$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json) Hash identifier: Jwf0pnvix4OMxA1FRaYHo7FxbdAVxz60Mf2ToP3L5c8= Subject key identifier: 08:D0:8C:F2:CB:17:BE:35:6D:97:51:CA:D7:63:8C:F2:E6:4C:58:23 Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Certificate serial: 06A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft Manifest number: 0689 Signing time: Tue 12 May 2026 22:42:35 +0000 Manifest this update: Tue 12 May 2026 22:42:34 +0000 Manifest next update: Tue 19 May 2026 22:42:34 +0000 Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: Jhhc1DBAWI82f99wI1IGhlaEl2jMjmlUJhk/CqpWyro=) 2: 33B3C60425FD11EDA4097785C4F9AE02.roa (hash: LePw4oHq3VvyRQRlYtEqQW4K8VJQ5Ypp/eZ7/7VVj38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1702 (0x6a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Validity Not Before: May 12 22:42:34 2026 GMT Not After : May 19 22:42:34 2026 GMT Subject: CN=6a03acdb-c985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5a:9f:8d:a4:d9:87:f3:ba:10:8d:bf:de:a5: ef:ee:09:97:3f:b4:7f:70:57:b0:02:11:71:01:42: 49:a8:ed:18:0b:51:34:75:95:bf:56:75:df:5a:e1: 09:64:33:d6:53:bf:e2:e8:b7:26:f5:5f:d1:18:fa: 5b:9c:6c:e4:76:c7:6f:a4:19:e0:74:cc:d5:9d:1e: 03:c7:30:1e:ec:86:df:31:90:fb:7c:d1:dd:cc:48: 92:3e:cb:b8:6d:be:b0:85:17:f4:b3:87:94:e4:68: d7:ca:1c:77:cf:12:09:7d:3e:a8:40:b4:1a:c6:7e: 7f:41:db:96:b5:4b:6c:5b:29:d9:f6:ce:90:bb:b4: c6:2c:82:1a:d4:ef:f4:b8:6c:b0:8c:9a:9c:f6:d5: e9:f3:4c:1a:5d:46:9e:4a:84:f3:d3:b4:5f:b8:e3: 70:03:cc:43:97:64:af:a4:c0:15:48:36:52:53:35: 3f:cc:f0:9e:47:43:64:4f:06:b1:54:6a:c4:25:9c: 13:26:39:4f:1b:05:42:af:68:f1:7a:d8:d3:95:fc: 90:f0:1b:86:ae:bb:c5:2b:04:82:d4:06:aa:78:65: 38:57:6c:8c:9d:48:2f:cb:55:b7:b4:76:d7:c1:a9: 9f:5e:c2:9d:7c:df:c7:94:35:53:3d:21:98:d1:9f: 2d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D0:8C:F2:CB:17:BE:35:6D:97:51:CA:D7:63:8C:F2:E6:4C:58:23 X509v3 Authority Key Identifier: keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:fa:40:0b:28:a2:4d:d3:e0:5e:9e:3a:e1:f8:de:af:57:76: 1d:c5:f5:96:e1:bd:e3:08:31:40:02:a8:02:68:52:b9:86:d1: 29:61:6f:86:46:0f:d0:64:fb:1b:7d:00:5b:a6:5a:ee:f0:47: e9:f4:41:ff:5f:06:6e:e6:41:74:9f:38:4f:1d:d5:62:62:15: fe:38:22:8b:ab:97:dd:b5:30:eb:52:de:98:d8:07:51:40:dd: b2:d2:94:15:cf:20:71:12:8c:82:e8:a6:c9:68:4d:be:fe:19: 8f:9e:6e:5c:39:b3:60:59:2f:f5:99:2b:97:19:cc:3a:2f:b1: 76:59:c3:6e:5a:76:dd:3c:43:1c:96:39:5e:9c:28:80:fa:07: fe:df:b7:f1:ed:98:1b:39:b0:52:88:fe:9f:39:67:48:7a:70: eb:39:0f:52:80:af:36:cd:22:61:c2:0e:a8:6d:72:d0:c1:31: f9:71:e6:5b:c4:97:8d:97:bc:7d:59:02:cf:5a:d6:f2:4a:af: 89:0c:8f:32:f7:ec:ff:75:63:59:df:1d:cf:0f:ac:6b:cb:20: fe:0a:9c:77:9c:08:39:7d:e4:d5:0d:f5:23:c6:4b:78:3a:de: 86:fc:57:f9:db:3b:a4:04:d3:82:e7:4d:d6:35:2d:e2:89:9c: 0b:4a:43:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND RTVEMTE3RjkwHhcNMjYwNTEyMjI0MjM0WhcNMjYwNTE5MjI0MjM0WjAYMRYwFAYD VQQDEw02YTAzYWNkYi1jOTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3FqfjaTZh/O6EI2/3qXv7gmXP7R/cFewAhFxAUJJqO0YC1E0dZW/VnXfWuEJ ZDPWU7/i6Lcm9V/RGPpbnGzkdsdvpBngdMzVnR4DxzAe7IbfMZD7fNHdzEiSPsu4 bb6whRf0s4eU5GjXyhx3zxIJfT6oQLQaxn5/QduWtUtsWynZ9s6Qu7TGLIIa1O/0 uGywjJqc9tXp80waXUaeSoTz07RfuONwA8xDl2SvpMAVSDZSUzU/zPCeR0NkTwax VGrEJZwTJjlPGwVCr2jxetjTlfyQ8BuGrrvFKwSC1AaqeGU4V2yMnUgvy1W3tHbX wamfXsKdfN/HlDVTPSGY0Z8tHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAjQjPLL F741bZdRytdjjPLmTFgjMB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4 NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQzOS83RjI0RkZEMEM4NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1 N3VycFNFZmFZS3pPWFJGX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe/pACyiiTdPgXp464fjer1d2HcX1luG94wgxQAKoAmhSuYbRKWFvhkYP0GT7 G30AW6Za7vBH6fRB/18GbuZBdJ84Tx3VYmIV/jgii6uX3bUw61LemNgHUUDdstKU Fc8gcRKMguimyWhNvv4Zj55uXDmzYFkv9ZkrlxnMOi+xdlnDblp23TxDHJY5Xpwo gPoH/t+38e2YGzmwUoj+nzlnSHpw6zkPUoCvNs0iYcIOqG1y0MEx+XHmW8SXjZe8 fVkCz1rW8kqviQyPMvfs/3VjWd8dzw+sa8sg/gqcd5wIOX3k1Q31I8ZLeDrehvxX +ds7pATTgudN1jUt4omcC0pDBQ== -----END CERTIFICATE-----Generated at Wed May 13 02:17:47 2026 by rpki-client