$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json) Hash identifier: cLDr0hwb8ir0Azfmvjb5O5oGTnImtRPN8T/5IaTxtik= Subject key identifier: B7:1D:05:31:A7:76:15:0F:AF:B1:3B:03:DB:B4:26:5C:AD:F2:3F:73 Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Certificate serial: 0705 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft Manifest number: 06E4 Signing time: Mon 26 Oct 2026 22:15:33 +0000 Manifest this update: Mon 26 Oct 2026 22:15:33 +0000 Manifest next update: Mon 02 Nov 2026 22:15:33 +0000 Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: ai22FDzWASoe5vdTLkNI1Esi9tfhUp9dk0akMBUwfRU=) 2: ECD21166AB8411F1A790DC444511F970.roa (hash: ExjgxAT7/41xhDKMAdd+90Z1vz5zXbsrx5cyjWeI5wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 22:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1797 (0x705) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Validity Not Before: Oct 26 22:15:33 2026 GMT Not After : Nov 2 22:15:33 2026 GMT Subject: CN=6adfd105-13c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:ef:0b:ba:ad:f1:fb:f7:69:0b:7e:d5:25: 38:25:2e:e2:c8:42:cc:e2:95:fc:91:08:33:0e:f7: b8:2d:1b:ce:95:3c:41:ca:59:4d:1f:ab:7b:39:f0: 6b:39:c2:ab:bb:e6:51:1b:3a:a1:c8:99:11:02:ff: dd:cf:72:a1:74:af:54:60:55:ea:2c:e0:3f:1f:f1: a7:47:ac:7b:b4:f6:4b:24:f1:de:11:19:85:1b:dc: 09:b7:8c:ce:c9:0d:76:9c:d4:7d:e9:4a:ae:5f:fc: bf:82:ed:49:e2:8e:9d:bf:6b:28:46:85:51:9c:92: b4:0e:93:ff:d2:26:ed:a5:6f:db:1e:4a:ca:e2:47: f6:dc:b3:d4:4f:2d:9c:97:b5:7a:50:4e:ed:fc:db: ad:8b:8d:1e:13:02:e0:05:49:1b:64:96:a6:c4:ec: f8:69:22:da:29:06:a7:70:68:9d:c1:36:75:e1:40: 82:a1:c2:71:c1:c4:62:b6:77:1d:a3:9c:84:40:bd: 57:69:eb:95:f1:08:ef:3a:af:79:11:b8:fd:f5:72: b8:a6:be:a8:f3:65:92:18:4a:e2:c0:e4:a7:87:92: eb:56:e6:85:23:60:92:3e:f8:3d:4e:08:33:35:2e: b1:27:bf:dd:2d:18:96:4b:59:f5:61:30:fe:e6:71: fc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1D:05:31:A7:76:15:0F:AF:B1:3B:03:DB:B4:26:5C:AD:F2:3F:73 X509v3 Authority Key Identifier: keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:0a:54:01:b9:64:4c:3c:c0:02:78:12:f0:2a:fe:dd:64:4c: 91:b9:16:e8:02:cf:07:84:76:06:a2:d2:86:eb:ba:e1:30:b8: 00:89:5d:dd:da:9f:b8:a0:19:22:6d:b7:9c:b9:54:dd:1c:3f: 79:4e:9e:89:20:5a:da:b8:89:45:64:ea:c2:0c:4d:4b:93:c1: 5a:88:4a:21:8a:0d:b8:44:fc:94:86:e0:e5:e5:53:34:ea:4c: aa:bb:b4:36:3c:d3:4d:5c:58:d4:30:2e:98:64:a3:28:52:d4: 5d:86:20:86:3f:73:45:a5:b6:eb:bc:d9:bd:78:3e:00:6c:65: 76:04:41:17:53:6e:36:be:a9:48:fb:53:b9:1d:3b:88:4a:3e: 51:36:f7:07:94:c4:33:83:e6:6b:73:45:6f:e4:12:2c:06:c0: a9:cb:8a:8a:60:a4:f5:cd:85:3f:6c:95:76:97:86:9e:df:a7: 25:d8:98:61:9f:ef:21:ce:b9:dd:dc:96:98:a5:ee:55:db:89: d5:65:66:99:72:aa:88:58:04:d2:ec:98:ce:6a:33:fd:62:0e: d1:86:58:ca:84:bc:07:ad:eb:29:ec:20:90:38:20:5a:4e:a6: bd:7e:82:45:1e:e4:33:dd:2e:1f:35:a2:85:09:f9:a7:38:41: 0c:8d:fc:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND RTVEMTE3RjkwHhcNMjYxMDI2MjIxNTMzWhcNMjYxMTAyMjIxNTMzWjAYMRYwFAYD VQQDEw02YWRmZDEwNS0xM2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSDvC7qt8fv3aQt+1SU4JS7iyELM4pX8kQgzDve4LRvOlTxByllNH6t7OfBr OcKru+ZRGzqhyJkRAv/dz3KhdK9UYFXqLOA/H/GnR6x7tPZLJPHeERmFG9wJt4zO yQ12nNR96UquX/y/gu1J4o6dv2soRoVRnJK0DpP/0ibtpW/bHkrK4kf23LPUTy2c l7V6UE7t/Nuti40eEwLgBUkbZJamxOz4aSLaKQancGidwTZ14UCCocJxwcRitncd o5yEQL1XaeuV8QjvOq95Ebj99XK4pr6o82WSGEriwOSnh5LrVuaFI2CSPvg9Tggz NS6xJ7/dLRiWS1n1YTD+5nH8zwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLcdBTGn dhUPr7E7A9u0Jlyt8j9zMB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4 NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQzOS83RjI0RkZEMEM4NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1 N3VycFNFZmFZS3pPWFJGX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgwpUAblkTDzAAngS8Cr+3WRMkbkW6ALPB4R2BqLShuu64TC4AIld3dqfuKAZ Im23nLlU3Rw/eU6eiSBa2riJRWTqwgxNS5PBWohKIYoNuET8lIbg5eVTNOpMqru0 NjzTTVxY1DAumGSjKFLUXYYghj9zRaW267zZvXg+AGxldgRBF1NuNr6pSPtTuR07 iEo+UTb3B5TEM4Pma3NFb+QSLAbAqcuKimCk9c2FP2yVdpeGnt+nJdiYYZ/vIc65 3dyWmKXuVduJ1WVmmXKqiFgE0uyYzmoz/WIO0YZYyoS8B63rKewgkDggWk6mvX6C RR7kM90uHzWihQn5pzhBDI38aQ== -----END CERTIFICATE-----Generated at Tue Oct 27 16:24:39 2026 by rpki-client