$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json) Hash identifier: 8jpfYb0rS/xUNaKW2QlO5XVrarQlOhoLgrGM32Elc2s= Subject key identifier: F7:E8:A8:2C:CA:39:70:C2:30:79:E7:A8:2E:65:BC:8E:AA:23:7B:61 Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Certificate serial: 063D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft Manifest number: 0621 Signing time: Sun 26 Oct 2025 23:49:43 +0000 Manifest this update: Sun 26 Oct 2025 23:49:43 +0000 Manifest next update: Sun 02 Nov 2025 23:49:43 +0000 Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: LQlOBfJG2n815XkozoBw0I32ovwEoDkpwNeHHxaxaQg=) 2: 33B3C60425FD11EDA4097785C4F9AE02.roa (hash: YmHPckT0dIFNHqb1yogDfQ9UG6heaZWXlhIbS1BD/e8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 23:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1597 (0x63d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Validity Not Before: Oct 26 23:49:43 2025 GMT Not After : Nov 2 23:49:43 2025 GMT Subject: CN=68feb397-edee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:64:fc:1b:39:d9:29:f3:cc:31:d9:7b:b7:ea: 3d:61:38:db:fe:c0:dc:60:19:49:c7:36:94:1f:4b: 56:3c:31:3a:cf:fd:97:52:ac:2e:a7:15:f7:24:24: 5a:de:69:87:33:c9:9a:39:12:d9:20:c3:29:a6:d9: 9b:df:0b:04:6d:b4:23:c7:f6:a1:33:5a:9c:77:77: 15:38:ad:c9:74:f7:50:9a:3c:7b:81:4c:44:64:ba: 01:5e:5a:46:30:39:bb:bb:02:de:06:2d:31:2e:6a: 80:a8:f3:9c:4e:7a:c3:88:4c:f8:07:03:c4:7c:86: 39:c7:73:87:36:d8:58:aa:fa:23:f1:ae:2c:1d:cc: 4b:8a:92:36:cb:9a:4a:97:61:e4:f4:78:88:61:50: 8d:ab:b3:0e:ae:f6:b6:f5:db:dd:2e:b0:79:f0:b4: c8:1d:77:d1:cd:dc:8d:cd:f1:7e:93:dc:76:44:a1: 4d:68:85:d7:f9:19:5b:a2:5b:65:69:e6:58:18:59: 4f:30:55:ca:91:f9:9f:3e:9b:9a:3a:63:70:5b:0c: e9:e6:69:80:27:d3:2a:f6:4a:08:2c:66:be:5a:56: bf:0a:25:2c:25:5b:e1:20:b0:c8:77:7d:c0:b3:e8: be:b5:ab:56:ff:6a:37:51:ba:8f:97:3c:36:b2:3a: 17:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E8:A8:2C:CA:39:70:C2:30:79:E7:A8:2E:65:BC:8E:AA:23:7B:61 X509v3 Authority Key Identifier: keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:1b:96:0d:09:6d:79:22:93:f0:75:b1:77:5b:31:72:b5:e1: d3:da:dd:e7:26:d9:5a:9e:f4:e3:db:2c:f5:ce:f9:0a:d3:d0: 7b:8e:09:05:10:91:15:85:ae:db:ce:72:43:d0:a2:e1:cd:b7: 60:58:d9:6e:53:1a:23:d3:08:5f:85:ca:c7:3b:3c:ac:fb:b6: bf:30:60:46:fa:d2:eb:6e:06:18:45:26:9c:f0:7e:d3:7f:07: 93:d8:80:f2:26:5d:56:28:a5:04:74:bc:7b:1a:d6:a3:f2:62: 9c:af:26:ca:0a:ef:d7:65:6f:bc:93:74:fe:bc:21:2f:6d:76: 36:4a:bd:38:81:d2:38:97:76:29:88:29:6b:6c:1f:d9:49:1e: 27:a4:49:72:49:6a:e1:c5:84:7f:45:f9:4f:2b:92:f7:c2:24: 31:2f:26:43:45:00:7a:f6:ed:ad:03:05:62:4d:69:c2:3c:a7: 5a:9c:33:a7:67:13:22:4d:d7:98:bf:05:b6:71:22:00:a5:31: 7c:b6:82:36:11:d3:9d:b4:54:c1:95:8c:7c:db:56:92:89:51: ea:2b:c8:74:1b:11:08:86:4c:0c:98:e9:c7:a4:ce:aa:a8:67: c8:f4:92:47:c2:26:85:9d:39:47:0b:9a:29:b8:2f:27:d8:46: e3:ac:be:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND RTVEMTE3RjkwHhcNMjUxMDI2MjM0OTQzWhcNMjUxMTAyMjM0OTQzWjAYMRYwFAYD VQQDEw02OGZlYjM5Ny1lZGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8WT8GznZKfPMMdl7t+o9YTjb/sDcYBlJxzaUH0tWPDE6z/2XUqwupxX3JCRa 3mmHM8maORLZIMMpptmb3wsEbbQjx/ahM1qcd3cVOK3JdPdQmjx7gUxEZLoBXlpG MDm7uwLeBi0xLmqAqPOcTnrDiEz4BwPEfIY5x3OHNthYqvoj8a4sHcxLipI2y5pK l2Hk9HiIYVCNq7MOrva29dvdLrB58LTIHXfRzdyNzfF+k9x2RKFNaIXX+Rlboltl aeZYGFlPMFXKkfmfPpuaOmNwWwzp5mmAJ9Mq9koILGa+Wla/CiUsJVvhILDId33A s+i+tatW/2o3UbqPlzw2sjoXEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfoqCzK OXDCMHnnqC5lvI6qI3thMB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4 NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQzOS83RjI0RkZEMEM4NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1 N3VycFNFZmFZS3pPWFJGX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6G5YNCW15IpPwdbF3WzFyteHT2t3nJtlanvTj2yz1zvkK09B7jgkF EJEVha7bznJD0KLhzbdgWNluUxoj0whfhcrHOzys+7a/MGBG+tLrbgYYRSac8H7T fweT2IDyJl1WKKUEdLx7Gtaj8mKcrybKCu/XZW+8k3T+vCEvbXY2Sr04gdI4l3Yp iClrbB/ZSR4npElySWrhxYR/RflPK5L3wiQxLyZDRQB69u2tAwViTWnCPKdanDOn ZxMiTdeYvwW2cSIApTF8toI2EdOdtFTBlYx821aSiVHqK8h0GxEIhkwMmOnHpM6q qGfI9JJHwiaFnTlHC5opuC8n2EbjrL41 -----END CERTIFICATE-----Generated at Tue Oct 28 13:46:43 2025 by rpki-client