$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft File: ldziG17K3rBp3IG5JAXUdN5BwgY.mft (raw, json) Hash identifier: zBSLToYWfBr2VrZz/vTFnPwyVDeI9Vbx0EUtGye9yTI= Subject key identifier: 2E:1F:C0:FB:E5:9C:3B:34:87:47:E0:F5:12:1C:CF:FD:17:E3:50:7A Authority key identifier: 95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 Certificate issuer: /CN=A91CD174/serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Certificate serial: 0C2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft Manifest number: 0C24 Signing time: Fri 30 May 2025 18:47:24 +0000 Manifest this update: Fri 30 May 2025 18:47:24 +0000 Manifest next update: Fri 06 Jun 2025 18:47:24 +0000 Files and hashes: 1: ldziG17K3rBp3IG5JAXUdN5BwgY.crl (hash: SCfOHQ2UlXX8ATz58aQLl23DXzzxDN2FUoXGU77eTng=) 2: 54AD60AE0C2E11EABBBFA158C4F9AE02.roa (hash: /1zN6Gwwi0zP2Xs45slEdMpw3TT72EUNYyQ6n/qRBPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3119 (0xc2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD174, serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Validity Not Before: May 30 18:47:24 2025 GMT Not After : Jun 6 18:47:24 2025 GMT Subject: CN=6839fd3c-86cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:10:f9:64:00:89:72:ac:7f:6e:8c:9b:c2:fb: 1b:a8:d6:4f:ce:6c:e6:13:e3:a5:b4:d2:89:97:f6: 66:dd:30:0c:23:86:b1:53:1a:02:09:07:35:be:3f: a7:74:b7:74:ab:ae:2b:ea:f4:f8:33:35:7e:56:bd: 9c:58:57:c6:90:e6:f6:7f:cc:df:92:47:b9:42:5a: ea:68:2a:d6:58:bd:fe:92:40:f1:1f:78:57:a4:cb: 8d:e3:41:cc:e8:90:ad:66:1c:7a:34:c5:7e:7a:a9: c2:55:d2:98:f4:04:63:28:29:f1:51:dc:87:e9:c4: ec:c2:ad:c9:16:90:22:21:e5:25:a6:b0:ef:48:d6: 3b:d1:32:64:3e:b8:03:55:10:81:d6:95:c3:b1:48: 68:3c:0b:03:4d:4d:05:2e:65:1d:7c:ce:71:73:40: 65:15:a0:e4:56:ab:17:ec:d7:3a:29:ac:97:90:a3: 22:73:0a:d4:00:7b:4e:65:7a:3e:d6:a1:38:28:ed: cb:32:e7:c8:c0:e3:86:89:ee:04:53:5e:b8:34:0e: ec:7a:bf:03:13:d0:e6:2f:b4:88:98:d2:24:34:2d: 3b:fd:79:6e:2a:b1:0a:38:72:58:f7:ac:07:30:4a: fb:e8:af:c3:86:50:29:7a:bd:4a:33:1b:97:d3:5b: be:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1F:C0:FB:E5:9C:3B:34:87:47:E0:F5:12:1C:CF:FD:17:E3:50:7A X509v3 Authority Key Identifier: keyid:95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:97:92:d3:47:01:ee:bb:52:39:5b:f7:59:be:a5:2c:3a:08: 9c:aa:00:6e:70:5c:7e:aa:1b:2a:94:54:11:3f:6f:1d:95:ec: bc:17:21:b4:e2:76:b8:59:c3:ee:2e:49:06:53:15:bd:a3:75: bf:5c:4e:f7:8e:a8:e3:a2:48:3a:fe:5b:85:32:d0:b7:c4:03: 0c:00:d4:fc:67:8c:ef:4b:b6:8f:02:3d:0b:71:09:5f:b8:1e: 36:fb:0a:06:c9:af:21:df:b9:f0:a2:32:83:dc:6c:1b:c8:19: 09:af:c3:78:ce:79:4b:c4:6d:27:42:af:b3:98:60:66:3a:c1: f8:43:aa:8e:9e:2c:4c:84:66:ee:7c:d4:60:cd:f0:76:0b:4f: f0:7f:68:10:5e:9e:94:f2:bc:f8:56:37:31:59:58:8d:0c:6b: 7d:1c:b7:ba:cf:06:38:d1:27:05:25:40:a1:a9:99:c3:e1:46: ad:ec:d9:a9:34:7a:c6:58:ef:34:5f:9c:e9:9f:9a:75:ea:b6: c5:83:05:bc:68:ee:2e:a2:d1:a6:7b:c0:6d:20:c8:2e:24:c9: 45:7a:ff:b4:35:75:47:3a:40:3c:3b:0a:33:2d:1d:dc:4f:17: 56:6a:ac:ff:9b:2e:f9:ee:97:c2:56:e9:10:f7:5f:59:98:3f: 3c:9c:f7:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxNzQxMTAvBgNVBAUTKDk1RENFMjFCNUVDQURFQjA2OURDODFCOTI0MDVENDc0 REU0MUMyMDYwHhcNMjUwNTMwMTg0NzI0WhcNMjUwNjA2MTg0NzI0WjAYMRYwFAYD VQQDEw02ODM5ZmQzYy04NmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBD5ZACJcqx/boybwvsbqNZPzmzmE+OltNKJl/Zm3TAMI4axUxoCCQc1vj+n dLd0q64r6vT4MzV+Vr2cWFfGkOb2f8zfkke5QlrqaCrWWL3+kkDxH3hXpMuN40HM 6JCtZhx6NMV+eqnCVdKY9ARjKCnxUdyH6cTswq3JFpAiIeUlprDvSNY70TJkPrgD VRCB1pXDsUhoPAsDTU0FLmUdfM5xc0BlFaDkVqsX7Nc6KayXkKMicwrUAHtOZXo+ 1qE4KO3LMufIwOOGie4EU164NA7ser8DE9DmL7SImNIkNC07/XluKrEKOHJY96wH MEr76K/DhlAper1KMxuX01u+VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4fwPvl nDs0h0fg9RIcz/0X41B6MB8GA1UdIwQYMBaAFJXc4hteyt6wadyBuSQF1HTeQcIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDE3NC81MUMzRTU0ODBC NEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNyQnAzSUc1SkFYVWRONUJ3 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkemlHMTdLM3JCcDNJRzVKQVhVZE41QndnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDE3NC81MUMzRTU0ODBCNEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNy QnAzSUc1SkFYVWRONUJ3Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzl5LTRwHuu1I5W/dZvqUsOgicqgBucFx+qhsqlFQRP28dley8FyG0 4na4WcPuLkkGUxW9o3W/XE73jqjjokg6/luFMtC3xAMMANT8Z4zvS7aPAj0LcQlf uB42+woGya8h37nwojKD3GwbyBkJr8N4znlLxG0nQq+zmGBmOsH4Q6qOnixMhGbu fNRgzfB2C0/wf2gQXp6U8rz4VjcxWViNDGt9HLe6zwY40ScFJUChqZnD4Uat7Nmp NHrGWO80X5zpn5p16rbFgwW8aO4uotGme8BtIMguJMlFev+0NXVHOkA8OwozLR3c TxdWaqz/my757pfCVukQ919ZmD88nPe8 -----END CERTIFICATE-----Generated at Sat May 31 17:20:31 2025 by rpki-client