$ rpki-client -vvf rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft File: LDTzNZTMO-PAfo54N2v8QzJjFUg.mft (raw, json) Hash identifier: niSuXmQ42rqTffIxipCNhOTXjy4Mv3Ibqv05FNYBCIM= Subject key identifier: 95:3E:D5:26:2C:40:94:BB:BC:8B:94:B3:BA:66:36:08:11:3D:1F:77 Authority key identifier: 2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48 Certificate issuer: /CN=A914ADD8/serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548 Certificate serial: 348D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft Manifest number: 348C Signing time: Sat 14 Jun 2025 14:28:34 +0000 Manifest this update: Sat 14 Jun 2025 14:28:33 +0000 Manifest next update: Sat 21 Jun 2025 14:28:33 +0000 Files and hashes: 1: LDTzNZTMO-PAfo54N2v8QzJjFUg.crl (hash: 95NXp2A9ms7c5d5HLuSBr2xHvqPcuSovdGaW0awJPaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:28:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13453 (0x348d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ADD8, serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548 Validity Not Before: Jun 14 14:28:33 2025 GMT Not After : Jun 21 14:28:33 2025 GMT Subject: CN=684d8711-1932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e9:7a:d8:bc:eb:d6:38:96:b6:d9:0e:0d:d1: 26:8f:91:4d:0c:3c:55:82:02:58:f3:c9:d4:eb:e4: 73:79:94:d6:2b:3b:13:c7:04:64:b7:fd:fc:e9:90: b3:e0:a6:f6:d4:be:89:e6:b5:eb:76:5e:fd:a5:93: 21:fd:10:ec:21:24:2a:ea:76:69:35:9b:7b:d7:5e: e7:2b:8b:c4:d2:95:5b:ee:9e:53:82:c1:0c:30:16: cf:f4:d4:7c:f1:b7:13:cb:99:f0:49:0d:90:91:7a: 1f:a9:4a:9f:ab:12:ca:68:b5:65:c2:8b:3a:03:e0: dc:c9:0e:6f:28:72:2b:ca:59:f9:5a:0f:12:6c:5f: 2c:35:3d:ea:80:86:05:7c:00:27:75:02:51:54:8c: 83:75:41:d7:ca:25:68:f8:39:cb:fa:e2:e2:50:d5: 65:5b:c0:52:78:bf:69:6f:e0:87:6a:8c:19:54:86: ac:e3:95:bf:db:9c:4e:d2:8f:db:d1:ea:33:e9:ab: f8:b4:f4:69:26:1e:02:5e:93:24:c6:23:d8:56:f5: 24:02:c6:91:49:10:7c:e8:dd:fd:2c:9d:b2:ee:c8: 38:a9:74:18:cc:a3:46:31:60:d0:3a:0f:2b:cd:9c: 69:8b:81:7f:a3:04:b8:32:0e:87:a9:84:fc:d9:5a: 91:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3E:D5:26:2C:40:94:BB:BC:8B:94:B3:BA:66:36:08:11:3D:1F:77 X509v3 Authority Key Identifier: keyid:2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:93:6a:09:79:6d:f3:54:35:c3:2f:bd:d9:50:be:7e:ff:09: 46:e2:05:a2:4d:1c:8f:8d:bd:64:d0:eb:63:49:20:dc:21:54: c7:80:0f:be:bf:9e:1c:bc:8d:fa:f9:ba:3f:db:55:aa:11:9b: 00:3b:8d:16:bd:25:f0:0e:04:78:9e:63:2e:52:af:c6:02:59: 81:b7:aa:ba:c3:d0:cd:e7:50:9b:ed:31:a5:1d:8c:ce:ed:9b: e1:bc:f6:0f:66:5c:e0:d6:88:a3:77:4d:f5:95:d7:8b:d0:ac: 56:2d:2c:66:bf:be:90:0a:86:72:3c:27:f2:c2:de:5d:31:0a: b8:57:99:80:93:8d:41:bb:65:78:80:e3:d0:b6:9e:88:9b:e9: c4:48:3c:19:1c:a3:b3:63:b5:ee:63:6b:cf:f9:d3:76:59:ad: e8:04:34:df:e5:55:66:fd:1a:84:a7:ae:2c:d2:70:10:c9:c1: 27:4d:41:47:00:7f:a4:e7:af:f3:8f:a3:20:98:32:aa:d0:f8: 82:8e:f8:e7:c3:fe:bf:0b:b6:5c:7e:67:d3:30:aa:d2:fa:d7: 85:b6:30:67:8b:e0:59:37:a1:aa:89:5c:50:5f:f8:2e:db:6e: 28:20:3e:9e:b9:89:93:57:64:23:5a:04:92:8a:ed:0b:9d:a0: 0b:2a:53:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEFERDgxMTAvBgNVBAUTKDJDMzRGMzM1OTRDQzNCRTNDMDdFOEU3ODM3NkJGQzQz MzI2MzE1NDgwHhcNMjUwNjE0MTQyODMzWhcNMjUwNjIxMTQyODMzWjAYMRYwFAYD VQQDEw02ODRkODcxMS0xOTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+l62Lzr1jiWttkODdEmj5FNDDxVggJY88nU6+RzeZTWKzsTxwRkt/386ZCz 4Kb21L6J5rXrdl79pZMh/RDsISQq6nZpNZt7117nK4vE0pVb7p5TgsEMMBbP9NR8 8bcTy5nwSQ2QkXofqUqfqxLKaLVlwos6A+DcyQ5vKHIryln5Wg8SbF8sNT3qgIYF fAAndQJRVIyDdUHXyiVo+DnL+uLiUNVlW8BSeL9pb+CHaowZVIas45W/25xO0o/b 0eoz6av4tPRpJh4CXpMkxiPYVvUkAsaRSRB86N39LJ2y7sg4qXQYzKNGMWDQOg8r zZxpi4F/owS4Mg6HqYT82VqRLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJU+1SYs QJS7vIuUs7pmNggRPR93MB8GA1UdIwQYMBaAFCw08zWUzDvjwH6OeDdr/EMyYxVI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUREOC9BNEQ4MTA0RTFE ODcxMUUyODM0Q0I5REYwOEIwMkNEMi9MRFR6TlpUTU8tUEFmbzU0TjJ2OFF6SmpG VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEVHpOWlRNTy1QQWZvNTROMnY4UXpKakZVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QUREOC9BNEQ4MTA0RTFEODcxMUUyODM0Q0I5REYwOEIwMkNEMi9MRFR6TlpUTU8t UEFmbzU0TjJ2OFF6SmpGVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrk2oJeW3zVDXDL73ZUL5+/wlG4gWiTRyPjb1k0OtjSSDcIVTHgA++ v54cvI36+bo/21WqEZsAO40WvSXwDgR4nmMuUq/GAlmBt6q6w9DN51Cb7TGlHYzO 7ZvhvPYPZlzg1oijd031ldeL0KxWLSxmv76QCoZyPCfywt5dMQq4V5mAk41Bu2V4 gOPQtp6Im+nESDwZHKOzY7XuY2vP+dN2Wa3oBDTf5VVm/RqEp64s0nAQycEnTUFH AH+k56/zj6MgmDKq0PiCjvjnw/6/C7ZcfmfTMKrS+teFtjBni+BZN6GqiVxQX/gu 224oID6euYmTV2QjWgSSiu0LnaALKlNs -----END CERTIFICATE-----Generated at Sat Jun 14 19:31:32 2025 by rpki-client