$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json) Hash identifier: dxTRiNHfahcr0MrZkkGDyo0ZpBw0P9L7Hoq/mleqCUU= Subject key identifier: 74:57:9E:E6:D5:32:A8:BD:96:68:2E:7F:AB:66:73:81:27:9F:C4:F8 Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Certificate serial: 06F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft Manifest number: 06D2 Signing time: Sun 20 Sep 2026 22:18:11 +0000 Manifest this update: Sun 20 Sep 2026 22:18:10 +0000 Manifest next update: Sun 27 Sep 2026 22:18:10 +0000 Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: xUMxAHjUecuUn/x3zLL/exSSJT6nPC00QnPmBpC2wSs=) 2: ECD21166AB8411F1A790DC444511F970.roa (hash: ExjgxAT7/41xhDKMAdd+90Z1vz5zXbsrx5cyjWeI5wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1779 (0x6f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Validity Not Before: Sep 20 22:18:10 2026 GMT Not After : Sep 27 22:18:10 2026 GMT Subject: CN=6ab05ba3-b9d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6a:fe:08:f1:6d:c8:7b:4f:72:37:8b:26:78: 61:98:80:a8:15:92:b5:3a:c4:05:51:95:dc:9d:8d: 9f:01:0b:2d:67:c2:c5:31:ff:4b:33:73:5f:21:2a: c5:bf:e2:71:10:31:de:bf:32:a9:97:af:15:26:6c: 5d:19:6e:4b:32:16:0b:a1:bf:eb:ba:4b:72:aa:0f: 68:46:93:76:f7:85:a6:2d:db:98:8e:0f:6c:15:17: 12:aa:02:3c:63:af:c7:e7:68:5c:03:f4:93:0c:05: 32:18:8c:61:8a:b4:79:89:f1:97:2d:86:59:4b:51: a8:30:96:d7:3d:c8:a9:82:26:3e:22:62:83:c7:f1: ea:fb:01:60:b7:e4:06:c5:81:6f:60:4c:e2:ea:76: ab:a4:0d:19:a8:38:02:19:25:86:8e:28:fd:3d:72: 6a:4e:8f:6f:1d:99:73:39:a9:d1:d7:68:5b:4d:8c: 91:5a:02:12:7f:c6:3a:d9:a3:7d:73:de:6e:87:61: ea:1d:36:ce:3a:1d:09:82:a4:cf:26:19:08:8d:87: 6b:3d:2e:06:ff:0d:7f:cb:22:af:a7:47:b9:fc:f5: 81:bb:84:69:c9:a0:5f:92:75:6d:44:4a:42:fa:68: 8b:72:76:30:65:9c:0a:3e:52:1c:ac:70:b0:a9:2f: 55:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:57:9E:E6:D5:32:A8:BD:96:68:2E:7F:AB:66:73:81:27:9F:C4:F8 X509v3 Authority Key Identifier: keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:46:e0:ca:a9:2a:a9:da:38:d9:30:1d:f9:47:05:c4:23:9e: 61:1b:a4:7e:a8:b5:50:9c:73:93:c2:f1:0d:28:44:d5:ef:a7: 11:4e:86:6d:40:b2:02:04:b2:40:1c:40:64:a7:4e:b0:fc:28: 6c:68:30:58:2a:4c:67:aa:fc:92:24:3e:d7:18:89:36:7f:aa: 57:84:23:d9:4c:55:55:7a:63:20:23:7b:97:ea:25:79:2a:5b: 71:bb:bc:6e:8b:37:21:12:77:22:0c:de:ad:68:ea:85:96:ab: bf:b2:98:64:91:cd:fd:45:8c:63:90:5f:6f:48:60:10:1c:07: 33:91:9e:b3:ea:3e:92:9b:b5:9e:9a:43:fb:b6:75:ca:6d:d7: d6:01:de:16:f6:93:64:62:f6:0d:8b:29:b7:76:1b:86:32:29: 89:80:1a:3b:19:7e:10:58:27:a7:5f:7e:a7:b0:19:83:e7:63: 29:9b:04:5c:95:1b:87:dc:8f:76:15:36:62:93:dd:ff:93:7c: 1c:c9:f5:ad:2f:23:75:8e:3a:36:81:a7:3d:de:0d:c8:86:96: 5a:35:1d:84:44:69:fd:49:0a:de:df:ad:d4:8e:04:96:85:be: 48:e6:82:c5:0c:23:de:55:8c:50:96:f1:5a:8f:93:47:0b:5f: 49:f5:48:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND RTVEMTE3RjkwHhcNMjYwOTIwMjIxODEwWhcNMjYwOTI3MjIxODEwWjAYMRYwFAYD VQQDEw02YWIwNWJhMy1iOWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGr+CPFtyHtPcjeLJnhhmICoFZK1OsQFUZXcnY2fAQstZ8LFMf9LM3NfISrF v+JxEDHevzKpl68VJmxdGW5LMhYLob/ruktyqg9oRpN294WmLduYjg9sFRcSqgI8 Y6/H52hcA/STDAUyGIxhirR5ifGXLYZZS1GoMJbXPcipgiY+ImKDx/Hq+wFgt+QG xYFvYEzi6narpA0ZqDgCGSWGjij9PXJqTo9vHZlzOanR12hbTYyRWgISf8Y62aN9 c95uh2HqHTbOOh0JgqTPJhkIjYdrPS4G/w1/yyKvp0e5/PWBu4RpyaBfknVtREpC +miLcnYwZZwKPlIcrHCwqS9VewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHRXnubV Mqi9lmguf6tmc4Enn8T4MB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4 NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQzOS83RjI0RkZEMEM4NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1 N3VycFNFZmFZS3pPWFJGX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzUbgyqkqqdo42TAd+UcFxCOeYRukfqi1UJxzk8LxDShE1e+nEU6GbUCyAgSy QBxAZKdOsPwobGgwWCpMZ6r8kiQ+1xiJNn+qV4Qj2UxVVXpjICN7l+oleSpbcbu8 bos3IRJ3IgzerWjqhZarv7KYZJHN/UWMY5Bfb0hgEBwHM5Ges+o+kpu1nppD+7Z1 ym3X1gHeFvaTZGL2DYspt3YbhjIpiYAaOxl+EFgnp19+p7AZg+djKZsEXJUbh9yP dhU2YpPd/5N8HMn1rS8jdY46NoGnPd4NyIaWWjUdhERp/UkK3t+t1I4EloW+SOaC xQwj3lWMUJbxWo+TRwtfSfVIRg== -----END CERTIFICATE-----Generated at Mon Sep 21 17:42:00 2026 by rpki-client