$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json) Hash identifier: OyI/DqxDxGMiOgFuKvVhldkIdwhtk+YE9Mm0/dExckQ= Subject key identifier: 89:E5:72:F4:42:E5:A3:EC:79:CC:44:DF:02:88:EE:3C:80:54:2D:38 Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Certificate serial: 067F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft Manifest number: 0663 Signing time: Sun 01 Mar 2026 23:08:51 +0000 Manifest this update: Sun 01 Mar 2026 23:08:50 +0000 Manifest next update: Sun 08 Mar 2026 23:08:50 +0000 Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: WhrrfePTINkkvFyV7VwjTpvyej42p+tEE4jsykEWyP4=) 2: 33B3C60425FD11EDA4097785C4F9AE02.roa (hash: YmHPckT0dIFNHqb1yogDfQ9UG6heaZWXlhIbS1BD/e8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1663 (0x67f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Validity Not Before: Mar 1 23:08:50 2026 GMT Not After : Mar 8 23:08:50 2026 GMT Subject: CN=69a4c703-d228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b6:59:62:67:e5:d0:cf:f5:94:4e:52:e8:85: 3a:b3:cc:aa:04:1f:92:ba:19:30:97:37:b1:2d:6a: 76:67:ed:f2:31:2c:34:06:5c:45:5a:0a:9e:c5:0f: 21:4b:b2:5e:06:ac:64:46:ba:a6:92:65:6c:44:f7: f1:ed:92:3a:68:71:c6:82:14:04:70:7c:a5:d9:45: e9:61:ee:10:08:55:54:66:6e:3e:6f:94:3e:6a:88: 12:9a:63:94:8f:06:12:00:f1:a7:0f:c5:6e:d7:f4: 42:8e:a3:d1:21:65:21:75:10:77:2b:08:7b:c2:9b: b0:b4:2f:70:9a:80:24:d7:f4:23:e8:95:cb:f9:8e: 2b:b1:3a:d9:64:61:1e:2a:5d:69:2d:4b:67:12:4d: a3:eb:c5:7a:5f:0a:a1:0f:ef:99:a9:3c:b3:49:c9: bb:f4:ef:4f:d3:53:22:87:0b:28:87:64:fe:4e:2d: 69:31:c4:cd:22:c1:ee:4a:e9:d2:2e:6f:0c:08:e5: c3:d0:13:30:42:91:6b:6e:fe:f3:4e:74:26:6a:9d: 2e:f8:a5:df:e2:86:c2:f4:23:22:c0:a9:c8:d5:20: b3:76:97:69:d1:b6:e9:db:94:54:e4:61:2e:15:08: 07:87:3f:c2:63:90:0b:5d:6b:54:e7:30:a2:68:c1: 79:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E5:72:F4:42:E5:A3:EC:79:CC:44:DF:02:88:EE:3C:80:54:2D:38 X509v3 Authority Key Identifier: keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:d9:84:99:92:d6:1a:b4:7b:97:6d:69:cc:7d:9d:03:cf:03: b9:80:69:ec:a7:a5:82:7e:8c:36:8c:c1:b4:bb:9f:50:19:93: a9:a1:02:95:cd:9e:9f:02:9a:82:bb:bf:ea:4e:2a:b9:fc:98: ed:1e:39:bd:1e:66:58:6c:e2:e2:bd:50:97:62:81:f8:8e:ab: 87:25:9c:3d:65:07:4e:cf:64:b8:01:1b:5d:8c:2a:43:06:f5: e9:d8:fb:95:4a:9f:29:a6:30:54:9b:4f:cc:26:2f:83:ce:ac: 00:ab:95:a4:72:a3:73:e8:2b:63:24:b5:8d:36:bb:a6:bb:6d: 88:9a:b0:f6:83:46:bf:71:06:dd:1e:b8:2b:00:6a:65:81:e7: 73:e2:7f:7a:d0:00:13:24:84:42:fc:ff:31:93:c9:4b:b7:90: 38:16:31:28:ec:d7:87:35:bb:bb:66:76:31:08:3a:99:08:be: 69:75:a3:54:b4:ec:e4:ae:70:b9:db:71:e4:d9:29:79:0b:da: 17:da:f3:66:6e:a5:cb:7e:c7:96:00:cf:00:47:48:1c:18:5f: 2f:ee:9b:34:60:65:fb:51:fd:98:ef:50:99:4b:42:67:d0:16: b9:5a:77:a1:d3:a7:13:86:e8:71:07:5d:ae:ac:cb:ad:aa:6a: db:44:41:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND RTVEMTE3RjkwHhcNMjYwMzAxMjMwODUwWhcNMjYwMzA4MjMwODUwWjAYMRYwFAYD VQQDEw02OWE0YzcwMy1kMjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8LZZYmfl0M/1lE5S6IU6s8yqBB+SuhkwlzexLWp2Z+3yMSw0BlxFWgqexQ8h S7JeBqxkRrqmkmVsRPfx7ZI6aHHGghQEcHyl2UXpYe4QCFVUZm4+b5Q+aogSmmOU jwYSAPGnD8Vu1/RCjqPRIWUhdRB3Kwh7wpuwtC9wmoAk1/Qj6JXL+Y4rsTrZZGEe Kl1pLUtnEk2j68V6XwqhD++ZqTyzScm79O9P01Mihwsoh2T+Ti1pMcTNIsHuSunS Lm8MCOXD0BMwQpFrbv7zTnQmap0u+KXf4obC9CMiwKnI1SCzdpdp0bbp25RU5GEu FQgHhz/CY5ALXWtU5zCiaMF5ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFInlcvRC 5aPsecxE3wKI7jyAVC04MB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4 NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQzOS83RjI0RkZEMEM4NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1 N3VycFNFZmFZS3pPWFJGX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA9mEmZLWGrR7l21pzH2dA88DuYBp7Kelgn6MNozBtLufUBmTqaEClc2enwKa gru/6k4qufyY7R45vR5mWGzi4r1Ql2KB+I6rhyWcPWUHTs9kuAEbXYwqQwb16dj7 lUqfKaYwVJtPzCYvg86sAKuVpHKjc+grYyS1jTa7prttiJqw9oNGv3EG3R64KwBq ZYHnc+J/etAAEySEQvz/MZPJS7eQOBYxKOzXhzW7u2Z2MQg6mQi+aXWjVLTs5K5w udtx5NkpeQvaF9rzZm6ly37HlgDPAEdIHBhfL+6bNGBl+1H9mO9QmUtCZ9AWuVp3 odOnE4bocQddrqzLrapq20RB3Q== -----END CERTIFICATE-----Generated at Mon Mar 2 07:27:07 2026 by rpki-client