyQnAzSUc1SkFYVWRONUJ3 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkemlHMTdLM3JCcDNJRzVKQVhVZE41QndnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDE3NC81MUMzRTU0ODBCNEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNy QnAzSUc1SkFYVWRONUJ3Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0JQ2Upq0AjG8JMmj/nQ5nnf2LvIDfrPA/c2J7IrzxbKjSInlkJOST PnK7+P8aakUTONsfIi34obbtnvjLh/OBpEqNSsSG/MefOGU9A9ut4QN/oiTWnhQA KxHwbWzJvD9WzNmyUhQrOuDmZjvzZVPWB9VDhN4jRFW2GiVNUSXRXEND3VQHFSuV P4a0msEYxlbbewP/MIClixSoooJwdTl72MHRNAK3juEUT5/7cBDqMHyapBYvPBYk ro3/AqbNkZZpi/Pej2V3LoFAnaPjYQiwIFWJ+0zMxvWvQu/Uvw+Lodf22QFnf5NW 5HaA0D14tEuWwi6zeL+IP0ay4U0cYmsi -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:37 2025 by rpki-client