$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json) Hash identifier: pwNF3CPVsjMGXObgpyXdIeJa6eoz0VQJGnJ7fdQgWmg= Subject key identifier: 71:BE:08:53:93:3E:D3:15:80:6A:3A:64:B5:0A:D2:9E:6B:7A:41:F8 Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Certificate serial: 068D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft Manifest number: 0670 Signing time: Tue 24 Mar 2026 22:23:26 +0000 Manifest this update: Tue 24 Mar 2026 22:23:26 +0000 Manifest next update: Tue 31 Mar 2026 22:23:26 +0000 Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: 8N7E94EEi899byD0HMvI/11j2qR4RXetuvMCuuJYJmM=) 2: 33B3C60425FD11EDA4097785C4F9AE02.roa (hash: LePw4oHq3VvyRQRlYtEqQW4K8VJQ5Ypp/eZ7/7VVj38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1677 (0x68d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Validity Not Before: Mar 24 22:23:26 2026 GMT Not After : Mar 31 22:23:26 2026 GMT Subject: CN=69c30ede-a1fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0d:e9:f0:83:79:9f:76:a5:43:c3:4d:5b:d2: ae:f9:45:ca:e4:c2:d9:0d:8f:32:82:92:76:32:d5: 8c:89:ef:51:df:20:33:13:08:fd:7e:4f:2b:79:98: 4a:1c:8f:80:4b:08:70:c5:17:9a:3f:ee:3b:ad:9c: b0:c0:7d:4e:d9:ca:3f:5e:c9:45:62:38:5f:f8:c0: 03:fd:f1:3e:2a:cb:d5:f6:fc:10:73:99:44:6d:5e: 35:39:4a:77:2d:fd:d2:66:4e:8f:40:07:8e:8f:d0: 00:70:16:3a:b2:00:53:5d:5b:4c:07:7e:a3:ee:3f: fa:e2:52:53:bc:27:7d:49:bb:e3:d7:aa:13:82:1d: cf:ef:45:fc:2b:79:20:01:b9:4a:c9:89:a6:55:79: 9b:f0:e4:75:44:c5:f5:42:a8:2b:00:7d:ca:04:14: 50:be:28:53:3f:17:12:cf:a0:c7:9c:fe:26:7e:25: 2b:54:ba:e8:fd:a0:66:70:61:ea:d5:31:07:25:7d: f1:c0:eb:9b:d3:27:8e:c1:8d:0c:90:af:00:a7:06: 69:cf:8a:09:fc:ef:4b:91:7c:69:45:96:ff:f5:0c: b8:a8:7f:cd:6e:81:c4:b4:28:b7:0a:d7:26:16:74: 17:19:b5:a9:68:e5:d6:56:0c:93:3f:4c:7b:fa:51: 2c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BE:08:53:93:3E:D3:15:80:6A:3A:64:B5:0A:D2:9E:6B:7A:41:F8 X509v3 Authority Key Identifier: keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:6c:09:5c:10:dc:45:93:e5:b1:39:bf:21:ef:28:1d:0b:aa: a5:c6:d6:78:54:f1:05:d0:62:c4:1a:1c:39:9c:bf:dc:b7:2a: 1b:87:a3:91:db:6b:ec:45:59:bb:69:ad:06:c4:f6:c0:7a:2d: 52:bf:1e:7b:07:11:ab:3e:48:a9:c8:1c:ee:30:58:2d:6c:35: f7:84:90:52:5b:9c:42:21:11:8c:e6:21:05:0e:91:7d:3b:85: b3:8f:e5:52:16:2f:73:13:0c:9f:78:3e:06:ea:64:ff:8b:33: 11:e6:f8:5b:9e:91:d4:fc:1c:ea:d0:14:0e:ea:34:5e:86:72: 18:d9:81:ea:a5:8e:91:0a:29:e6:bf:c1:ad:e0:75:8d:61:44: b2:4b:f3:91:17:8a:e2:ab:29:e9:ea:70:3b:4c:2e:f6:08:70: 4b:de:22:8e:86:84:3b:27:c9:c5:8c:de:65:7c:80:a1:64:61: ac:76:0b:9a:63:74:05:39:01:0c:1c:50:5d:cc:4d:5d:7f:12: 47:54:67:84:4d:d8:b6:cd:5f:9b:cd:84:e7:02:37:f8:58:0d: f3:01:a9:f3:0d:77:fd:a8:70:fc:ff:a5:1e:6b:29:44:54:12: 56:8f:26:33:2c:9d:29:e0:d0:c6:95:39:e3:d9:8d:18:c7:0b: 65:eb:27:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND RTVEMTE3RjkwHhcNMjYwMzI0MjIyMzI2WhcNMjYwMzMxMjIyMzI2WjAYMRYwFAYD VQQDEw02OWMzMGVkZS1hMWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0w3p8IN5n3alQ8NNW9Ku+UXK5MLZDY8ygpJ2MtWMie9R3yAzEwj9fk8reZhK HI+ASwhwxReaP+47rZywwH1O2co/XslFYjhf+MAD/fE+KsvV9vwQc5lEbV41OUp3 Lf3SZk6PQAeOj9AAcBY6sgBTXVtMB36j7j/64lJTvCd9Sbvj16oTgh3P70X8K3kg AblKyYmmVXmb8OR1RMX1QqgrAH3KBBRQvihTPxcSz6DHnP4mfiUrVLro/aBmcGHq 1TEHJX3xwOub0yeOwY0MkK8ApwZpz4oJ/O9LkXxpRZb/9Qy4qH/NboHEtCi3Ctcm FnQXGbWpaOXWVgyTP0x7+lEssQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHG+CFOT PtMVgGo6ZLUK0p5rekH4MB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4 NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQzOS83RjI0RkZEMEM4NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1 N3VycFNFZmFZS3pPWFJGX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU2wJXBDcRZPlsTm/Ie8oHQuqpcbWeFTxBdBixBocOZy/3LcqG4ejkdtr7EVZ u2mtBsT2wHotUr8eewcRqz5Iqcgc7jBYLWw194SQUlucQiERjOYhBQ6RfTuFs4/l UhYvcxMMn3g+Bupk/4szEeb4W56R1Pwc6tAUDuo0XoZyGNmB6qWOkQop5r/BreB1 jWFEskvzkReK4qsp6epwO0wu9ghwS94ijoaEOyfJxYzeZXyAoWRhrHYLmmN0BTkB DBxQXcxNXX8SR1RnhE3Yts1fm82E5wI3+FgN8wGp8w13/ahw/P+lHmspRFQSVo8m MyydKeDQxpU549mNGMcLZesnmQ== -----END CERTIFICATE-----Generated at Thu Mar 26 08:53:38 2026 by rpki-client