$ rpki-client -vvf rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft File: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft (raw, json) Hash identifier: ZJWdL9y8SoewVG3Yhg3UgXK4kR5vFwjLeSasyhIPLJM= Subject key identifier: 35:2D:76:2E:44:84:CC:E8:E6:38:B3:02:3C:43:9D:40:89:16:85:56 Authority key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 Certificate issuer: /CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft Manifest number: 01BB Signing time: Fri 25 Apr 2025 02:16:30 +0000 Manifest this update: Fri 25 Apr 2025 02:16:30 +0000 Manifest next update: Fri 02 May 2025 02:16:30 +0000 Files and hashes: 1: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl (hash: 6oTtunaWPEZaoYbe1IeRocwHExalj6PHzbv5egMCQEU=) 2: F40EE60A9B5C11EFAF221C2AC4F9AE02.roa (hash: jJCobfJLcL+bxm+0JuTzhdUR6TH06A3Cv8Ze73t5bJc=) 3: E8B7423A7DE911EDBCFD3082C4F9AE02.roa (hash: 30rh6IWxeAZSoQLXE8+fnFkH8FRjm++ff7WAqq69pt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EC3B, serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Validity Not Before: Apr 25 02:16:30 2025 GMT Not After : May 2 02:16:30 2025 GMT Subject: CN=680af07e-2e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ac:a0:4d:87:c0:72:8a:96:19:7f:09:13:b5: 83:74:ef:1c:98:de:84:3e:da:9e:42:c0:3e:4b:a0: 87:e5:e3:9d:b6:b3:6a:18:3e:40:e4:c4:98:19:85: 46:c7:b5:da:3a:bf:fa:ef:e3:e0:b6:05:02:43:ce: 01:57:8a:8c:b1:9e:e5:17:ec:a8:95:1e:9b:89:a0: e8:8b:fc:87:ac:55:28:60:ef:70:66:59:1b:9c:88: 3b:be:4b:5e:fe:95:71:83:bd:2d:eb:4d:29:ea:43: 66:4a:f8:a6:f0:d6:5b:c5:53:d4:37:3b:97:d6:14: 4c:f4:4f:93:c7:75:d6:90:2c:47:98:04:92:24:b6: e1:7a:36:bd:19:f7:ca:db:21:74:fc:5d:d6:f3:7d: f8:40:74:63:30:45:6f:68:f4:00:5a:5a:7c:e9:c6: 94:19:69:21:e9:cb:79:2c:38:58:00:45:d7:59:65: 6c:f7:5c:27:82:31:2c:75:85:fb:da:8b:26:22:2b: 3d:83:0e:54:85:7d:f0:6d:53:8a:0f:1b:4a:aa:c3: cd:5b:51:79:13:61:13:63:80:25:bd:c6:67:07:8a: 86:5f:f2:b4:cb:d3:5a:bd:b7:c2:d4:9c:49:a3:cc: 45:44:73:ba:97:79:8f:fe:f5:8a:02:ed:83:ed:bd: 12:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2D:76:2E:44:84:CC:E8:E6:38:B3:02:3C:43:9D:40:89:16:85:56 X509v3 Authority Key Identifier: keyid:2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:1e:41:21:89:e9:90:9b:22:b9:4f:96:c1:e2:2b:43:52:6f: cf:de:2d:09:bc:e2:91:61:7e:d3:35:c4:1f:64:ea:51:96:e2: b0:d6:40:ab:84:29:55:ec:af:4d:85:24:c5:dc:bb:b1:5f:46: ee:80:0b:54:bb:6d:b8:3d:a6:07:01:d5:78:24:47:06:c9:32: 86:5e:c8:ae:67:35:ef:14:80:a1:95:f1:3c:d8:03:68:79:c6: ac:e9:1d:c5:a7:e4:fa:15:b6:ef:25:94:b4:01:df:72:3f:8c: 1e:70:fd:56:f7:6e:53:c5:89:38:90:d1:35:59:ef:e4:ce:3e: 34:84:d3:ee:0d:49:1f:5d:bf:fc:d5:e3:bb:a8:49:6d:29:1d: c7:c7:d4:5d:28:20:ff:3e:e6:f4:91:e1:db:36:53:9a:57:9f: 84:69:5c:ff:17:55:33:f4:fd:5d:7d:38:3d:10:a0:10:97:78: bd:5b:1a:28:6a:e0:fc:62:e7:48:c3:81:a1:88:89:12:03:dd: 30:86:cd:fd:da:d1:c9:79:3b:2c:a1:3b:14:1f:b3:e7:3e:2f: 1d:c4:f0:d2:34:b9:b1:ea:37:78:e0:76:bc:ad:96:e6:47:51: 97:c0:e8:10:14:c2:14:57:67:76:67:b0:9e:2a:72:40:56:51: 07:c6:b3:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VDM0IxMTAvBgNVBAUTKDJERENEMDVEQ0UyQzU4MDM3RkUwMkY5NUUxQThCRkNC RDNFMEUzMjUwHhcNMjUwNDI1MDIxNjMwWhcNMjUwNTAyMDIxNjMwWjAYMRYwFAYD VQQDEw02ODBhZjA3ZS0yZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2aygTYfAcoqWGX8JE7WDdO8cmN6EPtqeQsA+S6CH5eOdtrNqGD5A5MSYGYVG x7XaOr/67+PgtgUCQ84BV4qMsZ7lF+yolR6biaDoi/yHrFUoYO9wZlkbnIg7vkte /pVxg70t600p6kNmSvim8NZbxVPUNzuX1hRM9E+Tx3XWkCxHmASSJLbheja9GffK 2yF0/F3W8334QHRjMEVvaPQAWlp86caUGWkh6ct5LDhYAEXXWWVs91wngjEsdYX7 2osmIis9gw5UhX3wbVOKDxtKqsPNW1F5E2ETY4AlvcZnB4qGX/K0y9NavbfC1JxJ o8xFRHO6l3mP/vWKAu2D7b0SGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUtdi5E hMzo5jizAjxDnUCJFoVWMB8GA1UdIwQYMBaAFC3c0F3OLFgDf+AvleGov8vT4OMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUMzQi9ERjRBNDM3MjdE RTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dBTl80Qy1WNGFpX3k5UGc0 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xkelFYYzRzV0FOXzRDLVY0YWlfeTlQZzR5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUMzQi9ERjRBNDM3MjdERTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dB Tl80Qy1WNGFpX3k5UGc0eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNHkEhiemQmyK5T5bB4itDUm/P3i0JvOKRYX7TNcQfZOpRluKw1kCr hClV7K9NhSTF3LuxX0bugAtUu224PaYHAdV4JEcGyTKGXsiuZzXvFIChlfE82ANo ecas6R3Fp+T6FbbvJZS0Ad9yP4wecP1W925TxYk4kNE1We/kzj40hNPuDUkfXb/8 1eO7qEltKR3Hx9RdKCD/Pub0keHbNlOaV5+EaVz/F1Uz9P1dfTg9EKAQl3i9Wxoo auD8YudIw4GhiIkSA90whs392tHJeTssoTsUH7PnPi8dxPDSNLmx6jd44Ha8rZbm R1GXwOgQFMIUV2d2Z7CeKnJAVlEHxrMK -----END CERTIFICATE-----Generated at Sat Apr 26 12:22:39 2025 by rpki-client