$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft File: lddEZYkqyDm6JHn6BHVqXjBfJjw.mft (raw, json) Hash identifier: M0quyaODtMlg0y9m4Z1CkrVQXXj3IsxXdVCxFKWaamU= Subject key identifier: E7:06:99:00:5E:1A:12:04:2A:70:2A:7A:93:A4:56:91:12:C5:5B:FB Authority key identifier: 95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C Certificate issuer: /CN=A91557F2/serialNumber=95D74465892AC839BA2479FA04756A5E305F263C Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft Manifest number: 0179 Signing time: Wed 06 Aug 2025 22:14:14 +0000 Manifest this update: Wed 06 Aug 2025 22:14:14 +0000 Manifest next update: Wed 13 Aug 2025 22:14:14 +0000 Files and hashes: 1: lddEZYkqyDm6JHn6BHVqXjBfJjw.crl (hash: VPFTKSFQlPQ1PvLggN1nOCg+tAVhfUukSp6ww5EoquI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 22:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557F2, serialNumber=95D74465892AC839BA2479FA04756A5E305F263C Validity Not Before: Aug 6 22:14:14 2025 GMT Not After : Aug 13 22:14:14 2025 GMT Subject: CN=6893d3b6-80ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:42:f6:40:91:f3:2a:de:3c:d5:d5:62:ba:0a: 3d:c3:62:9d:3c:6e:19:7b:b9:0a:09:4d:31:e4:ea: 1d:42:c9:c4:f4:13:29:48:fb:49:a9:5a:41:28:63: cc:81:4f:82:cb:c6:ed:e4:9c:ad:78:55:f6:ba:72: 7e:a4:85:7d:0d:ae:8c:37:1b:ad:8d:e9:9b:6a:25: c0:79:f6:f2:ba:1d:ed:02:5e:d9:b9:bb:38:b3:4c: 72:a4:61:9e:6a:49:83:f3:0c:5f:ee:dd:09:07:12: c3:51:4d:36:69:53:8a:4f:82:ce:f5:4b:a6:fd:72: d6:f6:54:c8:b5:0d:62:e5:1b:db:0e:5a:00:59:5d: 80:cb:a8:ab:72:59:04:a9:d0:0a:4d:04:7c:4a:de: 83:df:75:74:85:ec:1a:1c:06:6a:2e:75:e6:9a:b2: 10:5d:cb:0b:7d:bf:f1:51:af:de:fa:78:78:46:68: 9d:65:0c:bf:f3:26:22:ed:88:cf:21:54:26:a1:11: c1:e8:14:d1:c2:81:f7:cd:09:01:51:45:30:fe:df: bf:29:56:74:20:ad:39:41:af:91:b9:07:9a:20:59: 51:f6:ac:a3:fc:77:a5:17:7d:87:e6:15:13:e9:2f: a4:a1:58:77:24:47:23:fd:04:46:c3:74:94:80:9f: d9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:06:99:00:5E:1A:12:04:2A:70:2A:7A:93:A4:56:91:12:C5:5B:FB X509v3 Authority Key Identifier: keyid:95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f1:09:19:40:09:47:9a:3d:5d:c6:b3:0f:70:de:48:10:17: 07:49:bd:d9:e6:55:ca:49:7a:3c:68:b9:68:81:1d:e8:dc:db: 18:f0:c8:92:5b:a1:21:dc:ed:a9:98:ed:82:e8:cd:99:c9:7d: 91:67:95:ed:ec:d8:91:e6:eb:fe:34:32:5a:e7:fc:41:95:2f: 54:12:6b:5a:c8:3c:90:1d:08:df:5f:db:ce:ef:da:ea:6c:76: 1c:2a:a8:1e:eb:b3:18:d2:b1:84:9d:5f:7d:2e:bf:45:77:2d: 42:de:e8:c0:93:b3:85:7f:e4:3c:83:b2:7d:72:f6:c6:01:09: 1e:6c:55:da:3a:c7:b2:e7:29:2a:16:20:34:ab:b8:0a:da:9c: e6:18:16:a0:a2:8b:37:39:77:8d:2c:19:30:6f:a1:58:fa:3d: c3:b1:1c:f8:91:b0:cb:54:e3:ca:63:6b:1f:1f:eb:c9:01:c7: 38:01:8a:41:9e:3d:2f:01:d6:0a:74:5c:14:1f:47:03:7b:a0: 00:0f:4f:dc:ed:99:7e:8a:48:48:4a:1d:d2:39:14:14:66:35: 8a:39:0e:b5:e6:d6:8e:f7:b2:99:d4:0e:c2:f3:34:ff:36:14: 9e:52:a5:8b:b3:56:a2:5d:15:17:98:aa:25:0f:5e:2c:73:bf: 23:bd:20:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3RjIxMTAvBgNVBAUTKDk1RDc0NDY1ODkyQUM4MzlCQTI0NzlGQTA0NzU2QTVF MzA1RjI2M0MwHhcNMjUwODA2MjIxNDE0WhcNMjUwODEzMjIxNDE0WjAYMRYwFAYD VQQDEw02ODkzZDNiNi04MGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmEL2QJHzKt481dViugo9w2KdPG4Ze7kKCU0x5OodQsnE9BMpSPtJqVpBKGPM gU+Cy8bt5JyteFX2unJ+pIV9Da6MNxutjembaiXAefbyuh3tAl7Zubs4s0xypGGe akmD8wxf7t0JBxLDUU02aVOKT4LO9Uum/XLW9lTItQ1i5RvbDloAWV2Ay6irclkE qdAKTQR8St6D33V0hewaHAZqLnXmmrIQXcsLfb/xUa/e+nh4RmidZQy/8yYi7YjP IVQmoRHB6BTRwoH3zQkBUUUw/t+/KVZ0IK05Qa+RuQeaIFlR9qyj/HelF32H5hUT 6S+koVh3JEcj/QRGw3SUgJ/ZVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcGmQBe GhIEKnAqepOkVpESxVv7MB8GA1UdIwQYMBaAFJXXRGWJKsg5uiR5+gR1al4wXyY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGMi9CRjI3RkQ0NjQy RTgxMUVFOUJCRTY0NkNDNEY5QUUwMi9sZGRFWllrcXlEbTZKSG42QkhWcVhqQmZK ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xkZEVaWWtxeURtNkpIbjZCSFZxWGpCZkpqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdGMi9CRjI3RkQ0NjQyRTgxMUVFOUJCRTY0NkNDNEY5QUUwMi9sZGRFWllrcXlE bTZKSG42QkhWcVhqQmZKancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP8QkZQAlHmj1dxrMPcN5IEBcHSb3Z5lXKSXo8aLlogR3o3NsY8MiS W6Eh3O2pmO2C6M2ZyX2RZ5Xt7NiR5uv+NDJa5/xBlS9UEmtayDyQHQjfX9vO79rq bHYcKqge67MY0rGEnV99Lr9Fdy1C3ujAk7OFf+Q8g7J9cvbGAQkebFXaOsey5ykq FiA0q7gK2pzmGBagoos3OXeNLBkwb6FY+j3DsRz4kbDLVOPKY2sfH+vJAcc4AYpB nj0vAdYKdFwUH0cDe6AAD0/c7Zl+ikhISh3SORQUZjWKOQ615taO97KZ1A7C8zT/ NhSeUqWLs1aiXRUXmKolD14sc78jvSAv -----END CERTIFICATE-----Generated at Fri Aug 8 19:32:34 2025 by rpki-client