$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json) Hash identifier: bSlrBCWapADIf/9qD4ZHxjpX2SKAdLb4ppi/VVkhpho= Subject key identifier: 4D:05:2D:52:5E:F6:EB:94:77:C6:3C:B5:25:8A:76:1C:24:5C:36:A2 Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Certificate serial: 0615 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft Manifest number: 05F9 Signing time: Wed 06 Aug 2025 23:27:08 +0000 Manifest this update: Wed 06 Aug 2025 23:27:07 +0000 Manifest next update: Wed 13 Aug 2025 23:27:07 +0000 Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: X/TvQOM4T2Nl1s18XVz/NbI2lpT36fWF2NgDEybu4z4=) 2: 33B3C60425FD11EDA4097785C4F9AE02.roa (hash: YmHPckT0dIFNHqb1yogDfQ9UG6heaZWXlhIbS1BD/e8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 23:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1557 (0x615) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Validity Not Before: Aug 6 23:27:07 2025 GMT Not After : Aug 13 23:27:07 2025 GMT Subject: CN=6893e4cb-bde7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4b:40:dd:b2:08:78:23:00:02:5b:cf:14:09: e5:03:3b:b5:f8:7f:ad:27:bd:96:cc:8a:5a:fd:8e: 0a:6d:c4:ce:4b:02:00:12:54:5e:f7:01:58:66:9d: 3e:78:d0:f3:0b:ba:e6:a0:1d:39:56:58:e8:56:ee: d5:32:db:26:49:bb:4c:5d:fe:87:51:80:2c:aa:ba: 81:7d:91:ae:7e:b4:ac:4e:a6:6d:d6:17:85:b2:c3: ef:43:d8:bc:f5:bb:b7:9b:db:95:a2:7b:b5:76:92: 79:8f:0f:35:e0:d4:e0:d3:8b:f5:68:a0:12:1f:b3: 64:c6:68:56:14:62:9e:e4:a0:09:bb:fc:22:e9:c4: 3c:56:19:30:d1:10:f9:7a:45:0d:74:6c:21:c0:da: 1b:95:63:c3:11:6d:a0:42:88:cf:48:01:f8:ea:bb: 64:be:af:07:ea:80:b4:94:75:16:79:79:55:ea:b4: b0:e6:15:8b:cf:14:61:9b:ba:7a:6e:00:f7:56:c2: a4:4c:fa:31:3d:df:5e:fb:09:66:9d:fa:e0:1e:f7: b8:8d:ea:18:af:08:36:42:e2:fb:cf:04:cc:ea:55: b9:9d:1f:43:8c:db:49:4e:b8:03:6c:b3:63:be:1c: 66:0f:d8:b8:18:69:12:9b:c8:06:3a:3d:2b:47:e5: f4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:05:2D:52:5E:F6:EB:94:77:C6:3C:B5:25:8A:76:1C:24:5C:36:A2 X509v3 Authority Key Identifier: keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:cb:36:cd:9c:6d:9a:54:88:bf:f1:0e:43:76:dd:05:f1:c4: 3d:75:d4:2f:ae:ce:d7:e8:b0:b9:9d:84:44:63:0e:e6:c3:db: d7:b7:41:a2:10:1d:11:66:f4:bd:00:0b:96:85:ae:28:82:82: dc:25:d6:46:c1:4d:31:f1:5a:3c:63:ac:f4:09:40:61:04:8f: c2:b3:97:7d:a6:82:99:6b:49:ae:ae:b2:f7:84:66:de:6d:13: e6:d0:f3:1c:35:73:c8:24:6d:35:d6:7c:ee:5a:60:8c:65:c8: 4f:f0:30:ab:63:eb:c9:52:36:4d:cf:c3:7e:fd:34:0d:45:ce: 18:42:08:50:61:bd:f6:4c:ee:70:16:ee:bf:88:64:26:b9:c4: 72:a8:e8:fa:ff:4f:09:85:13:a9:10:b5:40:01:23:ce:a0:c0: 7c:27:d3:89:92:29:42:52:60:ba:fc:05:f5:02:21:51:b6:5a: 11:5a:d3:e0:60:19:55:1e:bd:ff:4f:cd:8e:7d:f6:ec:ea:77: 95:2f:95:84:59:f2:5f:8c:14:0d:90:3d:16:f2:f0:f1:a6:31: 8b:4c:62:94:48:a7:3b:02:f6:91:46:d7:d0:f7:fe:57:ce:0b: 69:4f:42:a9:1c:3e:19:99:0a:8f:c5:3f:d0:01:e2:a0:67:1d: 6e:26:49:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND RTVEMTE3RjkwHhcNMjUwODA2MjMyNzA3WhcNMjUwODEzMjMyNzA3WjAYMRYwFAYD VQQDEw02ODkzZTRjYi1iZGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40tA3bIIeCMAAlvPFAnlAzu1+H+tJ72WzIpa/Y4KbcTOSwIAElRe9wFYZp0+ eNDzC7rmoB05VljoVu7VMtsmSbtMXf6HUYAsqrqBfZGufrSsTqZt1heFssPvQ9i8 9bu3m9uVonu1dpJ5jw814NTg04v1aKASH7NkxmhWFGKe5KAJu/wi6cQ8Vhkw0RD5 ekUNdGwhwNoblWPDEW2gQojPSAH46rtkvq8H6oC0lHUWeXlV6rSw5hWLzxRhm7p6 bgD3VsKkTPoxPd9e+wlmnfrgHve4jeoYrwg2QuL7zwTM6lW5nR9DjNtJTrgDbLNj vhxmD9i4GGkSm8gGOj0rR+X0UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0FLVJe 9uuUd8Y8tSWKdhwkXDaiMB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4 NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQzOS83RjI0RkZEMEM4NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1 N3VycFNFZmFZS3pPWFJGX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIyzbNnG2aVIi/8Q5Ddt0F8cQ9ddQvrs7X6LC5nYREYw7mw9vXt0Gi EB0RZvS9AAuWha4ogoLcJdZGwU0x8Vo8Y6z0CUBhBI/Cs5d9poKZa0murrL3hGbe bRPm0PMcNXPIJG011nzuWmCMZchP8DCrY+vJUjZNz8N+/TQNRc4YQghQYb32TO5w Fu6/iGQmucRyqOj6/08JhROpELVAASPOoMB8J9OJkilCUmC6/AX1AiFRtloRWtPg YBlVHr3/T82Offbs6neVL5WEWfJfjBQNkD0W8vDxpjGLTGKUSKc7AvaRRtfQ9/5X zgtpT0KpHD4ZmQqPxT/QAeKgZx1uJkl5 -----END CERTIFICATE-----Generated at Fri Aug 8 00:42:06 2025 by rpki-client