$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json) Hash identifier: gc2gHV0JoPPxVNDXZ0IczkMbt4BzfJmqpKkToP9bgl4= Subject key identifier: 80:09:7C:06:9D:6D:A8:15:26:A1:7E:50:05:DC:F4:BF:4A:40:D7:FD Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Certificate serial: 060C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft Manifest number: 05F0 Signing time: Sun 20 Jul 2025 23:14:33 +0000 Manifest this update: Sun 20 Jul 2025 23:14:33 +0000 Manifest next update: Sun 27 Jul 2025 23:14:33 +0000 Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: 2bmharwFH5LSmP2lw8OGZOKNgQqFT8c3T5VU/WMqVsE=) 2: 33B3C60425FD11EDA4097785C4F9AE02.roa (hash: YmHPckT0dIFNHqb1yogDfQ9UG6heaZWXlhIbS1BD/e8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1548 (0x60c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Validity Not Before: Jul 20 23:14:33 2025 GMT Not After : Jul 27 23:14:33 2025 GMT Subject: CN=687d7859-010b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e6:22:39:08:76:54:d4:6a:2e:f2:d1:5f:61: 81:19:36:8a:08:3b:9e:ca:22:40:f7:b8:35:24:27: ce:ef:79:36:f1:bb:fa:17:4a:b8:74:cd:61:97:0b: 4d:2b:e9:06:9d:ab:9c:bf:2c:0c:67:f1:3e:18:e9: c3:f9:31:e6:d9:95:4a:6d:7a:d0:c1:b6:2a:f7:10: 9e:89:4e:10:b8:13:8b:a0:08:fd:31:82:6b:20:cd: 02:fe:7b:45:02:f2:30:d4:bb:df:12:c1:1e:93:7a: 82:ef:10:11:ef:87:ef:e4:2f:5a:48:84:51:7f:cc: 9d:96:b0:5a:13:9f:de:57:af:80:0e:7a:13:15:68: 5d:35:ac:fb:6b:91:76:3e:a3:a0:41:1d:a3:38:a5: a8:82:d4:14:a3:de:8f:ea:48:bf:d2:11:e9:e1:92: dd:62:68:81:fb:8e:f7:3a:b7:88:43:d1:21:6f:bf: ad:c5:52:54:43:1b:87:93:3b:e5:79:7b:71:70:14: f6:21:ba:ef:91:19:e6:c3:36:a3:c0:fd:1e:c7:1b: 9c:87:0c:21:dc:78:6e:95:0b:28:3c:db:46:81:f3: 84:68:5c:c0:11:7a:94:7b:a0:bb:ee:15:2c:cf:2e: ed:8b:fa:d6:2c:5d:9c:e3:be:0e:d5:08:7d:e9:49: ef:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:09:7C:06:9D:6D:A8:15:26:A1:7E:50:05:DC:F4:BF:4A:40:D7:FD X509v3 Authority Key Identifier: keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:df:fd:ba:b4:07:50:1c:4c:eb:c7:23:04:28:b6:7f:f7:bc: 4e:d6:17:a7:12:e0:90:dd:29:44:96:c4:a0:09:d9:54:0c:d0: 47:64:2d:98:23:7b:5d:62:79:05:ae:62:59:e9:67:d5:f0:ea: cf:01:c0:71:7f:f7:b1:8f:81:92:81:70:c1:bc:ad:e7:80:b9: 23:4b:fa:35:5c:d4:82:25:88:ad:0e:ff:30:35:54:db:48:5e: 2d:d5:a0:0e:67:9f:f6:53:66:42:af:a0:f0:cd:f7:7c:74:2f: 69:bd:dd:5c:61:c4:22:8e:97:36:d8:58:5b:60:d7:67:af:f7: 20:50:07:a6:cb:3d:0e:ab:b9:06:d0:fe:61:fc:30:09:dc:05: da:55:7d:f6:be:4a:32:f7:78:91:b8:6e:f5:6d:93:65:8d:d6: 07:7f:5e:9f:3a:d2:fb:48:e9:ca:f4:66:e8:12:78:1d:8a:4b: bb:9b:90:3d:00:2a:21:3e:2d:16:ba:31:62:93:9d:c9:8c:c5: 34:ea:2c:4d:a0:46:cb:19:80:54:b5:e5:1a:8f:62:fa:d9:0d: 9d:1d:bf:a9:bf:9f:64:5e:60:18:54:5b:21:c4:cc:86:43:6b: 84:e1:f1:87:61:50:23:6f:68:ed:f2:fd:7e:e6:9f:ec:ea:1e: ae:3e:71:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND RTVEMTE3RjkwHhcNMjUwNzIwMjMxNDMzWhcNMjUwNzI3MjMxNDMzWjAYMRYwFAYD VQQDEw02ODdkNzg1OS0wMTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeYiOQh2VNRqLvLRX2GBGTaKCDueyiJA97g1JCfO73k28bv6F0q4dM1hlwtN K+kGnaucvywMZ/E+GOnD+THm2ZVKbXrQwbYq9xCeiU4QuBOLoAj9MYJrIM0C/ntF AvIw1LvfEsEek3qC7xAR74fv5C9aSIRRf8ydlrBaE5/eV6+ADnoTFWhdNaz7a5F2 PqOgQR2jOKWogtQUo96P6ki/0hHp4ZLdYmiB+473OreIQ9Ehb7+txVJUQxuHkzvl eXtxcBT2IbrvkRnmwzajwP0exxuchwwh3HhulQsoPNtGgfOEaFzAEXqUe6C77hUs zy7ti/rWLF2c474O1Qh96Unv6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIAJfAad bagVJqF+UAXc9L9KQNf9MB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4 NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQzOS83RjI0RkZEMEM4NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1 N3VycFNFZmFZS3pPWFJGX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS3/26tAdQHEzrxyMEKLZ/97xO1henEuCQ3SlElsSgCdlUDNBHZC2Y I3tdYnkFrmJZ6WfV8OrPAcBxf/exj4GSgXDBvK3ngLkjS/o1XNSCJYitDv8wNVTb SF4t1aAOZ5/2U2ZCr6Dwzfd8dC9pvd1cYcQijpc22FhbYNdnr/cgUAemyz0Oq7kG 0P5h/DAJ3AXaVX32vkoy93iRuG71bZNljdYHf16fOtL7SOnK9GboEngdiku7m5A9 ACohPi0WujFik53JjMU06ixNoEbLGYBUteUaj2L62Q2dHb+pv59kXmAYVFshxMyG Q2uE4fGHYVAjb2jt8v1+5p/s6h6uPnEI -----END CERTIFICATE-----Generated at Mon Jul 21 08:40:22 2025 by rpki-client