$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft File: lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft (raw, json) Hash identifier: LeG7JZcsi6FZ9bOzyC98ICXHx6vzcm5K+82EL4lyNW0= Subject key identifier: 52:A0:75:B0:23:8B:90:90:0E:B9:FE:DE:6A:D1:80:E5:B6:51:EC:39 Authority key identifier: 97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 Certificate issuer: /CN=A91A1C06/serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Certificate serial: 3504 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft Manifest number: 34F4 Signing time: Tue 04 Nov 2025 15:02:54 +0000 Manifest this update: Tue 04 Nov 2025 15:02:53 +0000 Manifest next update: Tue 11 Nov 2025 15:02:53 +0000 Files and hashes: 1: lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl (hash: fIINBFByfSajV2H3Zb2Uac3Sb6L/y92knXFvP+F4jLg=) 2: F3E1B79CB8F811F08ABED010C4F9AE02.roa (hash: qTLM8eG8Thxnpxo0s7eJeNTTRZyeyHiU6+kqq9/Mj1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13572 (0x3504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1C06, serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Validity Not Before: Nov 4 15:02:53 2025 GMT Not After : Nov 11 15:02:53 2025 GMT Subject: CN=690a159d-c3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4e:13:5d:95:c1:cb:90:9a:38:ac:1b:3b:69: e6:ce:5a:10:cd:5d:c6:a1:7d:ec:7d:cb:d4:3d:5e: 30:13:86:8d:1f:ea:05:e9:d3:e0:83:6a:b1:66:14: 56:0a:66:4b:2e:bb:0f:b2:99:f5:93:e6:d3:c3:4d: 3a:97:f3:ac:33:ea:16:93:16:f5:ef:a5:87:e6:8d: 9f:6a:fc:7a:f3:d7:36:43:7f:e9:6d:ef:19:0b:b5: a8:4e:16:01:6e:f4:fc:d1:f0:e1:2b:99:b5:63:aa: aa:10:be:32:15:7f:94:81:ff:c6:e6:b0:ae:4a:34: e4:af:a6:f0:63:07:a1:26:47:3d:a2:09:4e:8b:b9: ba:0e:d6:33:9e:6a:bf:d1:a5:bd:dd:b5:93:7f:e3: 94:c5:09:3a:a1:2d:e5:2e:bc:9e:97:58:83:48:20: 03:27:a5:6d:5b:55:20:0f:92:f2:54:37:f1:af:ed: c6:77:e4:4e:dd:66:fe:0f:94:7c:cf:c0:f8:3e:3b: 6c:9c:60:70:b7:3f:ff:f6:4f:18:2a:f6:2c:ef:84: 9b:6b:9d:64:df:09:80:c4:6a:16:31:5c:ac:ed:08: 12:78:cc:10:0f:db:f6:97:84:c5:06:51:45:50:bb: 2a:0d:47:01:df:6b:0d:34:33:44:a7:2e:40:ab:c1: 22:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A0:75:B0:23:8B:90:90:0E:B9:FE:DE:6A:D1:80:E5:B6:51:EC:39 X509v3 Authority Key Identifier: keyid:97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:93:dc:d1:13:89:87:f4:b2:b3:a7:e3:35:94:c0:06:c3:a7: 64:3b:b9:10:1a:6a:13:2d:cc:7b:4f:d1:8a:20:97:cc:94:7c: fd:20:cf:d9:0b:a0:d6:6b:00:07:95:cb:ad:fe:0c:73:ee:7b: eb:6e:80:bb:2c:03:4d:b6:68:8c:c7:98:4c:64:46:8e:dd:47: b6:24:4f:43:4f:46:71:e0:a2:97:34:2a:99:ed:16:e6:57:f9: ef:06:d8:d7:14:7d:46:a9:4d:3f:57:13:04:c5:3d:57:f3:bd: c1:f4:b1:72:47:bf:30:47:94:dc:44:d0:fb:87:bf:88:95:7f: 10:47:19:8a:a3:86:25:6f:24:e6:48:42:92:ac:d8:37:aa:3c: 22:98:d4:7b:f9:68:1d:70:67:d5:c1:c2:ac:b7:dd:61:80:ff: 08:56:0f:b5:60:c4:c6:2e:db:fd:f9:3e:9e:ec:ea:87:8a:6b: 94:0d:91:90:05:df:85:fe:3b:2e:bf:46:43:5b:5e:bf:15:87: 5b:bd:9a:01:38:50:85:ba:65:d8:d8:62:16:fa:72:c3:00:49: 30:86:ed:d2:05:52:6b:86:56:28:04:65:45:b9:ac:60:d1:87: 08:52:71:66:a6:db:0c:33:1c:d5:e2:02:bb:19:43:eb:9c:81: 9c:44:40:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDMDYxMTAvBgNVBAUTKDk3Mzc3MTMwMDQ4MTlCNkI2NkZDNTZFNkVDODZCRTRE QzJFMjhFMTcwHhcNMjUxMTA0MTUwMjUzWhcNMjUxMTExMTUwMjUzWjAYMRYwFAYD VQQDEw02OTBhMTU5ZC1jM2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvk4TXZXBy5CaOKwbO2nmzloQzV3GoX3sfcvUPV4wE4aNH+oF6dPgg2qxZhRW CmZLLrsPspn1k+bTw006l/OsM+oWkxb176WH5o2favx689c2Q3/pbe8ZC7WoThYB bvT80fDhK5m1Y6qqEL4yFX+Ugf/G5rCuSjTkr6bwYwehJkc9oglOi7m6DtYznmq/ 0aW93bWTf+OUxQk6oS3lLryel1iDSCADJ6VtW1UgD5LyVDfxr+3Gd+RO3Wb+D5R8 z8D4PjtsnGBwtz//9k8YKvYs74Sba51k3wmAxGoWMVys7QgSeMwQD9v2l4TFBlFF ULsqDUcB32sNNDNEpy5Aq8Ei6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKgdbAj i5CQDrn+3mrRgOW2Uew5MB8GA1UdIwQYMBaAFJc3cTAEgZtrZvxW5uyGvk3C4o4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUMwNi82REVBRTIxQzFE OUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0ydG1fRmJtN0lhLVRjTGlq aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6ZHhNQVNCbTJ0bV9GYm03SWEtVGNMaWpoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUMwNi82REVBRTIxQzFEOUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0y dG1fRmJtN0lhLVRjTGlqaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/k9zRE4mH9LKzp+M1lMAGw6dkO7kQGmoTLcx7T9GKIJfMlHz9IM/Z C6DWawAHlcut/gxz7nvrboC7LANNtmiMx5hMZEaO3Ue2JE9DT0Zx4KKXNCqZ7Rbm V/nvBtjXFH1GqU0/VxMExT1X873B9LFyR78wR5TcRND7h7+IlX8QRxmKo4YlbyTm SEKSrNg3qjwimNR7+WgdcGfVwcKst91hgP8IVg+1YMTGLtv9+T6e7OqHimuUDZGQ Bd+F/jsuv0ZDW16/FYdbvZoBOFCFumXY2GIW+nLDAEkwhu3SBVJrhlYoBGVFuaxg 0YcIUnFmptsMMxzV4gK7GUPrnIGcREBH -----END CERTIFICATE-----Generated at Wed Nov 5 19:17:09 2025 by rpki-client