$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json) Hash identifier: MnC74ZnE13Cp4yoHom5ero6gzCFP3EQT1oFAkZ7tk9Y= Subject key identifier: E3:E6:B3:32:E4:14:64:D9:7E:CF:76:D4:CB:EB:22:92:51:5D:D3:86 Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Certificate serial: 061D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft Manifest number: 0601 Signing time: Fri 22 Aug 2025 23:11:47 +0000 Manifest this update: Fri 22 Aug 2025 23:11:47 +0000 Manifest next update: Fri 29 Aug 2025 23:11:47 +0000 Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: 3P7FsgOU53vfIfx3WG5CUU4ZZopdIrNSybyzRaF47Ok=) 2: 33B3C60425FD11EDA4097785C4F9AE02.roa (hash: YmHPckT0dIFNHqb1yogDfQ9UG6heaZWXlhIbS1BD/e8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1565 (0x61d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Validity Not Before: Aug 22 23:11:47 2025 GMT Not After : Aug 29 23:11:47 2025 GMT Subject: CN=68a8f933-21b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fb:c0:12:bd:da:b8:14:4e:41:36:bc:50:75: 45:b0:68:86:c9:c7:25:bf:31:93:1c:da:a9:d7:d9: 1b:a9:d4:51:19:52:5c:bc:34:c6:f9:4e:b9:a0:19: b3:a0:e5:8b:0c:ac:ea:ae:9e:75:3d:05:1f:be:31: a4:4a:f6:92:0e:8c:18:4e:66:a8:f9:53:bd:1b:46: 3a:b0:c5:41:13:81:85:6f:14:d6:65:94:78:d7:03: 2f:28:20:6e:2d:9e:ea:8a:19:44:4a:cf:08:21:55: 50:5a:2e:6d:ce:89:fe:21:c9:87:1e:ff:a6:a0:5b: 71:2b:9d:db:87:d1:67:42:f3:76:f1:28:d0:1f:d1: b0:6c:e3:ee:3b:8e:85:3b:cc:a5:83:13:0c:f5:84: 8d:b8:73:32:93:e4:d6:40:9b:6c:bf:b8:7f:42:b2: 20:4e:eb:16:0f:89:8e:e7:b2:b8:5b:6d:f8:07:2b: f6:66:f8:95:ce:96:9a:75:3e:98:b2:a2:29:57:64: a6:48:b9:2e:59:9f:4b:83:35:18:a0:5c:38:38:f7: d7:c1:32:20:57:b6:5b:f8:4c:97:88:ef:18:ec:2a: d7:46:d3:78:99:3d:39:6e:41:9b:08:9d:ec:75:f7: 8f:5c:81:de:99:46:d1:c3:94:7f:e5:39:22:89:06: 4d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E6:B3:32:E4:14:64:D9:7E:CF:76:D4:CB:EB:22:92:51:5D:D3:86 X509v3 Authority Key Identifier: keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c0:72:dd:e2:70:f9:93:3d:8e:1d:4b:55:75:6a:55:43:8b: a0:f1:72:d2:b4:de:97:18:f3:eb:da:a2:aa:2e:29:da:81:19: dd:9a:8d:5e:57:9e:a0:d9:fd:77:bf:e8:5e:0d:1d:f1:61:c6: 61:a2:1a:de:bb:a3:25:de:83:69:76:f1:90:01:a0:b7:48:0f: 1b:23:1b:1a:59:90:fd:93:6a:af:12:2b:b6:cf:1f:a8:0d:89: 69:f9:9c:17:da:95:c1:95:05:e1:7d:af:4c:f5:9b:59:88:ec: 0c:78:eb:aa:30:ea:85:5c:bf:62:67:87:51:07:49:c8:b7:ad: 1b:31:4b:e7:72:52:4e:69:a0:c3:fc:1f:ed:d8:cd:22:1a:c7: fc:54:8f:ea:cb:13:55:54:be:c0:12:17:32:fa:fe:b8:2b:40: c4:96:ff:ef:2b:a9:db:14:d4:2c:df:e0:73:78:cc:ec:fc:19: 68:32:84:7a:8f:20:a6:14:a8:61:9f:fc:e4:67:0b:3e:1b:8f: 4d:af:fd:e4:59:5b:eb:f6:49:eb:9a:d8:49:b4:d7:55:8f:3b: 58:04:11:e5:b5:e9:2c:79:17:a4:ce:25:70:1b:f2:95:9c:99: d3:33:58:e4:40:15:c7:60:a9:b7:35:66:58:0d:d3:13:32:69: a7:6c:ef:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND RTVEMTE3RjkwHhcNMjUwODIyMjMxMTQ3WhcNMjUwODI5MjMxMTQ3WjAYMRYwFAYD VQQDEw02OGE4ZjkzMy0yMWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PvAEr3auBROQTa8UHVFsGiGycclvzGTHNqp19kbqdRRGVJcvDTG+U65oBmz oOWLDKzqrp51PQUfvjGkSvaSDowYTmao+VO9G0Y6sMVBE4GFbxTWZZR41wMvKCBu LZ7qihlESs8IIVVQWi5tzon+IcmHHv+moFtxK53bh9FnQvN28SjQH9GwbOPuO46F O8ylgxMM9YSNuHMyk+TWQJtsv7h/QrIgTusWD4mO57K4W234Byv2ZviVzpaadT6Y sqIpV2SmSLkuWZ9LgzUYoFw4OPfXwTIgV7Zb+EyXiO8Y7CrXRtN4mT05bkGbCJ3s dfePXIHemUbRw5R/5TkiiQZNTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPmszLk FGTZfs921MvrIpJRXdOGMB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4 NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQzOS83RjI0RkZEMEM4NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1 N3VycFNFZmFZS3pPWFJGX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMwHLd4nD5kz2OHUtVdWpVQ4ug8XLStN6XGPPr2qKqLinagRndmo1e V56g2f13v+heDR3xYcZhohreu6Ml3oNpdvGQAaC3SA8bIxsaWZD9k2qvEiu2zx+o DYlp+ZwX2pXBlQXhfa9M9ZtZiOwMeOuqMOqFXL9iZ4dRB0nIt60bMUvnclJOaaDD /B/t2M0iGsf8VI/qyxNVVL7AEhcy+v64K0DElv/vK6nbFNQs3+BzeMzs/BloMoR6 jyCmFKhhn/zkZws+G49Nr/3kWVvr9knrmthJtNdVjztYBBHltekseRekziVwG/KV nJnTM1jkQBXHYKm3NWZYDdMTMmmnbO+Q -----END CERTIFICATE-----Generated at Sat Aug 23 18:56:51 2025 by rpki-client