$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json) Hash identifier: LaLAmVpkmGjWq9B2feekPTzo9qk38gAaXF7UVTQU7kE= Subject key identifier: D4:5C:0C:C8:EC:0D:27:2A:19:7B:E5:23:A5:B3:7C:6F:26:0C:CB:7B Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Certificate serial: 06CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft Manifest number: 06B1 Signing time: Sun 26 Jul 2026 23:20:03 +0000 Manifest this update: Sun 26 Jul 2026 23:20:02 +0000 Manifest next update: Sun 02 Aug 2026 23:20:02 +0000 Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: fWfpW+cHA1tKFWVNKYHIuXphgugiAnzIUtavSKWz5ZU=) 2: 33B3C60425FD11EDA4097785C4F9AE02.roa (hash: iRFvE1rr26SrK4L0azwVGFZPRC7sliMA8aHjEhbdZr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1743 (0x6cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Validity Not Before: Jul 26 23:20:02 2026 GMT Not After : Aug 2 23:20:02 2026 GMT Subject: CN=6a669623-61e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e5:e1:15:1c:df:34:7f:de:62:c3:52:e4:8d: 4a:cb:fd:33:b4:72:09:ec:8f:a0:d2:9c:a5:e5:ac: e1:95:f8:98:ec:45:de:39:bf:82:55:2d:f5:39:5f: 33:24:5f:ef:8e:46:ef:33:85:13:79:f2:45:49:ae: e0:20:7e:0d:f3:33:e0:6e:88:cc:e3:ac:b5:be:0f: 29:f0:71:a3:54:5d:60:e5:5a:74:76:e4:70:c3:e8: 06:cd:c8:b9:73:a5:94:da:06:94:6a:8c:e3:e0:c8: 27:98:3a:ca:1c:07:b5:15:76:33:93:53:30:93:f5: fb:e7:1d:e0:62:4d:b8:e0:5e:26:9e:e8:98:e8:c4: 3d:c3:11:2f:c2:8d:a4:17:0c:ed:57:bc:e8:be:67: ec:00:da:88:bf:f3:b6:c0:d1:06:c1:5d:63:61:13: 7c:23:5a:79:e0:a1:d4:46:08:8b:33:9f:94:82:aa: c1:d0:13:40:8d:bc:f4:20:9a:83:56:33:05:52:be: 55:5f:74:e9:d0:c7:30:0a:eb:cd:71:f2:73:81:79: c9:2b:60:11:43:11:99:1a:12:14:d4:b0:a5:b7:23: 7e:4d:5a:70:84:44:8f:fa:a9:c7:1c:63:29:3d:bf: 4b:41:07:35:d1:a3:b2:c2:28:cc:75:51:d9:50:1e: 72:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5C:0C:C8:EC:0D:27:2A:19:7B:E5:23:A5:B3:7C:6F:26:0C:CB:7B X509v3 Authority Key Identifier: keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:32:ae:f0:d1:04:f9:29:74:9c:71:18:c2:a2:64:54:16:0a: 67:0d:2a:c2:2d:16:72:5a:60:54:bf:2d:93:ec:c8:a8:e0:d1: 83:57:e7:70:69:8d:97:9e:2b:86:80:2f:cc:a5:1c:38:1b:ff: 33:53:54:11:87:aa:5c:a4:41:f9:05:40:ee:a6:b5:20:bf:10: 4b:13:31:7e:10:a1:37:e3:b9:4e:c2:18:23:63:20:29:7c:38: 08:38:0d:59:37:1f:a6:00:72:64:c0:7e:af:5a:f3:1e:42:06: b5:41:72:d6:47:f0:46:25:92:89:e1:0d:23:88:ec:9e:2b:e8: 85:3e:7e:6b:a6:cd:15:fe:7c:cf:d8:02:61:f7:b4:be:e4:33: 72:cb:5b:74:ed:7f:d7:47:65:b9:b5:d5:af:87:33:ef:1d:51: 14:55:4b:fa:9c:13:a3:60:78:06:96:5f:fd:33:60:49:67:be: e5:f8:30:39:96:13:7d:92:02:82:c6:88:d7:ed:ff:66:05:e1: 75:c4:a0:60:ee:54:08:a5:d2:e5:19:57:67:60:31:94:e8:31: e4:89:22:b1:a6:ec:71:4f:c7:a9:68:7a:e5:4e:d9:ca:ae:94: 62:fe:33:56:73:83:7a:91:a2:f3:1b:be:95:50:18:bf:3d:a8: 31:1e:81:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND RTVEMTE3RjkwHhcNMjYwNzI2MjMyMDAyWhcNMjYwODAyMjMyMDAyWjAYMRYwFAYD VQQDEw02YTY2OTYyMy02MWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuXhFRzfNH/eYsNS5I1Ky/0ztHIJ7I+g0pyl5azhlfiY7EXeOb+CVS31OV8z JF/vjkbvM4UTefJFSa7gIH4N8zPgbojM46y1vg8p8HGjVF1g5Vp0duRww+gGzci5 c6WU2gaUaozj4MgnmDrKHAe1FXYzk1Mwk/X75x3gYk244F4mnuiY6MQ9wxEvwo2k FwztV7zovmfsANqIv/O2wNEGwV1jYRN8I1p54KHURgiLM5+UgqrB0BNAjbz0IJqD VjMFUr5VX3Tp0McwCuvNcfJzgXnJK2ARQxGZGhIU1LCltyN+TVpwhESP+qnHHGMp Pb9LQQc10aOywijMdVHZUB5ysQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNRcDMjs DScqGXvlI6WzfG8mDMt7MB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4 NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQzOS83RjI0RkZEMEM4NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1 N3VycFNFZmFZS3pPWFJGX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMjKu8NEE+Sl0nHEYwqJkVBYKZw0qwi0WclpgVL8tk+zIqODRg1fncGmNl54r hoAvzKUcOBv/M1NUEYeqXKRB+QVA7qa1IL8QSxMxfhChN+O5TsIYI2MgKXw4CDgN WTcfpgByZMB+r1rzHkIGtUFy1kfwRiWSieENI4jsnivohT5+a6bNFf58z9gCYfe0 vuQzcstbdO1/10dlubXVr4cz7x1RFFVL+pwTo2B4BpZf/TNgSWe+5fgwOZYTfZIC gsaI1+3/ZgXhdcSgYO5UCKXS5RlXZ2AxlOgx5IkisabscU/HqWh65U7Zyq6UYv4z VnODepGi8xu+lVAYvz2oMR6BgQ== -----END CERTIFICATE-----Generated at Mon Jul 27 07:16:33 2026 by rpki-client