$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft File: lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft (raw, json) Hash identifier: ppORcdTFT6B/BnkaaBnbl6rwMvB1tMXhQX7r+rRpx1I= Subject key identifier: 6E:44:08:AD:5F:CA:EE:DD:F6:C9:97:6C:B1:8E:7C:53:D0:AC:CF:BE Authority key identifier: 97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 Certificate issuer: /CN=A91A1C06/serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Certificate serial: 34F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft Manifest number: 34E7 Signing time: Thu 23 Oct 2025 04:22:32 +0000 Manifest this update: Thu 23 Oct 2025 04:22:32 +0000 Manifest next update: Thu 30 Oct 2025 04:22:32 +0000 Files and hashes: 1: lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl (hash: O14R8M5FY4sxUrE543Os3ceZBb8ft83UJzfgvBfdvBE=) 2: C64C7958422411EA9CA5F423C4F9AE02.roa (hash: gJwOccgnH3xfVK9Ge3NY4ACv1N9EO/ya1L5O9ulfS9A=) 3: FB50A65027B311EFBA31BB40C4F9AE02.roa (hash: lCjcuN3RSUzDTTX5oZhMnE3axtzeaFw5cyewHimqMWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 04:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13556 (0x34f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1C06, serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Validity Not Before: Oct 23 04:22:32 2025 GMT Not After : Oct 30 04:22:32 2025 GMT Subject: CN=68f9ad88-ef42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:99:43:16:3a:fb:2c:6a:e0:ca:f1:05:40:f9: a4:ed:d7:d3:cd:83:3b:90:32:cc:e3:c8:53:29:ba: 79:3f:02:90:16:bb:66:2c:29:e6:6d:32:18:cf:1b: c6:53:ed:e6:a5:4d:01:b1:f9:d9:4a:bf:4e:7f:7e: f7:dc:36:50:74:54:34:60:e7:25:ec:4d:aa:34:38: 58:8b:25:c8:c5:ce:6a:c9:d2:6d:cf:d7:68:38:4f: 69:4f:61:be:88:93:7e:49:a7:50:01:d5:d3:8d:64: 24:6a:34:68:3e:b6:c5:c0:25:0b:f9:5d:f4:4e:71: b2:2d:3a:fb:08:24:55:02:b0:a4:b9:00:a7:51:92: 25:07:9e:0e:92:9f:18:89:c8:da:da:fe:e4:62:d8: c9:26:0e:ee:ef:c0:bc:60:65:5b:06:36:f8:cc:b7: 90:cb:6c:c3:41:57:93:3a:32:15:2c:15:b6:0a:f0: a0:ff:f2:e3:2e:92:08:80:b6:3d:2e:18:d8:c5:f0: 90:0f:c6:ae:f8:d9:8a:24:ac:2c:7a:ad:72:a3:81: b9:84:67:16:0d:c5:27:ac:44:79:1f:57:1b:39:58: be:8a:dd:ea:03:d2:35:6f:33:c8:59:ca:58:87:a8: 11:b7:ba:ce:e8:27:e5:49:f2:9a:7d:1a:31:5e:da: 6e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:44:08:AD:5F:CA:EE:DD:F6:C9:97:6C:B1:8E:7C:53:D0:AC:CF:BE X509v3 Authority Key Identifier: keyid:97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:9c:38:37:2e:94:07:60:90:2d:b6:a3:6d:54:34:37:8c:83: da:ed:b6:3b:a4:b0:91:29:2a:c2:9a:bd:17:12:8d:8a:28:4e: 79:b2:4c:dd:d7:cf:05:b5:04:3a:c3:31:c7:5b:d2:09:16:b3: 49:20:1a:2f:39:6f:4e:53:5a:91:ab:ce:3b:e0:9b:a6:5c:fd: ca:0e:e5:52:81:49:64:f5:0d:80:d2:65:10:00:34:6f:07:fc: 73:cd:d1:bc:b7:0c:fe:5e:14:38:7e:49:93:53:69:07:e6:6f: c6:5a:a1:2a:02:90:e9:0c:17:27:a7:3e:57:07:c6:37:0e:c1: 54:f9:e4:83:64:4c:d6:02:44:8c:00:40:87:d2:20:79:a0:0e: 68:fc:fe:2c:b5:1d:2b:80:37:e0:1d:c9:ae:c6:60:86:08:f8: 72:fa:a9:a2:72:a9:d6:aa:a7:24:8d:a7:33:5c:c7:34:cc:98: de:34:d2:44:a6:30:76:ed:8b:15:65:21:98:21:18:de:6d:90: c2:c3:3b:a5:b2:67:47:4c:ec:cf:00:b0:bd:1a:a0:24:7e:28: 6d:12:79:38:8b:fa:4f:39:44:fe:91:82:07:49:39:af:14:93: 61:75:5e:8e:d7:c4:58:71:67:72:8f:0a:6e:df:c3:fa:e9:2c: df:a2:1f:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDMDYxMTAvBgNVBAUTKDk3Mzc3MTMwMDQ4MTlCNkI2NkZDNTZFNkVDODZCRTRE QzJFMjhFMTcwHhcNMjUxMDIzMDQyMjMyWhcNMjUxMDMwMDQyMjMyWjAYMRYwFAYD VQQDEw02OGY5YWQ4OC1lZjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2plDFjr7LGrgyvEFQPmk7dfTzYM7kDLM48hTKbp5PwKQFrtmLCnmbTIYzxvG U+3mpU0BsfnZSr9Of3733DZQdFQ0YOcl7E2qNDhYiyXIxc5qydJtz9doOE9pT2G+ iJN+SadQAdXTjWQkajRoPrbFwCUL+V30TnGyLTr7CCRVArCkuQCnUZIlB54Okp8Y icja2v7kYtjJJg7u78C8YGVbBjb4zLeQy2zDQVeTOjIVLBW2CvCg//LjLpIIgLY9 LhjYxfCQD8au+NmKJKwseq1yo4G5hGcWDcUnrER5H1cbOVi+it3qA9I1bzPIWcpY h6gRt7rO6CflSfKafRoxXtpuMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5ECK1f yu7d9smXbLGOfFPQrM++MB8GA1UdIwQYMBaAFJc3cTAEgZtrZvxW5uyGvk3C4o4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUMwNi82REVBRTIxQzFE OUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0ydG1fRmJtN0lhLVRjTGlq aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6ZHhNQVNCbTJ0bV9GYm03SWEtVGNMaWpoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUMwNi82REVBRTIxQzFEOUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0y dG1fRmJtN0lhLVRjTGlqaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbnDg3LpQHYJAttqNtVDQ3jIPa7bY7pLCRKSrCmr0XEo2KKE55skzd 188FtQQ6wzHHW9IJFrNJIBovOW9OU1qRq8474JumXP3KDuVSgUlk9Q2A0mUQADRv B/xzzdG8twz+XhQ4fkmTU2kH5m/GWqEqApDpDBcnpz5XB8Y3DsFU+eSDZEzWAkSM AECH0iB5oA5o/P4stR0rgDfgHcmuxmCGCPhy+qmicqnWqqckjaczXMc0zJjeNNJE pjB27YsVZSGYIRjebZDCwzulsmdHTOzPALC9GqAkfihtEnk4i/pPOUT+kYIHSTmv FJNhdV6O18RYcWdyjwpu38P66Szfoh+4 -----END CERTIFICATE-----Generated at Thu Oct 23 06:11:33 2025 by rpki-client