$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json) Hash identifier: vCsYufLVSn8s/V7bGIu1diznDxemOQBzU5qAVCmor0c= Subject key identifier: BF:BF:25:53:EA:89:52:EB:2A:27:00:9E:94:6F:0B:62:73:8F:FD:31 Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Certificate serial: 0699 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft Manifest number: 067C Signing time: Thu 16 Apr 2026 22:34:18 +0000 Manifest this update: Thu 16 Apr 2026 22:34:17 +0000 Manifest next update: Thu 23 Apr 2026 22:34:17 +0000 Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: hKxByFZhcXldY8Ht6A49tEqECcgxd3uRcselyRqZ7I0=) 2: 33B3C60425FD11EDA4097785C4F9AE02.roa (hash: LePw4oHq3VvyRQRlYtEqQW4K8VJQ5Ypp/eZ7/7VVj38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1689 (0x699) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Validity Not Before: Apr 16 22:34:17 2026 GMT Not After : Apr 23 22:34:17 2026 GMT Subject: CN=69e163ea-f9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ac:a9:00:3a:40:af:32:06:fa:1e:be:98:26: aa:34:45:7b:46:09:4a:d3:c5:a9:2f:73:87:cf:b3: f9:6b:fd:57:f2:2c:19:00:ee:c8:7a:10:e9:ff:8a: fb:8d:b2:09:21:88:ed:2a:f5:aa:62:58:fe:9d:29: 5b:54:4f:d2:64:20:88:2f:d8:e8:2a:3a:0d:a9:0b: b2:a1:e0:6c:8a:1f:39:18:66:61:25:5f:a2:6f:90: d0:ab:3e:11:ae:b9:cf:f2:7f:02:21:c0:8e:b6:8d: 5c:44:35:b0:3d:5f:c3:57:d0:ca:85:80:66:50:2f: f2:48:6d:bc:a6:b4:86:02:f7:62:eb:90:31:c2:64: 1c:af:e2:88:9b:a7:5a:1f:23:de:19:8f:b3:61:06: 35:9b:83:36:02:24:e3:5e:10:dc:e1:9b:30:1e:14: ad:34:81:74:de:83:91:d8:88:4c:4a:40:27:b6:e0: bb:73:8d:3c:6b:f5:f0:fd:b0:39:af:41:b3:c8:10: f9:83:88:cc:e8:80:15:07:7d:9e:3c:ce:04:a2:7e: d4:16:16:81:30:58:49:f8:6d:91:fe:9c:ec:10:73: 68:f6:9e:97:ce:ae:94:4e:9b:f8:0c:25:ae:74:2b: 2e:2d:8f:a4:91:17:66:a5:28:5f:42:ff:a4:40:3b: a5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BF:25:53:EA:89:52:EB:2A:27:00:9E:94:6F:0B:62:73:8F:FD:31 X509v3 Authority Key Identifier: keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:92:ed:71:6c:e3:46:bf:1a:e2:69:04:fc:0c:ad:13:b7:b1: c2:4d:0e:44:22:97:2b:01:50:37:c6:55:2a:5d:4a:05:df:94: db:34:df:df:ed:14:e3:ae:a0:56:75:97:10:49:7c:15:21:a4: 7e:f2:bd:03:eb:0c:2e:dc:f0:f3:79:4a:87:48:96:16:ef:b5: bb:f6:42:aa:8c:fe:28:3f:0f:ac:5c:31:3b:f1:22:14:da:e1: 48:41:98:29:7b:36:6d:8b:0c:5a:3f:f4:f1:20:af:b0:8d:47: 4f:a5:27:80:18:87:8e:8a:55:1b:23:ad:34:67:da:c6:8b:f7: f2:44:ef:c7:27:3a:51:c6:1e:3f:60:54:c1:58:91:bb:71:b7: ee:e0:7c:95:e1:78:01:b1:2a:6e:a2:84:9a:1a:2c:c8:91:c3: c1:f7:8b:e0:e6:68:d7:ec:83:d3:a6:30:54:b6:80:fd:e5:59: a3:8a:81:78:4c:fe:2e:5a:34:66:46:e8:a9:28:25:70:ff:bf: c6:ec:9a:18:81:d0:fa:22:16:a0:f3:01:8e:e8:9e:23:7e:dc: d8:ac:ee:9c:99:ab:00:52:d2:e6:f0:32:44:65:8c:9b:da:8f: 45:bb:5d:d1:e2:7d:64:99:dc:ba:3f:43:07:5f:90:ed:ec:c2: 47:61:ab:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND RTVEMTE3RjkwHhcNMjYwNDE2MjIzNDE3WhcNMjYwNDIzMjIzNDE3WjAYMRYwFAYD VQQDEw02OWUxNjNlYS1mOWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA86ypADpArzIG+h6+mCaqNEV7RglK08WpL3OHz7P5a/1X8iwZAO7IehDp/4r7 jbIJIYjtKvWqYlj+nSlbVE/SZCCIL9joKjoNqQuyoeBsih85GGZhJV+ib5DQqz4R rrnP8n8CIcCOto1cRDWwPV/DV9DKhYBmUC/ySG28prSGAvdi65AxwmQcr+KIm6da HyPeGY+zYQY1m4M2AiTjXhDc4ZswHhStNIF03oOR2IhMSkAntuC7c408a/Xw/bA5 r0GzyBD5g4jM6IAVB32ePM4Eon7UFhaBMFhJ+G2R/pzsEHNo9p6Xzq6UTpv4DCWu dCsuLY+kkRdmpShfQv+kQDulcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL+/JVPq iVLrKicAnpRvC2Jzj/0xMB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4 NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQzOS83RjI0RkZEMEM4NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1 N3VycFNFZmFZS3pPWFJGX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtJLtcWzjRr8a4mkE/AytE7exwk0ORCKXKwFQN8ZVKl1KBd+U2zTf3+0U466g VnWXEEl8FSGkfvK9A+sMLtzw83lKh0iWFu+1u/ZCqoz+KD8PrFwxO/EiFNrhSEGY KXs2bYsMWj/08SCvsI1HT6UngBiHjopVGyOtNGfaxov38kTvxyc6UcYeP2BUwViR u3G37uB8leF4AbEqbqKEmhosyJHDwfeL4OZo1+yD06YwVLaA/eVZo4qBeEz+Llo0 ZkboqSglcP+/xuyaGIHQ+iIWoPMBjuieI37c2KzunJmrAFLS5vAyRGWMm9qPRbtd 0eJ9ZJncuj9DB1+Q7ezCR2GrhQ== -----END CERTIFICATE-----Generated at Fri Apr 17 06:48:44 2026 by rpki-client