$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft File: lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft (raw, json) Hash identifier: GopUNVJHWRVY6VKJYslNQT8HHX85WoAF0lHzPiTNULc= Subject key identifier: 9F:BA:2C:BA:81:2A:7B:C5:9D:AB:96:79:20:2A:CC:2C:1C:5F:9F:3C Authority key identifier: 97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 Certificate issuer: /CN=A91A1C06/serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Certificate serial: 34CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft Manifest number: 34BF Signing time: Fri 08 Aug 2025 15:02:53 +0000 Manifest this update: Fri 08 Aug 2025 15:02:53 +0000 Manifest next update: Fri 15 Aug 2025 15:02:53 +0000 Files and hashes: 1: lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl (hash: FgDwlxl+lwtiAykhhN2EwVz6hnNCSHusMXxDYedWOF0=) 2: C64C7958422411EA9CA5F423C4F9AE02.roa (hash: gJwOccgnH3xfVK9Ge3NY4ACv1N9EO/ya1L5O9ulfS9A=) 3: FB50A65027B311EFBA31BB40C4F9AE02.roa (hash: lCjcuN3RSUzDTTX5oZhMnE3axtzeaFw5cyewHimqMWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13516 (0x34cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1C06, serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Validity Not Before: Aug 8 15:02:53 2025 GMT Not After : Aug 15 15:02:53 2025 GMT Subject: CN=6896119d-1913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dc:6c:f6:70:9f:be:47:36:e3:87:54:a7:54: 35:85:fc:7e:3c:7f:c4:26:ce:7b:a8:65:d9:72:d2: 32:ed:4d:b0:bb:8b:f8:96:d4:00:be:ad:d1:79:ca: 18:0a:31:08:27:40:4b:22:52:8f:9a:97:7e:08:ff: 7c:cf:8f:11:47:12:83:5c:15:f6:ea:4f:74:a1:31: 0e:bf:00:8d:f7:ad:e7:e4:2f:04:2d:cf:1e:d0:0b: 9a:d9:94:ad:7d:62:2b:92:3e:34:3a:8e:b6:4a:4e: 1e:f0:2c:ea:87:e2:77:12:d3:be:ff:0a:2f:3a:7c: cf:9c:cb:d1:25:ad:f3:dd:87:3d:59:28:a8:6e:69: 55:a0:b2:bd:92:50:36:8a:7b:f6:aa:f1:47:8a:7a: 50:83:39:07:c6:8b:f3:c2:73:5b:fd:75:46:2a:d0: 33:18:a8:a5:17:4d:99:c9:f9:91:72:89:0d:88:ff: ed:fa:73:52:4c:f0:a0:b3:0c:8d:a7:81:d2:6b:48: 73:9c:a9:90:0b:23:8b:17:4d:1d:e4:55:d2:72:97: f3:52:d7:94:c6:76:e8:f1:50:f1:4a:fe:88:da:64: 45:ff:99:64:e1:ef:ce:f0:90:f0:5b:60:dc:19:52: 2a:98:d2:00:fc:91:08:7e:57:c3:39:5c:5b:8d:df: 9c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BA:2C:BA:81:2A:7B:C5:9D:AB:96:79:20:2A:CC:2C:1C:5F:9F:3C X509v3 Authority Key Identifier: keyid:97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:27:fa:75:bc:13:4f:5f:07:54:c7:b4:02:b8:62:71:18:3d: 15:d3:e7:ae:9b:a8:47:e8:fc:39:9b:2c:9f:36:a8:f9:40:8e: 7a:7a:4e:13:bc:6f:e0:3f:8a:26:22:02:40:26:97:29:48:ae: 39:31:e2:45:26:d8:b2:31:06:a1:01:34:2a:0f:74:ef:41:fe: c7:c7:58:05:15:ab:8d:9b:55:7e:c9:b7:4c:5a:f9:b4:6d:be: 95:8d:bf:48:a7:bb:1c:06:13:ad:52:ef:2e:62:76:67:ea:bd: 36:0f:54:7c:e2:32:8e:27:df:fd:64:43:99:ed:fa:c1:59:6a: 92:c5:ea:0f:c7:5b:6f:42:02:1c:8f:0e:66:17:3e:a5:a2:21: 8e:e5:c0:eb:54:fa:04:01:de:0a:43:6f:e5:f9:e2:bd:db:fc: b8:c0:53:97:09:23:32:f2:4c:91:30:33:9e:02:21:57:94:9b: db:56:0f:ec:be:8a:e8:8b:21:28:79:09:23:f2:4e:e6:81:17: 35:38:19:39:00:9f:4b:b1:5f:7c:58:84:c5:31:02:db:6f:2d: 21:c4:e5:01:17:e0:01:1c:d9:ee:d8:04:6e:10:11:c1:0a:34: 50:56:ca:69:e0:6c:39:52:b9:04:d9:0b:50:9f:de:9a:63:ba: a9:56:03:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDMDYxMTAvBgNVBAUTKDk3Mzc3MTMwMDQ4MTlCNkI2NkZDNTZFNkVDODZCRTRE QzJFMjhFMTcwHhcNMjUwODA4MTUwMjUzWhcNMjUwODE1MTUwMjUzWjAYMRYwFAYD VQQDEw02ODk2MTE5ZC0xOTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dxs9nCfvkc244dUp1Q1hfx+PH/EJs57qGXZctIy7U2wu4v4ltQAvq3RecoY CjEIJ0BLIlKPmpd+CP98z48RRxKDXBX26k90oTEOvwCN963n5C8ELc8e0Aua2ZSt fWIrkj40Oo62Sk4e8Czqh+J3EtO+/wovOnzPnMvRJa3z3Yc9WSiobmlVoLK9klA2 inv2qvFHinpQgzkHxovzwnNb/XVGKtAzGKilF02ZyfmRcokNiP/t+nNSTPCgswyN p4HSa0hznKmQCyOLF00d5FXScpfzUteUxnbo8VDxSv6I2mRF/5lk4e/O8JDwW2Dc GVIqmNIA/JEIflfDOVxbjd+ccwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+6LLqB KnvFnauWeSAqzCwcX588MB8GA1UdIwQYMBaAFJc3cTAEgZtrZvxW5uyGvk3C4o4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUMwNi82REVBRTIxQzFE OUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0ydG1fRmJtN0lhLVRjTGlq aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6ZHhNQVNCbTJ0bV9GYm03SWEtVGNMaWpoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUMwNi82REVBRTIxQzFEOUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0y dG1fRmJtN0lhLVRjTGlqaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2J/p1vBNPXwdUx7QCuGJxGD0V0+eum6hH6Pw5myyfNqj5QI56ek4T vG/gP4omIgJAJpcpSK45MeJFJtiyMQahATQqD3TvQf7Hx1gFFauNm1V+ybdMWvm0 bb6Vjb9Ip7scBhOtUu8uYnZn6r02D1R84jKOJ9/9ZEOZ7frBWWqSxeoPx1tvQgIc jw5mFz6loiGO5cDrVPoEAd4KQ2/l+eK92/y4wFOXCSMy8kyRMDOeAiFXlJvbVg/s voroiyEoeQkj8k7mgRc1OBk5AJ9LsV98WITFMQLbby0hxOUBF+ABHNnu2ARuEBHB CjRQVspp4Gw5UrkE2QtQn96aY7qpVgPo -----END CERTIFICATE-----Generated at Sun Aug 10 04:54:56 2025 by rpki-client