$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json) Hash identifier: SlzZzEUAYATaXNrGqC+imCsEAah2C3q/jVFFsTKTqpc= Subject key identifier: 76:B3:63:1B:52:5C:F9:B9:A0:2F:C5:E0:36:35:C4:60:4D:37:75:D6 Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Certificate serial: 0642 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft Manifest number: 0626 Signing time: Tue 04 Nov 2025 22:59:03 +0000 Manifest this update: Tue 04 Nov 2025 22:59:02 +0000 Manifest next update: Tue 11 Nov 2025 22:59:02 +0000 Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: TClvUK81aZdZ+MAiJw1238OuXtR9CQNHdanQyhK9wE4=) 2: 33B3C60425FD11EDA4097785C4F9AE02.roa (hash: YmHPckT0dIFNHqb1yogDfQ9UG6heaZWXlhIbS1BD/e8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1602 (0x642) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Validity Not Before: Nov 4 22:59:02 2025 GMT Not After : Nov 11 22:59:02 2025 GMT Subject: CN=690a8537-104d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:39:c7:03:34:fc:f5:ed:e5:6c:77:64:e9:68: d8:d1:19:89:11:e8:93:49:9e:90:2f:be:26:0d:f5: d1:76:a2:8a:fc:64:ee:22:04:50:dc:a1:ec:71:f4: 31:7b:84:be:ec:f0:e6:ec:4b:7b:ce:78:15:5b:97: 9d:24:3f:2d:87:af:84:9f:fe:39:4d:2b:c9:a3:d6: 54:a6:d0:37:dd:1c:6c:96:b3:93:d7:5b:16:36:4d: 18:63:40:31:10:11:65:34:20:84:85:0e:0d:4f:72: 12:a6:49:ad:fe:a5:9d:d2:71:32:f8:25:5c:a1:16: 03:28:26:93:52:a6:42:31:13:97:ca:ff:de:47:4b: 36:51:a7:41:67:34:06:c7:b2:a9:de:c3:77:03:b7: b0:b1:88:1a:59:39:17:d1:93:9b:b9:9c:40:05:77: 03:5e:f7:ad:de:f6:78:95:2d:b9:d5:6c:46:05:ad: 3f:c2:fb:c1:87:58:c7:bd:6b:0b:46:20:fe:7e:43: 11:48:a3:55:48:7c:a3:b4:aa:ca:95:4a:21:b8:b9: d6:1d:39:50:37:75:ae:5f:a3:ab:99:5b:ac:1b:07: a6:d7:33:48:48:a5:08:48:ec:9a:32:2f:08:b3:be: f3:39:3a:d1:5d:b2:97:54:c3:ad:67:97:d4:dd:ad: 2c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B3:63:1B:52:5C:F9:B9:A0:2F:C5:E0:36:35:C4:60:4D:37:75:D6 X509v3 Authority Key Identifier: keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:36:f9:e6:d8:86:2f:66:3c:98:c2:e0:25:e1:05:e2:eb:8d: ef:8d:87:56:aa:e8:b0:6a:f1:db:02:ab:cb:1f:96:ad:36:c7: 48:21:01:0d:ab:dd:92:98:fd:ed:ba:13:ef:05:61:47:40:0d: 7a:d5:ef:1c:76:63:43:18:22:a6:99:d0:98:82:b0:4e:54:5a: b5:0f:9a:db:0a:8d:2d:12:b1:61:43:55:f2:41:44:38:51:2b: 84:60:99:2b:d1:41:c6:ce:ed:a2:ba:5b:39:36:b9:0e:29:d1: da:1e:32:aa:3b:e6:2d:4f:b5:84:d7:f3:75:95:a1:76:f7:a3: 99:f9:bb:32:64:c8:fb:11:e7:e1:77:9c:b8:05:d3:cc:c9:7e: cd:07:6b:a1:64:c2:f0:29:22:fb:8f:ff:45:47:28:b5:2d:a6: 0d:e7:91:67:ad:9b:72:64:fb:ae:ce:ac:09:d4:cf:b1:9e:02: 62:69:4f:a9:93:86:f7:49:82:71:09:e0:8f:3d:60:e6:a1:3b: 8b:b4:44:ae:96:7b:58:30:02:58:9d:c9:77:9f:74:b1:e4:20: 1b:25:25:c2:f6:34:8f:d1:2f:3e:64:b1:48:aa:af:c7:fd:77: 1f:70:53:6b:3c:ea:9d:25:fb:f9:aa:9e:bd:a8:0a:b6:e7:00: 09:1b:55:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND RTVEMTE3RjkwHhcNMjUxMTA0MjI1OTAyWhcNMjUxMTExMjI1OTAyWjAYMRYwFAYD VQQDEw02OTBhODUzNy0xMDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwznHAzT89e3lbHdk6WjY0RmJEeiTSZ6QL74mDfXRdqKK/GTuIgRQ3KHscfQx e4S+7PDm7Et7zngVW5edJD8th6+En/45TSvJo9ZUptA33RxslrOT11sWNk0YY0Ax EBFlNCCEhQ4NT3ISpkmt/qWd0nEy+CVcoRYDKCaTUqZCMROXyv/eR0s2UadBZzQG x7Kp3sN3A7ewsYgaWTkX0ZObuZxABXcDXvet3vZ4lS251WxGBa0/wvvBh1jHvWsL RiD+fkMRSKNVSHyjtKrKlUohuLnWHTlQN3WuX6OrmVusGwem1zNISKUISOyaMi8I s77zOTrRXbKXVMOtZ5fU3a0smwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHazYxtS XPm5oC/F4DY1xGBNN3XWMB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4 NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQzOS83RjI0RkZEMEM4NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1 N3VycFNFZmFZS3pPWFJGX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACNvnm2IYvZjyYwuAl4QXi643vjYdWquiwavHbAqvLH5atNsdIIQEN q92SmP3tuhPvBWFHQA161e8cdmNDGCKmmdCYgrBOVFq1D5rbCo0tErFhQ1XyQUQ4 USuEYJkr0UHGzu2iuls5NrkOKdHaHjKqO+YtT7WE1/N1laF296OZ+bsyZMj7Eefh d5y4BdPMyX7NB2uhZMLwKSL7j/9FRyi1LaYN55FnrZtyZPuuzqwJ1M+xngJiaU+p k4b3SYJxCeCPPWDmoTuLtESulntYMAJYncl3n3Sx5CAbJSXC9jSP0S8+ZLFIqq/H /XcfcFNrPOqdJfv5qp69qAq25wAJG1Vl -----END CERTIFICATE-----Generated at Wed Nov 5 16:36:49 2025 by rpki-client