$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json) Hash identifier: 9JWEjhN8tVoqScsnbSdsicZyFig4v6HtmrgkV7SxcHg= Subject key identifier: A0:C3:33:B7:42:BB:72:87:C1:D4:C9:D9:D7:55:11:42:D8:3F:C4:B9 Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Certificate serial: 05E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft Manifest number: 05CD Signing time: Sat 10 May 2025 22:46:18 +0000 Manifest this update: Sat 10 May 2025 22:46:18 +0000 Manifest next update: Sat 17 May 2025 22:46:18 +0000 Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: 39/rqJc9Try76ONAamU5d1Fza26VX9kl0I5weoIiQgk=) 2: 33B3C60425FD11EDA4097785C4F9AE02.roa (hash: YmHPckT0dIFNHqb1yogDfQ9UG6heaZWXlhIbS1BD/e8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1513 (0x5e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Validity Not Before: May 10 22:46:18 2025 GMT Not After : May 17 22:46:18 2025 GMT Subject: CN=681fd73a-ae8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:24:90:00:05:70:31:c6:12:f6:d8:84:02:4c: e4:bb:84:5a:49:42:dc:0b:4e:71:8f:b1:3b:a6:9f: 67:c8:a7:60:50:7b:75:40:cd:16:d9:d4:fe:9b:17: a9:b9:25:66:42:ed:10:fe:5d:ba:92:46:d7:b4:8a: f3:fd:7d:64:62:45:1a:d3:7d:0f:ca:3f:b6:52:91: 42:59:1c:a2:30:89:0e:71:54:6d:8f:1c:af:08:fe: 7a:16:92:a8:26:06:f7:e7:a3:0a:2c:0b:5f:fd:bd: ab:35:f1:f2:cd:f0:23:f7:b6:e3:08:a1:72:7e:7d: 8a:c3:47:04:7b:52:e1:8f:15:d4:4f:0e:36:d4:7e: cd:45:3e:f3:bb:6f:98:ad:db:e6:35:0f:d5:f7:b2: e1:ca:68:62:af:52:f5:0a:48:f4:53:86:1f:7c:5f: f4:35:4d:fd:d2:58:f1:7d:98:65:29:8c:6b:dd:6e: 39:31:b5:5f:82:c8:17:92:67:97:fc:86:17:7b:7e: 49:99:e9:55:2c:72:30:c7:66:84:fe:ed:1d:5d:09: 9e:1b:34:f3:58:a4:79:96:fb:71:01:9b:14:25:08: 56:aa:76:fd:ea:7c:9e:cd:9b:13:1a:bf:51:39:35: 50:c7:36:ce:5b:d8:5a:d9:b6:ef:88:35:83:02:e5: 23:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C3:33:B7:42:BB:72:87:C1:D4:C9:D9:D7:55:11:42:D8:3F:C4:B9 X509v3 Authority Key Identifier: keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:0f:79:79:60:66:31:8d:ca:65:61:ae:99:e4:f3:7a:69:93: ec:ba:fb:41:55:7a:d1:7d:75:4f:ed:30:04:3b:fa:e4:b6:78: 40:d2:8c:19:f3:1b:5e:da:58:4d:d4:e8:02:b0:e7:32:98:e1: 5e:27:c1:83:9f:7d:e9:72:3f:82:3e:dd:fa:90:f5:44:ae:66: 1d:73:f5:a3:11:fe:df:8f:2d:66:17:a2:fe:14:c8:f4:2b:43: cf:43:2f:01:7c:cd:74:99:1a:c5:65:0d:0e:09:94:0c:ea:4f: 30:23:13:e8:5f:e2:3b:4e:50:3e:70:69:a5:ef:4b:8a:19:1b: 8c:29:c4:73:53:7f:28:01:53:22:1e:fa:2d:66:4b:aa:33:e2: a8:ea:68:e0:8e:be:98:b0:e9:15:b7:e8:80:e4:95:23:ea:59: ec:0f:6c:e1:9d:c8:97:da:7e:7e:b3:13:74:6d:4c:ca:a4:30: b6:c1:6f:a6:db:cd:8f:bf:a2:72:a0:74:23:6b:40:7e:92:68: 7d:df:aa:89:9c:6f:7e:3f:08:38:5c:3a:e1:74:c0:92:b5:db: 5f:e7:eb:83:4a:ba:65:1a:39:d8:38:db:07:f3:c0:da:a8:cf: c0:e3:ef:6a:c8:73:b9:f0:ba:36:1d:30:d3:09:86:e0:2c:84: 54:46:e5:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND RTVEMTE3RjkwHhcNMjUwNTEwMjI0NjE4WhcNMjUwNTE3MjI0NjE4WjAYMRYwFAYD VQQDEw02ODFmZDczYS1hZThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApySQAAVwMcYS9tiEAkzku4RaSULcC05xj7E7pp9nyKdgUHt1QM0W2dT+mxep uSVmQu0Q/l26kkbXtIrz/X1kYkUa030Pyj+2UpFCWRyiMIkOcVRtjxyvCP56FpKo Jgb356MKLAtf/b2rNfHyzfAj97bjCKFyfn2Kw0cEe1LhjxXUTw421H7NRT7zu2+Y rdvmNQ/V97Lhymhir1L1Ckj0U4YffF/0NU390ljxfZhlKYxr3W45MbVfgsgXkmeX /IYXe35JmelVLHIwx2aE/u0dXQmeGzTzWKR5lvtxAZsUJQhWqnb96nyezZsTGr9R OTVQxzbOW9ha2bbviDWDAuUjDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDDM7dC u3KHwdTJ2ddVEULYP8S5MB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4 NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQzOS83RjI0RkZEMEM4NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1 N3VycFNFZmFZS3pPWFJGX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwD3l5YGYxjcplYa6Z5PN6aZPsuvtBVXrRfXVP7TAEO/rktnhA0owZ 8xte2lhN1OgCsOcymOFeJ8GDn33pcj+CPt36kPVErmYdc/WjEf7fjy1mF6L+FMj0 K0PPQy8BfM10mRrFZQ0OCZQM6k8wIxPoX+I7TlA+cGml70uKGRuMKcRzU38oAVMi HvotZkuqM+Ko6mjgjr6YsOkVt+iA5JUj6lnsD2zhnciX2n5+sxN0bUzKpDC2wW+m 282Pv6JyoHQja0B+kmh936qJnG9+Pwg4XDrhdMCStdtf5+uDSrplGjnYONsH88Da qM/A4+9qyHO58Lo2HTDTCYbgLIRURuU1 -----END CERTIFICATE-----Generated at Sun May 11 12:25:50 2025 by rpki-client