$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json) Hash identifier: 2+nHY6jGf2R7s2YMq5zHcc3wlsQxa5UVsAXgsYdP7RY= Subject key identifier: 45:65:67:92:03:15:42:80:86:77:A0:1B:7E:CF:99:B3:E2:EA:46:B7 Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Certificate serial: 05FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft Manifest number: 05DF Signing time: Mon 16 Jun 2025 22:46:20 +0000 Manifest this update: Mon 16 Jun 2025 22:46:19 +0000 Manifest next update: Mon 23 Jun 2025 22:46:19 +0000 Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: ayBXkJPvWJkQi0Rr5ZpJQgRRZ31U6ogY+tTBI3CdweY=) 2: 33B3C60425FD11EDA4097785C4F9AE02.roa (hash: YmHPckT0dIFNHqb1yogDfQ9UG6heaZWXlhIbS1BD/e8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 22:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1531 (0x5fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Validity Not Before: Jun 16 22:46:19 2025 GMT Not After : Jun 23 22:46:19 2025 GMT Subject: CN=68509ebb-4d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:76:23:c5:10:90:1b:5f:11:bc:e0:24:1f:6d: d9:f0:ba:d2:8b:4e:bf:db:c1:60:59:f3:6f:42:c4: 15:e6:f6:0c:56:35:f3:c7:8b:81:a5:a6:b3:5b:70: 4f:68:55:8c:7f:db:e7:b4:97:fc:cc:c5:c6:6d:4e: fa:0b:6f:5b:aa:03:12:d0:8d:ac:23:2f:c5:e5:58: 10:3b:75:61:08:b5:07:5b:62:1f:81:f8:95:a9:71: 13:20:43:87:c0:c1:a7:55:a5:e0:4a:82:f9:3d:4a: fa:3a:e5:15:dd:7a:7c:d4:de:c3:93:5b:e2:3a:be: 6a:81:06:64:65:d2:ad:81:0c:10:c8:c7:ec:84:12: 8f:fc:9b:0a:df:47:ed:a5:95:aa:d0:b7:96:7b:92: e2:50:b5:d7:49:a2:09:a2:1d:da:0a:48:ba:5c:42: 65:b0:06:37:ab:a1:43:71:f3:e8:87:e8:35:88:e3: 57:15:36:1c:a5:22:02:33:31:d6:35:9d:d9:0d:48: b8:60:f8:3b:e4:2d:ae:d3:70:93:3b:3d:7e:a7:a3: 7f:51:af:99:84:c1:29:d0:c9:c4:1d:e8:7c:9a:95: 74:b1:ca:8c:5f:8e:19:bb:8e:24:aa:90:1c:5a:9f: dd:ed:84:7b:91:b8:2d:dd:a5:8c:cc:6f:51:37:20: c0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:65:67:92:03:15:42:80:86:77:A0:1B:7E:CF:99:B3:E2:EA:46:B7 X509v3 Authority Key Identifier: keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:81:36:eb:88:fc:03:4f:ee:a9:32:84:70:59:2f:52:62:a2: a8:b3:e9:22:30:63:87:a6:a5:1d:67:0d:1b:cb:5a:ea:07:00: d6:3d:8e:d7:a2:a3:17:45:8d:61:40:aa:1a:8c:66:22:b0:1b: da:46:af:10:2e:5b:22:e4:2d:1d:4b:63:d7:64:0b:24:a8:6a: b2:2b:34:ca:25:22:1b:9d:42:9d:dd:78:32:8e:20:0e:3e:4e: 4d:62:d4:e9:17:9f:88:03:dd:8b:4c:af:9e:25:7c:68:3d:99: eb:93:8c:ef:8d:a4:80:98:34:7c:82:b3:47:b5:78:57:27:9d: e5:e3:7a:9a:05:d9:98:db:25:a6:71:c6:2d:68:bb:9f:08:77: 86:8b:93:0d:35:e6:52:60:f2:6d:26:44:7c:ce:41:58:f8:9a: c3:ee:8a:93:4e:16:6d:40:5d:39:9a:89:dd:5f:a5:5a:ea:52: 42:6e:86:4a:6d:56:74:8a:cf:4a:69:15:af:cf:8b:dd:65:97: be:30:f0:70:04:35:14:2f:c9:99:3b:95:d7:71:12:b0:62:76: 9a:23:8d:f9:0d:1d:51:60:40:dd:f3:65:76:8d:89:6f:60:56: 95:c2:de:38:45:78:9c:5a:61:48:a5:6d:57:b8:bb:2a:15:47: bf:4e:c0:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND RTVEMTE3RjkwHhcNMjUwNjE2MjI0NjE5WhcNMjUwNjIzMjI0NjE5WjAYMRYwFAYD VQQDEw02ODUwOWViYi00ZDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4XYjxRCQG18RvOAkH23Z8LrSi06/28FgWfNvQsQV5vYMVjXzx4uBpaazW3BP aFWMf9vntJf8zMXGbU76C29bqgMS0I2sIy/F5VgQO3VhCLUHW2IfgfiVqXETIEOH wMGnVaXgSoL5PUr6OuUV3Xp81N7Dk1viOr5qgQZkZdKtgQwQyMfshBKP/JsK30ft pZWq0LeWe5LiULXXSaIJoh3aCki6XEJlsAY3q6FDcfPoh+g1iONXFTYcpSICMzHW NZ3ZDUi4YPg75C2u03CTOz1+p6N/Ua+ZhMEp0MnEHeh8mpV0scqMX44Zu44kqpAc Wp/d7YR7kbgt3aWMzG9RNyDATwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVlZ5ID FUKAhnegG37PmbPi6ka3MB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4 NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQzOS83RjI0RkZEMEM4NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1 N3VycFNFZmFZS3pPWFJGX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXgTbriPwDT+6pMoRwWS9SYqKos+kiMGOHpqUdZw0by1rqBwDWPY7X oqMXRY1hQKoajGYisBvaRq8QLlsi5C0dS2PXZAskqGqyKzTKJSIbnUKd3XgyjiAO Pk5NYtTpF5+IA92LTK+eJXxoPZnrk4zvjaSAmDR8grNHtXhXJ53l43qaBdmY2yWm ccYtaLufCHeGi5MNNeZSYPJtJkR8zkFY+JrD7oqTThZtQF05mondX6Va6lJCboZK bVZ0is9KaRWvz4vdZZe+MPBwBDUUL8mZO5XXcRKwYnaaI435DR1RYEDd82V2jYlv YFaVwt44RXicWmFIpW1XuLsqFUe/TsAX -----END CERTIFICATE-----Generated at Wed Jun 18 04:08:35 2025 by rpki-client