$ rpki-client -vvf rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft File: lx1PfDIP2Y7P374A1z4CiBX-I_E.mft (raw, json) Hash identifier: 89uQQdbK0CJoKTzKseB1Fz4rhegyDbOqqQSDVoo6DFY= Subject key identifier: 73:70:AA:4D:99:F4:B6:D1:7F:83:D7:7F:20:D9:90:0B:5D:EF:59:82 Authority key identifier: 97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1 Certificate issuer: /CN=A916588E/serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1 Certificate serial: 260C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft Manifest number: 25FB Signing time: Thu 26 Mar 2026 15:43:38 +0000 Manifest this update: Thu 26 Mar 2026 15:43:37 +0000 Manifest next update: Thu 02 Apr 2026 15:43:37 +0000 Files and hashes: 1: lx1PfDIP2Y7P374A1z4CiBX-I_E.crl (hash: SZhM+kdp3dIUuppb4nFQu4e08Hp8TO96k6ctrTV1Cp0=) 2: 77139F3054EF11E783C5A42EC4F9AE02.roa (hash: KRl8ea3V85bmsmtzGvJljwpOXv+hiqOfQdmXTFhqfM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 15:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9740 (0x260c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916588E, serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1 Validity Not Before: Mar 26 15:43:37 2026 GMT Not After : Apr 2 15:43:37 2026 GMT Subject: CN=69c55429-b44f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:40:2d:a1:e1:46:e0:70:f9:22:99:1e:3c:16: 77:ca:90:6e:8f:b3:76:c7:ce:c5:85:d6:6d:fa:f8: 88:28:97:23:0a:a2:2f:a1:38:22:3c:40:66:4c:57: fb:16:74:ad:f8:6e:d7:25:38:7f:ea:cb:ad:21:4d: f4:96:51:50:19:78:36:7a:47:c5:0f:ce:6f:14:44: e8:82:52:5e:0b:45:1e:23:0f:17:ee:0e:60:c2:a5: 9d:5d:81:12:36:45:96:8d:28:37:08:5a:6f:0c:cf: 7d:1c:e2:1f:cd:8c:2f:a5:e2:37:b9:e6:45:bc:be: e1:03:02:81:ae:13:10:76:4e:31:1d:49:6c:86:ea: ba:08:36:39:a5:c7:c5:fc:81:b4:a3:4d:63:14:01: a6:40:27:ed:27:6f:79:28:e3:cb:9f:34:5f:46:af: 7b:b8:d9:60:f1:cd:44:4e:9c:de:6e:a8:19:38:c2: f7:d0:a4:9c:4c:15:66:d9:b5:c2:64:d3:89:da:62: 1d:b2:c5:2a:7e:2b:65:3d:72:6c:f1:22:09:e6:b4: 57:67:2b:d8:5e:7e:40:25:07:2b:13:77:7c:81:8c: cb:58:ed:e3:ce:01:b1:a2:dd:29:2a:0e:8a:a8:7c: 16:15:fd:5a:f8:e7:cf:1c:25:4e:80:de:f2:77:ca: 78:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:70:AA:4D:99:F4:B6:D1:7F:83:D7:7F:20:D9:90:0B:5D:EF:59:82 X509v3 Authority Key Identifier: keyid:97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:ec:9c:5b:2c:dd:b7:22:f8:fe:e4:02:ed:34:61:87:8a:4b: 16:30:91:56:20:ab:7d:6a:5c:e4:92:b9:7e:d2:e1:5d:92:a5: f5:f1:56:30:86:6f:4c:d8:79:97:89:1e:64:dd:41:5d:6d:c8: 2c:77:a8:b6:30:5e:d9:96:49:8a:2c:1f:1c:04:ca:9e:20:30: 5a:98:9f:61:31:06:02:45:86:76:3b:cd:2f:9b:71:a5:05:d4: 56:40:f4:4b:e7:fa:d6:bc:03:a3:25:9b:52:af:cc:f1:1f:6e: 87:91:22:08:ed:81:d6:8c:91:5e:4a:c1:6d:d2:5b:69:ee:4d: 24:db:01:f0:25:13:87:50:c3:7f:11:3d:a4:33:c8:79:67:b6: 52:e4:00:1d:fb:16:a1:6e:f9:a8:12:6b:14:79:fd:2d:b7:86: 64:9b:cd:59:36:ab:d5:f1:91:4d:55:ea:86:9f:f1:a3:28:ad: 66:23:60:00:0e:85:0d:df:69:01:2f:9d:b4:f1:0a:3e:b0:81: de:25:bf:ee:85:11:aa:c2:88:ec:f9:ae:92:23:17:84:84:7d: c4:14:58:43:d5:9c:8f:b7:f5:85:61:91:b6:50:76:97:66:f5: a0:c9:39:75:e1:2e:90:63:dc:02:81:bb:6f:16:c8:07:22:2b: d5:8f:30:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4OEUxMTAvBgNVBAUTKDk3MUQ0RjdDMzIwRkQ5OEVDRkRGQkUwMEQ3M0UwMjg4 MTVGRTIzRjEwHhcNMjYwMzI2MTU0MzM3WhcNMjYwNDAyMTU0MzM3WjAYMRYwFAYD VQQDEw02OWM1NTQyOS1iNDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEAtoeFG4HD5IpkePBZ3ypBuj7N2x87FhdZt+viIKJcjCqIvoTgiPEBmTFf7 FnSt+G7XJTh/6sutIU30llFQGXg2ekfFD85vFEToglJeC0UeIw8X7g5gwqWdXYES NkWWjSg3CFpvDM99HOIfzYwvpeI3ueZFvL7hAwKBrhMQdk4xHUlshuq6CDY5pcfF /IG0o01jFAGmQCftJ295KOPLnzRfRq97uNlg8c1ETpzebqgZOML30KScTBVm2bXC ZNOJ2mIdssUqfitlPXJs8SIJ5rRXZyvYXn5AJQcrE3d8gYzLWO3jzgGxot0pKg6K qHwWFf1a+OfPHCVOgN7yd8p4GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHNwqk2Z 9LbRf4PXfyDZkAtd71mCMB8GA1UdIwQYMBaAFJcdT3wyD9mOz9++ANc+AogV/iPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTg4RS9EQTgwMzFCMjFB MjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZN1AzNzRBMXo0Q2lCWC1J X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x4MVBmRElQMlk3UDM3NEExejRDaUJYLUlfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTg4RS9EQTgwMzFCMjFBMjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZ N1AzNzRBMXo0Q2lCWC1JX0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZuycWyzdtyL4/uQC7TRhh4pLFjCRViCrfWpc5JK5ftLhXZKl9fFWMIZvTNh5 l4keZN1BXW3ILHeotjBe2ZZJiiwfHATKniAwWpifYTEGAkWGdjvNL5txpQXUVkD0 S+f61rwDoyWbUq/M8R9uh5EiCO2B1oyRXkrBbdJbae5NJNsB8CUTh1DDfxE9pDPI eWe2UuQAHfsWoW75qBJrFHn9LbeGZJvNWTar1fGRTVXqhp/xoyitZiNgAA6FDd9p AS+dtPEKPrCB3iW/7oURqsKI7PmukiMXhIR9xBRYQ9Wcj7f1hWGRtlB2l2b1oMk5 deEukGPcAoG7bxbIByIr1Y8wFA== -----END CERTIFICATE-----Generated at Sat Mar 28 12:16:27 2026 by rpki-client