$ rpki-client -vvf rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft File: LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft (raw, json) Hash identifier: kNWte+QHV2HFClQBQ4j2g1cfso+4NPLHr3eF72lro2Y= Subject key identifier: 8F:DB:1B:F6:63:58:F7:1F:05:1C:E7:E1:84:6A:67:60:9A:7B:88:54 Authority key identifier: 2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D Certificate issuer: /CN=A9194093/serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft Manifest number: 45 Signing time: Wed 25 Mar 2026 07:36:11 +0000 Manifest this update: Wed 25 Mar 2026 07:36:10 +0000 Manifest next update: Wed 01 Apr 2026 07:36:10 +0000 Files and hashes: 1: LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl (hash: gkqw+WCjTkS9fEjBexmLwx+U7RSETIOkBiGS/C4Qhv0=) 2: 3102D984C7A511F0AB2B8524C4F9AE02.roa (hash: Tul75lPWRtkLUQpE4kJeQR++0ieheSLP1KNAU3JiUWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194093, serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D Validity Not Before: Mar 25 07:36:10 2026 GMT Not After : Apr 1 07:36:10 2026 GMT Subject: CN=69c3906a-809c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:80:fb:77:a9:73:f3:a8:2e:be:cf:bc:db:d9: ae:0f:84:68:ec:f8:42:07:bf:30:11:3d:ba:9d:16: 5f:31:7b:ab:c2:c8:87:c3:92:2e:fb:d7:87:f8:7e: 4d:50:7a:b2:a4:9c:54:05:a1:f1:9a:42:a8:93:93: 47:f0:77:ef:f0:b3:12:57:c5:bc:b6:22:5e:9e:de: d1:8a:32:81:fb:6b:7a:21:11:46:bb:f1:8e:43:85: d3:c7:07:50:a9:65:c6:84:e3:12:5b:e7:b1:a0:70: 27:a1:b7:a4:99:ac:d8:1a:61:69:7b:ac:a2:46:68: 48:a2:c8:d8:a3:88:72:2b:51:88:93:cf:5d:14:5a: 5d:79:4d:8c:ba:04:37:da:a0:ae:37:2a:40:8b:9a: f7:37:05:a9:53:4a:c6:78:30:65:08:a6:96:18:e6: 52:a5:f0:62:89:83:cc:77:42:ee:b5:06:92:78:7d: 11:4a:09:e2:eb:d2:e9:30:7c:db:29:44:74:c1:47: d8:64:21:67:ac:cb:a1:ee:6e:de:a4:65:11:55:37: 55:98:04:0a:2d:9e:19:99:d1:aa:97:3a:54:bc:3b: c5:19:61:51:46:45:62:7f:57:29:62:b6:eb:e1:7f: fc:f2:23:c9:7d:c1:56:11:49:db:20:bc:c8:fe:b2: d4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DB:1B:F6:63:58:F7:1F:05:1C:E7:E1:84:6A:67:60:9A:7B:88:54 X509v3 Authority Key Identifier: keyid:2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:21:ec:a4:b7:b8:1c:63:53:a4:8a:dd:0c:ab:a0:da:0e:94: 8e:14:1b:1e:8d:8b:3f:e4:99:e6:48:be:57:c6:1b:e2:75:3c: 8d:c2:ce:72:d7:28:fe:87:66:23:9d:20:a8:9d:c5:d7:04:2f: f9:a5:40:55:37:34:a9:a7:af:ef:97:03:30:ff:e1:fa:93:29: b3:bf:8e:c0:6f:cf:8b:8b:3b:86:8d:a6:fa:f8:31:71:3a:38: 84:2b:0d:18:a5:4e:11:4e:6c:a9:38:13:26:51:3c:1a:b3:f5: c7:11:c2:02:8a:37:87:4c:2e:d8:ad:b0:e5:72:4d:84:5f:d3: 9f:67:9e:80:d6:da:51:f8:df:82:aa:b5:d5:e2:14:d7:8b:88: 5e:48:54:79:58:f8:6a:4c:e6:79:31:bd:11:5c:6a:32:82:78: 6e:1c:33:88:1d:09:fb:14:c0:de:f2:03:3a:f5:9c:0b:2b:9b: e7:6b:1b:ad:92:f2:dc:6f:40:1e:9e:b5:75:7b:b4:40:2d:ee: 17:4e:54:62:e8:e5:a5:6d:45:ff:28:39:e9:78:8f:50:94:1a: 39:ef:17:ef:f7:9d:4e:d6:aa:f3:ba:a5:68:b0:99:6c:85:65: 73:80:33:7d:49:38:6e:6b:66:9d:4c:5e:49:48:c1:18:15:3f: 8f:eb:e8:6f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NDA5MzExMC8GA1UEBRMoMkQ3MzU2REExNzFCRkQ2NDAzQ0Q5RjMzRTNEQjk1QjQ0 Q0I0QkYxRDAeFw0yNjAzMjUwNzM2MTBaFw0yNjA0MDEwNzM2MTBaMBgxFjAUBgNV BAMTDTY5YzM5MDZhLTgwOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2gPt3qXPzqC6+z7zb2a4PhGjs+EIHvzARPbqdFl8xe6vCyIfDki7714f4fk1Q erKknFQFofGaQqiTk0fwd+/wsxJXxby2Il6e3tGKMoH7a3ohEUa78Y5DhdPHB1Cp ZcaE4xJb57GgcCeht6SZrNgaYWl7rKJGaEiiyNijiHIrUYiTz10UWl15TYy6BDfa oK43KkCLmvc3BalTSsZ4MGUIppYY5lKl8GKJg8x3Qu61BpJ4fRFKCeLr0ukwfNsp RHTBR9hkIWesy6Hubt6kZRFVN1WYBAotnhmZ0aqXOlS8O8UZYVFGRWJ/Vylituvh f/zyI8l9wVYRSdsgvMj+stSbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUj9sb9mNY 9x8FHOfhhGpnYJp7iFQwHwYDVR0jBBgwFoAULXNW2hcb/WQDzZ8z49uVtEy0vx0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0MDkzL0NGQTBGOTkyQzdB MzExRjA4NzE5MDEyMkM0RjlBRTAyL0xYTlcyaGNiX1dRRHpaOHo0OXVWdEV5MHZ4 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFhOVzJoY2JfV1FEelo4ejQ5dVZ0RXkwdngwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 MDkzL0NGQTBGOTkyQzdBMzExRjA4NzE5MDEyMkM0RjlBRTAyL0xYTlcyaGNiX1dR RHpaOHo0OXVWdEV5MHZ4MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDHIeykt7gcY1Okit0Mq6DaDpSOFBsejYs/5JnmSL5XxhvidTyNws5y1yj+h2Yj nSConcXXBC/5pUBVNzSpp6/vlwMw/+H6kymzv47Ab8+LizuGjab6+DFxOjiEKw0Y pU4RTmypOBMmUTwas/XHEcICijeHTC7YrbDlck2EX9OfZ56A1tpR+N+CqrXV4hTX i4heSFR5WPhqTOZ5Mb0RXGoygnhuHDOIHQn7FMDe8gM69ZwLK5vnaxutkvLcb0Ae nrV1e7RALe4XTlRi6OWlbUX/KDnpeI9QlBo57xfv951O1qrzuqVosJlshWVzgDN9 SThua2adTF5JSMEYFT+P6+hv -----END CERTIFICATE-----Generated at Thu Mar 26 07:35:25 2026 by rpki-client