$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json) Hash identifier: Dahf5B9+Y7GcPmQ/SJ5D4OQ8xkKERCpJyU3w9xpohvc= Subject key identifier: 40:B8:DF:2F:DE:B1:A8:25:9F:31:4F:83:AF:B6:9E:4A:BF:48:55:EA Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Certificate serial: 063A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft Manifest number: 061E Signing time: Sun 19 Oct 2025 00:32:55 +0000 Manifest this update: Sun 19 Oct 2025 00:32:55 +0000 Manifest next update: Sun 26 Oct 2025 00:32:55 +0000 Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: BN4Bj4BI453Ma6HTpLgE/ZZ23YPbTwSkQkZFpQxT5J4=) 2: 33B3C60425FD11EDA4097785C4F9AE02.roa (hash: YmHPckT0dIFNHqb1yogDfQ9UG6heaZWXlhIbS1BD/e8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1594 (0x63a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Validity Not Before: Oct 19 00:32:55 2025 GMT Not After : Oct 26 00:32:55 2025 GMT Subject: CN=68f431b7-9daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:fd:cd:c2:c0:61:ff:b1:83:7d:29:49:54:8d: d0:e7:05:ed:f9:4b:57:51:0e:27:4b:05:9e:d5:1c: 13:3f:14:bd:07:82:58:9e:cf:11:d9:5b:f3:52:b1: de:eb:bb:34:d6:38:b6:7a:df:5c:f7:c5:35:48:bf: ab:a7:fd:26:83:cb:dd:7b:c3:0a:e8:d5:99:6c:1f: 4f:ce:83:0b:d3:dc:ed:e4:7c:94:7d:12:b6:e8:b7: 1e:7a:66:ed:8b:73:1f:0e:5c:e8:fd:d1:64:e2:d4: e8:d3:9a:67:ed:60:f1:26:42:4c:a4:e5:ed:bd:bb: 72:bc:5c:7b:e7:07:ef:8a:23:e4:24:d2:2d:20:80: d8:05:3b:61:19:37:8c:b5:7b:d9:82:ea:c0:e5:48: 3b:df:e0:fb:2a:2d:90:4f:77:51:63:7c:e7:0d:8f: 26:03:4d:db:d9:e4:51:c7:56:07:c4:6a:82:68:cc: 0f:32:95:c4:a1:73:0c:72:9d:0f:13:af:90:42:80: 79:b0:16:e3:da:98:6d:5a:2d:fa:09:af:62:fc:30: ee:c3:4b:31:67:e0:66:70:66:dd:ff:ea:29:c9:3d: 68:df:9f:e1:ff:0f:a6:d4:9b:85:ad:8e:52:cd:a0: 83:2f:6e:f9:a5:14:d5:a8:d7:31:d0:02:06:eb:25: f1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B8:DF:2F:DE:B1:A8:25:9F:31:4F:83:AF:B6:9E:4A:BF:48:55:EA X509v3 Authority Key Identifier: keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:63:9a:3b:84:dc:0f:b4:f2:0f:0e:26:ab:e1:57:76:05:f9: 58:eb:d5:83:17:4b:1e:6c:85:61:f4:24:8f:6d:79:1c:51:a2: 3d:be:2c:2e:db:b5:e1:b5:39:8d:24:a6:dc:bd:87:54:ea:0f: bf:b4:26:83:01:33:27:fe:97:60:c2:80:94:47:8b:d3:63:39: 94:a8:3a:d0:e1:83:08:6b:dc:79:34:92:97:6d:27:c3:3e:6e: c2:5a:02:6e:85:74:ac:42:24:67:06:6a:de:8e:6a:ec:14:c4: e1:bb:1d:6d:97:d9:cd:c1:59:03:e1:f6:f1:3c:8e:e7:a5:8b: de:89:e5:dc:01:71:05:74:f3:c0:6c:6f:01:01:fe:34:ec:39: 02:94:6b:92:d2:4a:36:19:92:83:ab:13:37:74:8a:82:cb:15: bb:57:9f:f6:19:20:83:28:14:c8:c0:c7:39:3e:15:61:8a:19: 41:27:1e:2a:bc:9c:3a:88:8e:86:aa:47:72:35:48:b4:11:0d: 3e:c8:82:f3:cc:5b:e2:18:09:75:cb:86:97:c5:49:18:1d:2f: c0:7f:47:d2:ec:bd:82:a6:46:d6:12:c7:e5:0b:fe:5e:ef:6e: af:6f:b5:c5:15:9d:84:14:35:c7:d5:5c:13:60:54:69:fd:ba: 41:c7:78:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND RTVEMTE3RjkwHhcNMjUxMDE5MDAzMjU1WhcNMjUxMDI2MDAzMjU1WjAYMRYwFAYD VQQDEw02OGY0MzFiNy05ZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7/3NwsBh/7GDfSlJVI3Q5wXt+UtXUQ4nSwWe1RwTPxS9B4JYns8R2VvzUrHe 67s01ji2et9c98U1SL+rp/0mg8vde8MK6NWZbB9PzoML09zt5HyUfRK26Lceembt i3MfDlzo/dFk4tTo05pn7WDxJkJMpOXtvbtyvFx75wfviiPkJNItIIDYBTthGTeM tXvZgurA5Ug73+D7Ki2QT3dRY3znDY8mA03b2eRRx1YHxGqCaMwPMpXEoXMMcp0P E6+QQoB5sBbj2phtWi36Ca9i/DDuw0sxZ+BmcGbd/+opyT1o35/h/w+m1JuFrY5S zaCDL275pRTVqNcx0AIG6yXxvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEC43y/e saglnzFPg6+2nkq/SFXqMB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4 NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQzOS83RjI0RkZEMEM4NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1 N3VycFNFZmFZS3pPWFJGX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsY5o7hNwPtPIPDiar4Vd2BflY69WDF0sebIVh9CSPbXkcUaI9viwu 27XhtTmNJKbcvYdU6g+/tCaDATMn/pdgwoCUR4vTYzmUqDrQ4YMIa9x5NJKXbSfD Pm7CWgJuhXSsQiRnBmrejmrsFMThux1tl9nNwVkD4fbxPI7npYveieXcAXEFdPPA bG8BAf407DkClGuS0ko2GZKDqxM3dIqCyxW7V5/2GSCDKBTIwMc5PhVhihlBJx4q vJw6iI6GqkdyNUi0EQ0+yILzzFviGAl1y4aXxUkYHS/Af0fS7L2CpkbWEsflC/5e 726vb7XFFZ2EFDXH1VwTYFRp/bpBx3jb -----END CERTIFICATE-----Generated at Mon Oct 20 08:03:08 2025 by rpki-client