$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft File: LzabRI0hcVlrosk82-JY6vMxdZQ.mft (raw, json) Hash identifier: wGeHoQ4QK+Pwns40v85sYVgkjRM5aqxZBj+Jd3zpPQ8= Subject key identifier: 7E:58:26:64:3D:F8:80:A3:C3:9E:90:DF:D5:39:AA:6F:8C:6E:7A:EC Authority key identifier: 2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94 Certificate issuer: /CN=A9161A5A/serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594 Certificate serial: 0706 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft Manifest number: 06FE Signing time: Sun 02 Nov 2025 21:55:08 +0000 Manifest this update: Sun 02 Nov 2025 21:55:08 +0000 Manifest next update: Sun 09 Nov 2025 21:55:08 +0000 Files and hashes: 1: LzabRI0hcVlrosk82-JY6vMxdZQ.crl (hash: TGgyomTt0CSgRiUXoc6mtqTAzp4j0qlKsyvk7hAbZbI=) 2: 79D611D265E711EBB6FD8A0DC4F9AE02.roa (hash: 8jITrnqODr3hbw+6QboJeBK8U7SJ4xuwPGHj3X5tTD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1798 (0x706) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A5A, serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594 Validity Not Before: Nov 2 21:55:08 2025 GMT Not After : Nov 9 21:55:08 2025 GMT Subject: CN=6907d33c-fa50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:be:76:9b:b6:56:60:82:9e:c4:80:ad:c4:82: 53:46:19:e4:a5:64:96:a6:1f:b9:b9:1e:80:1b:6b: 25:23:3d:03:2c:f1:26:7b:f6:b7:b6:c4:1f:e0:09: a2:3e:b7:f7:ad:53:ee:08:46:bd:39:bb:66:b1:3a: 5d:fa:a1:7f:ef:7f:ce:9d:a9:a6:74:a8:bf:2c:d6: d4:65:2e:a3:37:2e:65:be:b3:5f:6c:12:47:87:db: 74:01:b0:c6:c4:43:b7:dd:08:4e:f6:c5:22:1a:ab: dc:9f:88:60:09:b2:3b:4c:c3:2f:59:be:0d:6f:b2: 69:28:ad:d7:fc:4a:83:5c:a7:c3:47:45:b4:52:cf: cf:95:fe:d8:3b:a7:46:57:73:d0:83:fb:7d:ab:86: 66:1d:81:43:ca:6d:ac:a6:9b:5a:b8:30:fa:58:13: 09:16:5f:2d:97:a5:2c:b2:b6:8a:26:88:c9:da:01: 9b:64:e1:9f:f9:43:76:dc:3f:70:d4:31:8f:9a:b7: 4e:25:e7:2a:ba:5f:07:0b:3d:65:11:8d:5d:d4:0c: bb:17:b6:1f:00:43:6d:fe:ec:f9:07:0b:a9:ae:e0: 5b:af:b8:0e:4e:84:c0:a9:8c:3c:d5:08:33:58:b0: 6c:26:60:af:9a:c7:91:66:56:2a:4e:52:83:62:e5: f5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:58:26:64:3D:F8:80:A3:C3:9E:90:DF:D5:39:AA:6F:8C:6E:7A:EC X509v3 Authority Key Identifier: keyid:2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:57:6c:16:e4:9d:ea:af:80:76:03:5f:0a:d5:05:95:bd:ee: 84:ab:cb:fe:f5:bb:86:2c:b9:36:85:0a:0b:c7:22:b0:53:15: ee:df:80:dc:4c:e4:42:5f:ea:63:d4:f2:c2:82:6a:c0:d1:16: 86:62:12:86:4e:65:39:d1:10:18:8c:75:b1:a2:ed:dd:d7:84: 9f:e5:0e:0c:76:0e:72:06:d4:85:9d:ad:b5:1c:e4:fc:b7:7f: d0:6d:5f:c5:23:bb:66:d0:e6:e6:14:18:d4:f7:2d:6c:93:75: 4b:72:ed:8c:b6:2e:8f:f8:71:45:98:58:8c:9d:8e:ee:3c:4b: f6:36:74:41:48:bf:11:8d:0b:1a:e3:9f:38:82:a6:f8:a0:2c: 8d:39:22:e4:37:e4:b7:f5:60:27:a8:a7:ff:20:8c:7d:72:24: da:47:bd:a2:91:09:01:41:22:e0:e7:e1:75:09:72:a5:3f:d9: 79:f1:1f:4e:12:d7:ed:54:5b:d8:25:86:cb:e3:6a:66:ff:28: 9c:ea:e8:ba:ec:21:6b:6e:5c:e6:94:0a:f6:70:02:ee:e2:fe: b1:10:f8:7f:e4:43:1f:8b:92:68:51:a8:82:3f:9a:fa:af:12: d2:f1:16:33:27:bb:85:46:e0:cb:7a:78:31:21:d1:86:be:d6: e9:0e:96:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFBNUExMTAvBgNVBAUTKDJGMzY5QjQ0OEQyMTcxNTk2QkEyQzkzQ0RCRTI1OEVB RjMzMTc1OTQwHhcNMjUxMTAyMjE1NTA4WhcNMjUxMTA5MjE1NTA4WjAYMRYwFAYD VQQDEw02OTA3ZDMzYy1mYTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmr52m7ZWYIKexICtxIJTRhnkpWSWph+5uR6AG2slIz0DLPEme/a3tsQf4Ami Prf3rVPuCEa9ObtmsTpd+qF/73/OnammdKi/LNbUZS6jNy5lvrNfbBJHh9t0AbDG xEO33QhO9sUiGqvcn4hgCbI7TMMvWb4Nb7JpKK3X/EqDXKfDR0W0Us/Plf7YO6dG V3PQg/t9q4ZmHYFDym2spptauDD6WBMJFl8tl6UssraKJojJ2gGbZOGf+UN23D9w 1DGPmrdOJecqul8HCz1lEY1d1Ay7F7YfAENt/uz5BwupruBbr7gOToTAqYw81Qgz WLBsJmCvmseRZlYqTlKDYuX1WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5YJmQ9 +ICjw56Q39U5qm+MbnrsMB8GA1UdIwQYMBaAFC82m0SNIXFZa6LJPNviWOrzMXWU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUE1QS9COEJCNTY4RTY1 RTUxMUVCQTI1RjkyMEJDNEY5QUUwMi9MemFiUkkwaGNWbHJvc2s4Mi1KWTZ2TXhk WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6YWJSSTBoY1Zscm9zazgyLUpZNnZNeGRaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUE1QS9COEJCNTY4RTY1RTUxMUVCQTI1RjkyMEJDNEY5QUUwMi9MemFiUkkwaGNW bHJvc2s4Mi1KWTZ2TXhkWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSV2wW5J3qr4B2A18K1QWVve6Eq8v+9buGLLk2hQoLxyKwUxXu34Dc TORCX+pj1PLCgmrA0RaGYhKGTmU50RAYjHWxou3d14Sf5Q4Mdg5yBtSFna21HOT8 t3/QbV/FI7tm0ObmFBjU9y1sk3VLcu2Mti6P+HFFmFiMnY7uPEv2NnRBSL8RjQsa 4584gqb4oCyNOSLkN+S39WAnqKf/IIx9ciTaR72ikQkBQSLg5+F1CXKlP9l58R9O EtftVFvYJYbL42pm/yic6ui67CFrblzmlAr2cALu4v6xEPh/5EMfi5JoUaiCP5r6 rxLS8RYzJ7uFRuDLengxIdGGvtbpDpYT -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:02 2025 by rpki-client