$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft File: LzabRI0hcVlrosk82-JY6vMxdZQ.mft (raw, json) Hash identifier: vNmZt6VinbT3IoyR254PGKn5uhscrMHkxvfLUyryVaw= Subject key identifier: 57:67:1D:D2:8C:B8:D7:5D:50:82:C4:EC:34:9F:79:A8:AD:5C:16:1B Authority key identifier: 2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94 Certificate issuer: /CN=A9161A5A/serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594 Certificate serial: 06DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft Manifest number: 06D5 Signing time: Tue 12 Aug 2025 22:25:43 +0000 Manifest this update: Tue 12 Aug 2025 22:25:42 +0000 Manifest next update: Tue 19 Aug 2025 22:25:42 +0000 Files and hashes: 1: LzabRI0hcVlrosk82-JY6vMxdZQ.crl (hash: /aDxKjjS+44tdThpl4OslM0mHlkFoiqnVEoBaOLdL4w=) 2: 79D611D265E711EBB6FD8A0DC4F9AE02.roa (hash: 8jITrnqODr3hbw+6QboJeBK8U7SJ4xuwPGHj3X5tTD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 22:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1757 (0x6dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A5A, serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594 Validity Not Before: Aug 12 22:25:42 2025 GMT Not After : Aug 19 22:25:42 2025 GMT Subject: CN=689bbf67-f7a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7d:11:a1:62:83:81:f9:b8:e5:b6:99:94:49: b6:b5:5a:7f:2b:43:f8:b6:b1:18:29:e4:cc:be:c0: 85:a9:0b:98:cb:77:f3:c8:53:aa:7e:4d:c7:6f:3b: c5:54:e8:bf:7b:cb:36:a3:7d:d3:9d:7b:86:56:59: e5:e3:39:18:08:2e:31:6e:bf:c6:bd:69:03:a9:07: 48:11:df:c8:8a:bf:9b:0d:cb:36:1d:16:2b:df:3b: 92:85:52:8b:91:47:d1:53:6a:1b:62:10:0a:55:5d: a1:7d:25:d6:c5:33:95:84:2a:08:c6:d9:79:9e:3a: dd:41:96:b5:f1:fd:39:5d:cc:e5:ae:0d:86:fe:1a: 07:bc:24:dd:d7:0e:52:df:37:d0:0a:01:0e:60:23: 93:50:c2:55:64:1d:9c:a1:dc:c5:eb:33:86:f9:06: 9f:56:b9:8b:28:f0:59:66:f9:68:7a:63:fd:c4:9a: 6f:92:de:3c:b0:d5:d2:20:5d:27:d7:e4:f1:a9:c5: c4:2e:77:9a:a0:e5:01:de:88:57:44:db:c4:7d:68: e7:88:f2:45:bb:08:3a:75:cd:87:dd:79:e8:c5:57: e7:42:e9:5e:25:40:c1:ca:64:7b:9b:56:32:93:c5: 4c:b0:29:2d:05:44:82:78:00:8c:44:4e:ef:94:6a: 26:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:67:1D:D2:8C:B8:D7:5D:50:82:C4:EC:34:9F:79:A8:AD:5C:16:1B X509v3 Authority Key Identifier: keyid:2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:e5:6b:73:c8:aa:aa:a5:43:d0:db:d2:07:6b:98:3c:51:61: 42:8b:f3:dd:85:ed:c0:25:e2:9a:65:c6:80:82:ee:fd:97:86: a7:61:d2:68:42:ee:f5:ce:e2:94:92:f7:be:56:9f:80:56:ea: ea:90:c2:a0:2f:11:f6:a9:93:7a:13:4f:d5:b6:b2:e6:98:87: c0:95:5b:fa:dc:39:42:6f:d3:cf:c4:28:61:64:f8:53:48:61: a1:e4:b0:55:c2:d7:73:e3:69:87:1b:5b:b6:f4:fa:22:e6:9c: 3c:6b:cd:8b:98:18:0b:ff:72:53:dd:0f:55:9a:e8:99:cd:73: e2:c8:a0:c9:a3:6a:c7:98:30:d2:e3:6c:7e:9c:a5:59:86:87: 88:75:d1:f4:da:34:10:9e:1b:ff:dd:e7:20:57:d2:73:73:6b: 22:22:72:66:cf:1e:f4:b0:54:ee:13:53:b6:a1:bb:4b:44:9d: 12:39:bf:29:24:17:27:fc:44:d0:b2:69:fb:13:57:f8:dc:ad: ea:30:a5:49:70:0c:d2:4e:bc:66:81:10:77:76:16:e1:2f:63: 2a:48:19:ca:ac:3d:41:bd:52:66:18:95:5b:6f:8b:42:75:02: db:a2:a8:46:a4:1c:7e:9b:37:7b:36:e0:3e:25:e0:5e:06:2e: c2:b8:8f:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFBNUExMTAvBgNVBAUTKDJGMzY5QjQ0OEQyMTcxNTk2QkEyQzkzQ0RCRTI1OEVB RjMzMTc1OTQwHhcNMjUwODEyMjIyNTQyWhcNMjUwODE5MjIyNTQyWjAYMRYwFAYD VQQDEw02ODliYmY2Ny1mN2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApX0RoWKDgfm45baZlEm2tVp/K0P4trEYKeTMvsCFqQuYy3fzyFOqfk3HbzvF VOi/e8s2o33TnXuGVlnl4zkYCC4xbr/GvWkDqQdIEd/Iir+bDcs2HRYr3zuShVKL kUfRU2obYhAKVV2hfSXWxTOVhCoIxtl5njrdQZa18f05Xczlrg2G/hoHvCTd1w5S 3zfQCgEOYCOTUMJVZB2codzF6zOG+QafVrmLKPBZZvloemP9xJpvkt48sNXSIF0n 1+TxqcXELneaoOUB3ohXRNvEfWjniPJFuwg6dc2H3XnoxVfnQuleJUDBymR7m1Yy k8VMsCktBUSCeACMRE7vlGom4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdnHdKM uNddUILE7DSfeaitXBYbMB8GA1UdIwQYMBaAFC82m0SNIXFZa6LJPNviWOrzMXWU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUE1QS9COEJCNTY4RTY1 RTUxMUVCQTI1RjkyMEJDNEY5QUUwMi9MemFiUkkwaGNWbHJvc2s4Mi1KWTZ2TXhk WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6YWJSSTBoY1Zscm9zazgyLUpZNnZNeGRaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUE1QS9COEJCNTY4RTY1RTUxMUVCQTI1RjkyMEJDNEY5QUUwMi9MemFiUkkwaGNW bHJvc2s4Mi1KWTZ2TXhkWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB05WtzyKqqpUPQ29IHa5g8UWFCi/Pdhe3AJeKaZcaAgu79l4anYdJo Qu71zuKUkve+Vp+AVurqkMKgLxH2qZN6E0/VtrLmmIfAlVv63DlCb9PPxChhZPhT SGGh5LBVwtdz42mHG1u29Poi5pw8a82LmBgL/3JT3Q9VmuiZzXPiyKDJo2rHmDDS 42x+nKVZhoeIddH02jQQnhv/3ecgV9Jzc2siInJmzx70sFTuE1O2obtLRJ0SOb8p JBcn/ETQsmn7E1f43K3qMKVJcAzSTrxmgRB3dhbhL2MqSBnKrD1BvVJmGJVbb4tC dQLboqhGpBx+mzd7NuA+JeBeBi7CuI++ -----END CERTIFICATE-----Generated at Wed Aug 13 05:33:55 2025 by rpki-client