$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft File: lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft (raw, json) Hash identifier: iBQWxsJQ6fXy2qqoKSUCan/49rnmGPfSkp26qWCp/cQ= Subject key identifier: 35:88:4F:9B:30:CC:90:1E:91:55:E7:35:D4:97:0E:7B:B3:84:BF:95 Authority key identifier: 97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 Certificate issuer: /CN=A91A1C06/serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Certificate serial: 34DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft Manifest number: 34CE Signing time: Sat 06 Sep 2025 15:00:57 +0000 Manifest this update: Sat 06 Sep 2025 15:00:57 +0000 Manifest next update: Sat 13 Sep 2025 15:00:57 +0000 Files and hashes: 1: lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl (hash: e48HS8St7U03O67shzLwMrCrZM+P4OPZi6cr9ZcP200=) 2: C64C7958422411EA9CA5F423C4F9AE02.roa (hash: gJwOccgnH3xfVK9Ge3NY4ACv1N9EO/ya1L5O9ulfS9A=) 3: FB50A65027B311EFBA31BB40C4F9AE02.roa (hash: lCjcuN3RSUzDTTX5oZhMnE3axtzeaFw5cyewHimqMWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13531 (0x34db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1C06, serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Validity Not Before: Sep 6 15:00:57 2025 GMT Not After : Sep 13 15:00:57 2025 GMT Subject: CN=68bc4ca9-beb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cd:79:fc:a7:e8:e6:c3:26:bd:87:53:83:b5: 6b:78:7e:92:45:ba:15:c3:cb:e3:58:4d:df:e4:14: 8f:aa:d7:57:3e:1d:f1:b9:2a:3d:e5:50:74:73:d5: ab:1e:d0:3a:86:33:06:9c:21:40:c1:f7:74:bb:0d: 5c:3f:8e:08:65:63:37:b9:e2:76:f5:fb:c9:f4:b0: 51:69:41:e9:ea:4e:5c:63:5c:c1:6f:3b:9c:be:f7: 14:d0:f5:2f:2f:95:2c:c4:65:14:07:d7:68:a9:40: 8e:fe:06:2d:be:c7:50:0a:5a:8f:ec:ff:63:ea:62: 07:ac:8c:a9:10:02:92:fb:70:04:3e:c0:c5:32:04: d2:4e:be:dc:c0:ec:86:dc:a6:29:2b:d5:5f:1c:8f: 44:ea:b2:bf:ca:0b:bf:a1:b5:07:11:19:ca:b4:4d: 9e:3d:a7:88:44:0b:a8:ac:04:e6:3f:fc:df:8c:f9: 42:c5:c2:81:c3:fd:2d:30:8b:98:08:32:1c:aa:08: 32:ad:c7:65:89:51:66:ce:a1:65:fb:c3:34:a3:d3: 20:a2:e0:b5:cc:57:06:b0:6f:4c:ef:b6:b7:8b:e4: 9d:25:af:86:2e:8f:17:1e:e0:77:25:db:dc:06:73: 8b:3c:36:fa:bb:01:dd:8b:83:5a:24:19:22:d8:02: ac:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:88:4F:9B:30:CC:90:1E:91:55:E7:35:D4:97:0E:7B:B3:84:BF:95 X509v3 Authority Key Identifier: keyid:97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:48:25:ac:98:9c:7a:c9:1b:9f:9d:d1:68:a9:ac:e5:61:61: 53:06:d5:2d:be:80:64:97:63:95:75:b2:15:17:1d:2b:34:64: 24:1c:dd:92:66:db:4c:0e:2d:91:d8:67:0f:55:76:5e:24:c7: c3:d3:93:bd:c2:95:3f:6b:23:12:dc:4c:c5:70:9a:39:51:ef: de:72:a3:63:d8:25:27:98:95:02:37:7e:82:3b:65:43:6d:d8: 1a:03:b7:05:13:10:23:cc:21:be:13:aa:f9:da:8f:16:55:ae: 5c:29:7e:33:01:16:35:00:af:2e:3f:71:11:24:9c:56:0b:9b: 28:19:6a:bd:eb:06:61:31:48:4f:7a:47:c8:b2:7a:4f:56:fb: 81:14:af:68:87:f7:7b:05:a0:2d:69:af:9b:b3:be:a4:c1:1b: a0:07:71:5b:65:56:52:73:1e:42:ab:db:6a:2f:f2:1c:a0:2e: 7b:7d:62:b7:e0:6b:43:07:0c:34:90:b7:ed:6a:cf:8f:08:2c: f3:b3:82:1d:6c:8f:ec:a1:7f:bd:7c:1f:dd:1e:a7:c6:32:2f: 38:2a:e7:df:8f:55:eb:33:b6:46:b5:38:72:b7:4b:3d:06:11: 73:6d:11:0d:9f:58:ba:52:e0:f1:4e:7d:47:6c:06:b3:d1:38: 65:d2:fa:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDMDYxMTAvBgNVBAUTKDk3Mzc3MTMwMDQ4MTlCNkI2NkZDNTZFNkVDODZCRTRE QzJFMjhFMTcwHhcNMjUwOTA2MTUwMDU3WhcNMjUwOTEzMTUwMDU3WjAYMRYwFAYD VQQDEw02OGJjNGNhOS1iZWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxM15/Kfo5sMmvYdTg7VreH6SRboVw8vjWE3f5BSPqtdXPh3xuSo95VB0c9Wr HtA6hjMGnCFAwfd0uw1cP44IZWM3ueJ29fvJ9LBRaUHp6k5cY1zBbzucvvcU0PUv L5UsxGUUB9doqUCO/gYtvsdQClqP7P9j6mIHrIypEAKS+3AEPsDFMgTSTr7cwOyG 3KYpK9VfHI9E6rK/ygu/obUHERnKtE2ePaeIRAuorATmP/zfjPlCxcKBw/0tMIuY CDIcqggyrcdliVFmzqFl+8M0o9MgouC1zFcGsG9M77a3i+SdJa+GLo8XHuB3Jdvc BnOLPDb6uwHdi4NaJBki2AKshwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWIT5sw zJAekVXnNdSXDnuzhL+VMB8GA1UdIwQYMBaAFJc3cTAEgZtrZvxW5uyGvk3C4o4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUMwNi82REVBRTIxQzFE OUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0ydG1fRmJtN0lhLVRjTGlq aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6ZHhNQVNCbTJ0bV9GYm03SWEtVGNMaWpoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUMwNi82REVBRTIxQzFEOUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0y dG1fRmJtN0lhLVRjTGlqaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvSCWsmJx6yRufndFoqazlYWFTBtUtvoBkl2OVdbIVFx0rNGQkHN2S ZttMDi2R2GcPVXZeJMfD05O9wpU/ayMS3EzFcJo5Ue/ecqNj2CUnmJUCN36CO2VD bdgaA7cFExAjzCG+E6r52o8WVa5cKX4zARY1AK8uP3ERJJxWC5soGWq96wZhMUhP ekfIsnpPVvuBFK9oh/d7BaAtaa+bs76kwRugB3FbZVZScx5Cq9tqL/IcoC57fWK3 4GtDBww0kLftas+PCCzzs4IdbI/soX+9fB/dHqfGMi84Kuffj1XrM7ZGtThyt0s9 BhFzbRENn1i6UuDxTn1HbAaz0Thl0vpa -----END CERTIFICATE-----Generated at Mon Sep 8 02:24:48 2025 by rpki-client