$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json) Hash identifier: CmtyftBsFABiDR1z8V2Tgslm39ukmPsPPN3gADuUPGk= Subject key identifier: 4B:8C:9A:2F:EA:35:01:A5:4C:99:E7:92:41:73:BB:BC:C7:BB:DF:76 Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Certificate serial: 05F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft Manifest number: 05D6 Signing time: Fri 30 May 2025 23:21:07 +0000 Manifest this update: Fri 30 May 2025 23:21:06 +0000 Manifest next update: Fri 06 Jun 2025 23:21:06 +0000 Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: loNiU8DUURJHuNYZK95GMTDplj1nRpLP8rjHYgsQKFg=) 2: 33B3C60425FD11EDA4097785C4F9AE02.roa (hash: YmHPckT0dIFNHqb1yogDfQ9UG6heaZWXlhIbS1BD/e8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:21:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1522 (0x5f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Validity Not Before: May 30 23:21:06 2025 GMT Not After : Jun 6 23:21:06 2025 GMT Subject: CN=683a3d63-d65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2f:e7:a8:33:bc:e8:0c:60:83:62:c4:70:d9: 1a:ff:ad:7a:3d:2d:1a:70:06:66:49:ca:b3:87:da: ee:62:1b:30:ed:ac:fd:27:bb:54:df:8b:8c:c2:87: c4:87:f5:0c:24:85:cd:bb:05:2b:20:a6:54:fb:db: c9:5e:0e:71:62:7b:7b:fb:19:19:3c:0f:e5:8c:e5: a7:cd:1e:5e:0f:c8:9d:44:1c:07:4f:da:2a:f5:45: d0:71:dd:66:16:3d:16:95:97:09:43:2a:d3:23:5b: 26:50:c8:e5:21:cc:b9:db:1d:74:18:1a:d8:b8:6e: 93:f2:15:07:1a:ab:24:b2:ae:1f:45:75:89:0f:0a: 67:6f:d4:71:86:b8:26:90:56:44:72:0c:da:95:ca: 33:52:ea:f4:91:61:44:10:de:bf:85:25:6a:b2:6e: f3:20:28:73:09:89:7e:50:74:10:87:19:b0:4b:8c: 41:23:75:70:9d:7d:72:4e:98:6e:7a:87:b4:d4:6e: a5:f0:6d:8d:df:29:23:00:3c:b5:c0:eb:fc:02:c3: 7d:c7:8f:21:11:fd:57:aa:1a:f9:a4:fb:16:1c:a7: d9:24:34:10:0f:72:27:96:df:4d:eb:12:a5:9b:63: 8e:4c:2b:ed:17:cc:2d:e4:94:6d:cb:a5:6b:71:04: 8c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8C:9A:2F:EA:35:01:A5:4C:99:E7:92:41:73:BB:BC:C7:BB:DF:76 X509v3 Authority Key Identifier: keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:43:68:9e:bb:e1:98:cb:f5:93:92:86:bd:5d:31:a6:2e:ad: b2:25:ec:b4:18:8c:d9:d9:87:bc:bb:fb:b8:a8:14:17:2a:d6: f4:da:26:3b:32:09:05:58:09:07:db:4c:c4:2f:77:f5:03:d2: db:95:62:62:42:4f:51:53:1c:6f:af:2d:e1:c0:ae:a4:ee:09: 4c:67:45:80:2e:4c:81:fc:43:30:ab:01:9e:36:85:48:8f:55: 5d:f6:86:af:5d:1e:93:cb:26:fb:de:8c:91:45:b3:7f:05:47: 63:3f:8f:59:cd:18:ed:04:13:84:19:cb:15:5e:89:99:05:7d: 3d:f0:b0:db:c0:a7:40:60:14:41:e2:46:eb:72:ec:55:57:8a: a9:21:02:e8:89:48:5a:c1:5c:e2:e9:27:a2:67:d5:a1:db:ec: 0f:d3:61:cb:48:c7:9e:f0:2a:6c:15:d6:a5:02:2f:d6:a6:18: 88:67:40:88:0f:aa:f0:95:31:70:0c:5d:90:65:f0:47:31:70: 7e:23:9c:68:8b:4b:e7:8e:38:62:86:81:00:a0:58:c7:67:f1: 91:25:c9:b3:a9:91:a8:89:3e:ec:81:91:59:b2:f5:80:78:e9: c6:bc:c7:ec:9b:ee:b6:80:d4:70:55:ed:05:31:59:8d:ff:57: 38:8a:24:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND RTVEMTE3RjkwHhcNMjUwNTMwMjMyMTA2WhcNMjUwNjA2MjMyMTA2WjAYMRYwFAYD VQQDEw02ODNhM2Q2My1kNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyy/nqDO86Axgg2LEcNka/616PS0acAZmScqzh9ruYhsw7az9J7tU34uMwofE h/UMJIXNuwUrIKZU+9vJXg5xYnt7+xkZPA/ljOWnzR5eD8idRBwHT9oq9UXQcd1m Fj0WlZcJQyrTI1smUMjlIcy52x10GBrYuG6T8hUHGqsksq4fRXWJDwpnb9Rxhrgm kFZEcgzalcozUur0kWFEEN6/hSVqsm7zIChzCYl+UHQQhxmwS4xBI3VwnX1yTphu eoe01G6l8G2N3ykjADy1wOv8AsN9x48hEf1Xqhr5pPsWHKfZJDQQD3Inlt9N6xKl m2OOTCvtF8wt5JRty6VrcQSMBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuMmi/q NQGlTJnnkkFzu7zHu992MB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4 NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQzOS83RjI0RkZEMEM4NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1 N3VycFNFZmFZS3pPWFJGX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7Q2ieu+GYy/WTkoa9XTGmLq2yJey0GIzZ2Ye8u/u4qBQXKtb02iY7 MgkFWAkH20zEL3f1A9LblWJiQk9RUxxvry3hwK6k7glMZ0WALkyB/EMwqwGeNoVI j1Vd9oavXR6Tyyb73oyRRbN/BUdjP49ZzRjtBBOEGcsVXomZBX098LDbwKdAYBRB 4kbrcuxVV4qpIQLoiUhawVzi6SeiZ9Wh2+wP02HLSMee8CpsFdalAi/WphiIZ0CI D6rwlTFwDF2QZfBHMXB+I5xoi0vnjjhihoEAoFjHZ/GRJcmzqZGoiT7sgZFZsvWA eOnGvMfsm+62gNRwVe0FMVmN/1c4iiRh -----END CERTIFICATE-----Generated at Sat May 31 16:39:52 2025 by rpki-client