$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json) Hash identifier: 8DfxQeQv6mIPYARFAV/oiXg2yGPLp3Q6jruY1O+whaE= Subject key identifier: 05:07:7F:F9:A3:9A:25:13:3E:11:E9:B1:4E:FF:7A:14:B3:05:45:1D Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Certificate serial: 06AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft Manifest number: 068D Signing time: Wed 20 May 2026 22:39:01 +0000 Manifest this update: Wed 20 May 2026 22:39:00 +0000 Manifest next update: Wed 27 May 2026 22:39:00 +0000 Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: wPOqMfoUEHIRvl1JX4A72DXRTJlXru2WE44p0iF3vsg=) 2: 33B3C60425FD11EDA4097785C4F9AE02.roa (hash: LePw4oHq3VvyRQRlYtEqQW4K8VJQ5Ypp/eZ7/7VVj38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 22:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1706 (0x6aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Validity Not Before: May 20 22:39:00 2026 GMT Not After : May 27 22:39:00 2026 GMT Subject: CN=6a0e3804-0c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:51:ab:a5:17:6e:53:53:5d:e0:d6:25:9f:a6: 06:92:02:a5:e0:83:80:59:ee:03:2e:0c:dd:b2:1a: dd:e3:a4:73:71:1b:cc:1e:d6:fa:d5:f8:ba:65:82: 37:14:8a:f5:a9:34:d9:c5:76:75:c7:fe:15:50:4c: 24:27:65:0a:74:9b:57:5f:8c:45:24:4c:25:66:da: 34:96:03:c2:47:f4:f2:8b:e3:8f:13:cc:b5:34:41: e0:ae:06:24:18:4b:3b:13:87:68:35:56:0e:d6:c0: ed:e8:eb:25:db:76:ed:68:b4:8b:73:98:2b:e9:bb: 13:61:9d:5b:3e:94:1a:8e:5e:2e:0b:fa:a1:ca:f4: 77:d3:e3:24:47:2c:8c:cb:a4:2d:e3:eb:58:48:fc: 7b:40:28:98:e0:88:e7:fc:d6:ce:41:df:bb:74:bf: 0a:40:7e:ba:56:7e:a0:53:29:03:18:93:cf:a3:01: a0:95:1f:a4:a0:53:5b:4f:0d:49:00:d7:bd:03:5d: 99:7b:40:41:9b:c2:fa:35:51:41:c0:ec:a2:f3:28: a9:4f:7d:5f:2e:31:eb:d8:a9:e9:1c:f9:35:9d:58: ca:16:f8:0b:a4:11:33:2a:94:92:6e:8f:e9:47:ef: 60:c4:c9:31:38:0f:47:b3:a9:20:d8:79:91:ba:f3: f3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:07:7F:F9:A3:9A:25:13:3E:11:E9:B1:4E:FF:7A:14:B3:05:45:1D X509v3 Authority Key Identifier: keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:0b:2a:f6:11:4d:e5:e6:15:20:2e:24:4f:25:de:df:45:34: d4:11:77:2e:9e:90:cf:8c:29:cf:92:1d:2b:3b:28:68:71:61: ff:6e:aa:f6:05:28:c3:52:bb:a2:cc:6b:97:0f:e5:2a:7d:78: f5:bc:25:ed:39:50:d5:7f:37:8f:62:f5:a7:a8:4d:85:e9:4d: 2d:0d:f1:53:9a:fb:c2:25:cd:18:88:e6:68:7b:2d:ad:86:f1: fc:d0:cf:31:77:7c:7d:8a:79:cd:f0:80:dd:f4:18:00:bb:e4: 5c:f6:71:be:f2:31:f9:45:9c:ce:21:13:ed:ac:61:db:31:09: 15:57:cc:2a:91:b1:9a:c6:38:87:48:db:1b:f6:53:e7:85:76: 18:10:8d:d4:c4:ee:7b:d4:d4:cd:5e:49:7f:8b:67:ac:68:dc: c6:29:ed:07:dc:ce:ec:3a:23:cc:fe:28:81:65:71:70:5b:cc: 10:8c:ba:6a:ca:37:5a:b7:2f:b2:12:e9:78:c9:9f:5d:21:af: ed:e4:30:f1:79:b4:67:2e:6b:e4:47:63:be:62:b9:13:80:9a: 84:b8:d6:cb:87:22:a4:62:c9:41:a6:58:2f:e9:d6:c1:6e:cc: 08:72:8c:e7:7b:30:d2:eb:04:b0:5b:b3:24:c6:25:9e:e7:ad: ce:99:89:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND RTVEMTE3RjkwHhcNMjYwNTIwMjIzOTAwWhcNMjYwNTI3MjIzOTAwWjAYMRYwFAYD VQQDEw02YTBlMzgwNC0wYzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1GrpRduU1Nd4NYln6YGkgKl4IOAWe4DLgzdshrd46RzcRvMHtb61fi6ZYI3 FIr1qTTZxXZ1x/4VUEwkJ2UKdJtXX4xFJEwlZto0lgPCR/Tyi+OPE8y1NEHgrgYk GEs7E4doNVYO1sDt6Osl23btaLSLc5gr6bsTYZ1bPpQajl4uC/qhyvR30+MkRyyM y6Qt4+tYSPx7QCiY4Ijn/NbOQd+7dL8KQH66Vn6gUykDGJPPowGglR+koFNbTw1J ANe9A12Ze0BBm8L6NVFBwOyi8yipT31fLjHr2KnpHPk1nVjKFvgLpBEzKpSSbo/p R+9gxMkxOA9Hs6kg2HmRuvPzDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAUHf/mj miUTPhHpsU7/ehSzBUUdMB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4 NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQzOS83RjI0RkZEMEM4NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1 N3VycFNFZmFZS3pPWFJGX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACAsq9hFN5eYVIC4kTyXe30U01BF3Lp6Qz4wpz5IdKzsoaHFh/26q9gUow1K7 osxrlw/lKn149bwl7TlQ1X83j2L1p6hNhelNLQ3xU5r7wiXNGIjmaHstrYbx/NDP MXd8fYp5zfCA3fQYALvkXPZxvvIx+UWcziET7axh2zEJFVfMKpGxmsY4h0jbG/ZT 54V2GBCN1MTue9TUzV5Jf4tnrGjcxintB9zO7DojzP4ogWVxcFvMEIy6aso3Wrcv shLpeMmfXSGv7eQw8Xm0Zy5r5EdjvmK5E4CahLjWy4cipGLJQaZYL+nWwW7MCHKM 53sw0usEsFuzJMYlnuetzpmJyw== -----END CERTIFICATE-----Generated at Thu May 21 09:36:39 2026 by rpki-client