$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json) Hash identifier: JTKw2kt7pXGipmugeCQbbovR5pgmb99I6/3DypjGhMU= Subject key identifier: E2:7E:3C:D0:AE:0D:2F:CD:26:CA:62:12:ED:22:8F:D1:48:5A:D1:1B Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Certificate serial: 06ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft Manifest number: 06CC Signing time: Tue 08 Sep 2026 22:29:46 +0000 Manifest this update: Tue 08 Sep 2026 22:29:45 +0000 Manifest next update: Tue 15 Sep 2026 22:29:45 +0000 Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: RAE6/YdvFQAZnCPLvGCUslCDegnfR91s3PKe86bA9fU=) 2: ECD21166AB8411F1A790DC444511F970.roa (hash: ExjgxAT7/41xhDKMAdd+90Z1vz5zXbsrx5cyjWeI5wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 22:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1773 (0x6ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Validity Not Before: Sep 8 22:29:45 2026 GMT Not After : Sep 15 22:29:45 2026 GMT Subject: CN=6aa08c5a-2b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1c:cb:3f:fb:43:2c:15:cf:c1:b5:3d:7d:7c: cd:73:78:e2:27:ef:3e:fd:2a:2e:53:f7:df:58:1b: 86:1a:a5:df:58:f8:da:d1:46:24:6f:de:91:bc:d5: 42:09:cd:cb:a5:29:6a:f7:91:80:7c:5d:4e:c5:f1: 0c:49:19:48:de:af:08:f3:16:df:a1:e2:d9:fd:10: 0a:e7:0c:07:c4:18:7c:f2:e7:96:d5:ae:2a:74:3b: 9a:48:23:9c:e9:23:c2:08:a4:a0:05:f5:44:34:9b: 2e:7e:e2:3a:bd:52:94:1d:2d:c3:d8:e8:bd:db:60: 5f:82:e5:91:1c:5c:63:17:1d:0e:62:1d:3e:d3:3d: af:29:4c:3b:0b:90:30:12:14:17:a4:45:5a:e4:1e: 36:3c:06:e3:76:d6:59:c4:1c:71:41:9d:30:b1:f8: 30:5c:69:47:79:69:b5:8d:a9:68:62:ff:94:a5:b7: f8:73:77:5c:7d:e6:93:7f:86:9d:ce:bb:e4:e4:ba: e2:b6:f7:74:f0:f8:ab:d9:aa:5f:b1:5a:11:8d:01: 55:97:b4:77:c5:3d:4f:05:71:a4:19:57:92:3b:c1: 3c:63:fb:45:47:ab:7f:0e:6e:a3:4a:ed:fd:cd:bf: bf:d0:2a:f4:73:3f:46:32:85:f7:ad:54:88:1a:c3: 92:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7E:3C:D0:AE:0D:2F:CD:26:CA:62:12:ED:22:8F:D1:48:5A:D1:1B X509v3 Authority Key Identifier: keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:bf:03:55:ec:1c:7d:f0:c2:e5:71:a5:97:36:ba:4f:47:e2: 68:e1:24:31:1e:e5:75:a5:c2:12:2f:d3:fb:2e:50:55:af:55: a6:ff:9c:8c:77:fb:30:b7:2f:cd:24:a7:25:18:7c:43:c9:5a: e9:da:a3:22:bb:9b:d0:4c:8b:35:e2:0e:17:d2:b8:d7:6b:84: fe:eb:e8:29:e2:3b:e1:c6:2b:58:04:5c:ed:e2:6f:5f:d4:b0: 06:0b:15:0b:cd:92:33:35:34:d4:d3:cb:f6:a4:c3:57:27:5c: 54:00:a6:57:2f:36:9e:cf:09:8e:0f:3a:91:cf:c3:c7:19:20: c6:e1:fb:9b:62:f3:ec:f3:38:cc:0f:11:0d:94:cc:6d:ca:71: 94:51:ee:e3:fc:e2:eb:32:a2:8d:8f:5c:42:7a:42:ef:f6:70: 21:c7:97:c0:04:44:37:75:0a:04:d4:ee:78:44:09:5a:c4:31: 15:40:a8:04:aa:dd:5f:10:f2:b3:70:b0:2d:e8:df:d7:b9:52: 66:1d:bd:40:c5:27:1a:73:54:b4:d3:93:d1:a8:e1:81:5c:c1: de:d6:4d:7c:27:a9:43:e1:e9:79:bb:35:0b:02:ab:8d:1d:db: 43:d1:19:8c:78:19:d8:b7:b9:65:f2:75:17:36:a4:05:1e:98: d7:3d:87:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND RTVEMTE3RjkwHhcNMjYwOTA4MjIyOTQ1WhcNMjYwOTE1MjIyOTQ1WjAYMRYwFAYD VQQDEw02YWEwOGM1YS0yYjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlxzLP/tDLBXPwbU9fXzNc3jiJ+8+/SouU/ffWBuGGqXfWPja0UYkb96RvNVC Cc3LpSlq95GAfF1OxfEMSRlI3q8I8xbfoeLZ/RAK5wwHxBh88ueW1a4qdDuaSCOc 6SPCCKSgBfVENJsufuI6vVKUHS3D2Oi922BfguWRHFxjFx0OYh0+0z2vKUw7C5Aw EhQXpEVa5B42PAbjdtZZxBxxQZ0wsfgwXGlHeWm1jaloYv+Upbf4c3dcfeaTf4ad zrvk5Lritvd08Pir2apfsVoRjQFVl7R3xT1PBXGkGVeSO8E8Y/tFR6t/Dm6jSu39 zb+/0Cr0cz9GMoX3rVSIGsOSUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOJ+PNCu DS/NJspiEu0ij9FIWtEbMB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4 NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQzOS83RjI0RkZEMEM4NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1 N3VycFNFZmFZS3pPWFJGX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF78DVewcffDC5XGllza6T0fiaOEkMR7ldaXCEi/T+y5QVa9Vpv+cjHf7MLcv zSSnJRh8Q8la6dqjIrub0EyLNeIOF9K412uE/uvoKeI74cYrWARc7eJvX9SwBgsV C82SMzU01NPL9qTDVydcVACmVy82ns8Jjg86kc/DxxkgxuH7m2Lz7PM4zA8RDZTM bcpxlFHu4/zi6zKijY9cQnpC7/ZwIceXwAREN3UKBNTueEQJWsQxFUCoBKrdXxDy s3CwLejf17lSZh29QMUnGnNUtNOT0ajhgVzB3tZNfCepQ+Hpebs1CwKrjR3bQ9EZ jHgZ2Le5ZfJ1FzakBR6Y1z2HzQ== -----END CERTIFICATE-----Generated at Thu Sep 10 12:00:00 2026 by rpki-client