$ rpki-client -vvvf rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft File: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft (raw, json) Hash identifier: TIsn9HAFyraicjW2Fis+R8gWh3RH0kPWEVWYjHX4cIo= Subject key identifier: 70:42:91:15:79:D9:D1:FE:08:94:5F:BD:2B:DE:44:5E:2A:4F:16:8F Authority key identifier: 97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7 Certificate issuer: /CN=A91597A7/serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft Manifest number: A8 Signing time: Wed 23 Sep 2026 06:55:54 +0000 Manifest this update: Wed 23 Sep 2026 06:55:54 +0000 Manifest next update: Wed 30 Sep 2026 06:55:54 +0000 Files and hashes: 1: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl (hash: pR8PgLwIszLfgpeUadAQzdTibQtjtvmxEpZ3Sl8Q6iU=) 2: hi8Da_f1U_A7dPFYvZnKn1AJNaY.asa (hash: tFI3fphkrBha6He4WZbmhJjoS74HVWZeFSvJVQfj8sU=) 3: B674DD44BB3C11F0AD98C485C4F9AE02.roa (hash: gQ9o3ShWhFSXckCOxiyfc9G9ysU3P8Ay4D9+aX74JkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91597A7, serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7 Validity Not Before: Sep 23 06:55:54 2026 GMT Not After : Sep 30 06:55:54 2026 GMT Subject: CN=6ab377fa-4498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:93:76:3c:7c:bc:4d:d2:6e:30:c1:c3:af:4a: 59:19:38:73:97:93:3e:63:19:62:b2:4b:03:f0:ac: c0:30:83:9a:a2:06:5c:e1:fb:2a:19:0d:84:a3:3e: d9:b1:ce:07:7a:1b:6d:96:56:42:67:6a:07:dd:90: 4b:34:2e:6b:1f:2c:da:e9:d1:f4:37:89:ed:c9:5a: f2:58:7b:d6:0e:dc:b7:95:6a:2a:e5:4a:a8:17:e5: e5:2e:25:0e:4c:1f:53:82:07:8b:a9:2f:d7:70:2f: db:41:dc:c0:bd:30:06:d6:bc:65:71:47:a3:92:16: 58:4e:65:74:e5:a0:92:9a:ed:63:06:41:6e:f9:88: 2e:38:5b:e1:cb:9e:a7:37:a0:a7:5f:8a:bc:26:63: b6:c8:d9:14:71:a5:a4:d2:11:49:62:2c:ba:41:16: 42:00:7e:7a:9b:7f:54:90:41:30:bf:a4:0a:2f:00: 88:5a:fc:da:a7:55:d1:17:e3:14:40:eb:b1:53:04: 1a:26:b9:70:11:01:d6:55:5a:ef:a7:02:a4:6e:3e: dc:cc:2c:27:15:fb:5f:b9:bd:8c:3c:55:a7:f1:80: 07:4e:ab:37:7c:3b:4f:7a:09:0c:0f:bd:85:5e:f5: b2:58:c5:03:a2:6f:fd:b5:ec:8f:67:3a:b6:3e:5a: a4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:42:91:15:79:D9:D1:FE:08:94:5F:BD:2B:DE:44:5E:2A:4F:16:8F X509v3 Authority Key Identifier: keyid:97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b0:64:d0:ee:fc:9f:f7:43:66:2f:f8:5d:c4:ff:29:7e:36: ab:de:11:56:5f:2e:21:1e:a8:79:24:fe:d3:7f:c0:a4:70:ba: 25:ec:0b:75:a6:84:5e:1c:b6:d8:c7:e1:c1:ae:32:ca:3c:fb: c4:b7:21:d4:a0:13:bd:52:68:fc:ac:41:b9:89:fb:f7:b1:bf: a6:30:87:5f:7e:bc:92:8b:fe:48:a5:e7:f4:92:43:86:e5:07: 67:05:e6:c1:40:39:28:d7:45:9e:da:bc:25:cc:b9:93:7f:48: 33:e4:2d:3a:5c:dc:db:6b:d9:d8:81:76:48:2a:92:ce:62:51: a0:98:c7:85:a2:35:c9:c0:dc:8b:bb:d6:be:ed:e6:32:3b:2a: 23:82:71:b1:42:e7:3f:ce:42:66:da:e6:4c:eb:38:dc:d0:39: ef:31:5c:87:2a:8a:f3:8d:c9:2b:aa:de:2a:e1:45:26:25:84: f6:4b:d8:a8:f0:09:7f:f1:c2:d0:dd:0b:c0:1f:06:d6:f3:8d: e6:87:c8:56:74:f2:0d:c1:16:c4:9c:5b:70:41:10:3a:4b:ba: 58:d2:c4:49:bb:12:40:b1:5d:8f:bd:58:bc:ae:21:41:86:8e: ae:e9:aa:91:ad:2d:43:df:b2:de:59:0e:62:2a:cc:48:0a:37: e7:05:7c:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk3QTcxMTAvBgNVBAUTKDk3MUY5OUQxOEY4MzBEQUQ0NTU0OTA2Q0FEMEFENTk5 OEJCQjUyQTcwHhcNMjYwOTIzMDY1NTU0WhcNMjYwOTMwMDY1NTU0WjAYMRYwFAYD VQQDEw02YWIzNzdmYS00NDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JN2PHy8TdJuMMHDr0pZGThzl5M+YxlisksD8KzAMIOaogZc4fsqGQ2Eoz7Z sc4HehttllZCZ2oH3ZBLNC5rHyza6dH0N4ntyVryWHvWDty3lWoq5UqoF+XlLiUO TB9TggeLqS/XcC/bQdzAvTAG1rxlcUejkhZYTmV05aCSmu1jBkFu+YguOFvhy56n N6CnX4q8JmO2yNkUcaWk0hFJYiy6QRZCAH56m39UkEEwv6QKLwCIWvzap1XRF+MU QOuxUwQaJrlwEQHWVVrvpwKkbj7czCwnFftfub2MPFWn8YAHTqs3fDtPegkMD72F XvWyWMUDom/9teyPZzq2Plqk2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHBCkRV5 2dH+CJRfvSveRF4qTxaPMB8GA1UdIwQYMBaAFJcfmdGPgw2tRVSQbK0K1ZmLu1Kn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTdBNy8wQjRDMkRBMEJB MzgxMUYwOTM0MDhGNkJDNEY5QUUwMi9seC1aMFktRERhMUZWSkJzclFyVm1ZdTdV cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x4LVowWS1ERGExRlZKQnNyUXJWbVl1N1VxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTdBNy8wQjRDMkRBMEJBMzgxMUYwOTM0MDhGNkJDNEY5QUUwMi9seC1aMFktRERh MUZWSkJzclFyVm1ZdTdVcWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbLBk0O78n/dDZi/4XcT/KX42q94RVl8uIR6oeST+03/ApHC6JewLdaaEXhy2 2Mfhwa4yyjz7xLch1KATvVJo/KxBuYn797G/pjCHX368kov+SKXn9JJDhuUHZwXm wUA5KNdFntq8Jcy5k39IM+QtOlzc22vZ2IF2SCqSzmJRoJjHhaI1ycDci7vWvu3m MjsqI4JxsULnP85CZtrmTOs43NA57zFchyqK843JK6reKuFFJiWE9kvYqPAJf/HC 0N0LwB8G1vON5ofIVnTyDcEWxJxbcEEQOku6WNLESbsSQLFdj71YvK4hQYaOrumq ka0tQ9+y3lkOYirMSAo35wV8Dw== -----END CERTIFICATE-----Generated at Thu Sep 24 00:07:34 2026 by rpki-client