$ rpki-client -vvf rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft File: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft (raw, json) Hash identifier: IRHdmVaHRcZBoaSOgujwNFIOIqC8YgR9UFDjBkxS/Yw= Subject key identifier: 37:7B:E1:A6:61:5C:B5:DC:1A:C4:40:A6:35:37:EC:9B:32:6C:EE:DD Authority key identifier: 97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7 Certificate issuer: /CN=A91597A7/serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft Manifest number: 87 Signing time: Thu 23 Jul 2026 09:27:37 +0000 Manifest this update: Thu 23 Jul 2026 09:27:36 +0000 Manifest next update: Thu 30 Jul 2026 09:27:36 +0000 Files and hashes: 1: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl (hash: NLj9SB04MZuLmGzabRxcyGOITabPdbmBmkxv0p4op+I=) 2: B674DD44BB3C11F0AD98C485C4F9AE02.roa (hash: gQ9o3ShWhFSXckCOxiyfc9G9ysU3P8Ay4D9+aX74JkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:27:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91597A7, serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7 Validity Not Before: Jul 23 09:27:36 2026 GMT Not After : Jul 30 09:27:36 2026 GMT Subject: CN=6a61de89-dbaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c7:f4:3f:e4:06:09:15:1e:59:9e:d3:14:16: 98:5f:47:ec:bb:f4:a9:64:a4:3e:74:75:f1:77:55: 45:64:04:9b:f2:55:2b:de:ab:10:89:37:f6:c7:ae: 31:6a:e5:7e:b4:43:4d:0d:d5:48:f1:30:5b:16:00: 7f:76:02:0b:f4:aa:67:cc:79:39:84:97:c8:46:7f: 1d:20:6c:f7:c3:c6:9e:82:fe:2a:f9:12:5d:e1:b5: 2c:48:95:51:dc:0e:4a:5d:de:be:1b:97:5e:d6:61: 1c:32:b6:6c:f7:97:bc:b7:c0:87:c4:f7:fa:ac:5e: 5a:e8:85:a9:2b:f8:3c:98:0f:fe:59:2c:e8:67:b3: b4:0c:18:2a:9d:37:21:34:49:49:24:95:65:17:09: 29:05:9c:23:12:a0:48:3f:c1:d8:34:77:21:ea:88: 2f:02:26:18:6f:55:97:04:65:74:70:2e:2c:a8:b1: 6f:0f:59:76:dd:c5:64:16:c7:cf:27:9d:6d:24:4d: a2:cf:68:1b:84:d3:2d:7a:c7:67:c4:fe:d7:06:b6: 1f:69:9d:ab:81:73:7c:1e:d2:fb:40:04:1c:f8:f2: 8f:66:51:88:b2:83:9f:ea:32:d4:11:f4:36:36:25: d1:5e:45:69:fd:45:67:d2:f3:f1:2d:ba:f4:64:ae: de:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7B:E1:A6:61:5C:B5:DC:1A:C4:40:A6:35:37:EC:9B:32:6C:EE:DD X509v3 Authority Key Identifier: keyid:97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f5:f4:65:ce:f5:ad:fc:48:55:ec:b0:1c:68:49:e0:66:27:4d: 9f:a1:01:3d:e2:b2:ce:93:1d:a6:83:8d:3f:ec:6e:9a:25:c3: 60:c1:4d:fb:12:f6:fe:8a:1e:f9:e5:4e:fa:eb:d4:17:99:d6: 09:a1:14:28:b9:b2:8e:2d:2e:eb:c5:03:cf:03:9b:46:78:dd: 11:b7:9f:ef:d3:cb:df:5c:4f:ca:e3:d3:74:f3:3a:b5:6c:f0: 41:c2:ca:6c:7c:33:26:83:dd:5c:25:6e:d0:ad:ff:af:d8:7c: 9d:eb:09:28:14:50:ce:0b:cb:d9:d3:67:63:ba:c6:60:f8:d8: 36:a9:8c:4f:ee:17:c4:db:e0:7e:3d:fa:0a:31:46:17:51:a5: 3a:bc:cd:6e:8e:61:15:7b:1b:6b:dc:1d:ca:f0:68:95:d5:58: bb:bf:11:1f:64:4d:fd:a1:31:e4:48:16:2b:1a:97:22:d3:9b: 75:df:71:be:56:b5:53:cc:ca:1a:1a:62:e7:60:bc:b1:47:02: 90:4d:86:b5:5b:86:35:10:db:88:60:d2:79:d8:b3:bb:9a:c4: 0a:d6:dc:39:be:81:75:aa:d6:f3:82:48:0c:39:35:84:a7:68: 6e:ec:56:e6:ff:5c:b6:ec:3f:3a:86:61:be:d1:ae:ef:b1:f7: c3:4c:9b:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk3QTcxMTAvBgNVBAUTKDk3MUY5OUQxOEY4MzBEQUQ0NTU0OTA2Q0FEMEFENTk5 OEJCQjUyQTcwHhcNMjYwNzIzMDkyNzM2WhcNMjYwNzMwMDkyNzM2WjAYMRYwFAYD VQQDEw02YTYxZGU4OS1kYmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsf0P+QGCRUeWZ7TFBaYX0fsu/SpZKQ+dHXxd1VFZASb8lUr3qsQiTf2x64x auV+tENNDdVI8TBbFgB/dgIL9KpnzHk5hJfIRn8dIGz3w8aegv4q+RJd4bUsSJVR 3A5KXd6+G5de1mEcMrZs95e8t8CHxPf6rF5a6IWpK/g8mA/+WSzoZ7O0DBgqnTch NElJJJVlFwkpBZwjEqBIP8HYNHch6ogvAiYYb1WXBGV0cC4sqLFvD1l23cVkFsfP J51tJE2iz2gbhNMtesdnxP7XBrYfaZ2rgXN8HtL7QAQc+PKPZlGIsoOf6jLUEfQ2 NiXRXkVp/UVn0vPxLbr0ZK7e+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDd74aZh XLXcGsRApjU37JsybO7dMB8GA1UdIwQYMBaAFJcfmdGPgw2tRVSQbK0K1ZmLu1Kn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTdBNy8wQjRDMkRBMEJB MzgxMUYwOTM0MDhGNkJDNEY5QUUwMi9seC1aMFktRERhMUZWSkJzclFyVm1ZdTdV cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x4LVowWS1ERGExRlZKQnNyUXJWbVl1N1VxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTdBNy8wQjRDMkRBMEJBMzgxMUYwOTM0MDhGNkJDNEY5QUUwMi9seC1aMFktRERh MUZWSkJzclFyVm1ZdTdVcWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA9fRlzvWt/EhV7LAcaEngZidNn6EBPeKyzpMdpoONP+xumiXDYMFN+xL2/ooe +eVO+uvUF5nWCaEUKLmyji0u68UDzwObRnjdEbef79PL31xPyuPTdPM6tWzwQcLK bHwzJoPdXCVu0K3/r9h8nesJKBRQzgvL2dNnY7rGYPjYNqmMT+4XxNvgfj36CjFG F1GlOrzNbo5hFXsba9wdyvBoldVYu78RH2RN/aEx5EgWKxqXItObdd9xvla1U8zK Ghpi52C8sUcCkE2GtVuGNRDbiGDSedizu5rECtbcOb6BdarW84JIDDk1hKdobuxW 5v9ctuw/OoZhvtGu77H3w0ybKQ== -----END CERTIFICATE-----Generated at Fri Jul 24 20:07:18 2026 by rpki-client