$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft File: lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft (raw, json) Hash identifier: LdLzKESTAbuwX4vUyGoJTeRZ1LA/J1Lv9FTpkQMwoVA= Subject key identifier: 8E:11:74:D5:1B:79:9D:B6:42:81:1E:54:65:36:B7:D1:E7:5E:24:25 Authority key identifier: 97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 Certificate issuer: /CN=A91A1C06/serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Certificate serial: 3593 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft Manifest number: 3580 Signing time: Fri 24 Jul 2026 15:03:10 +0000 Manifest this update: Fri 24 Jul 2026 15:03:09 +0000 Manifest next update: Fri 31 Jul 2026 15:03:09 +0000 Files and hashes: 1: lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl (hash: Bj0LidtPp2V5Giqdzztt9oq2lRFag+goa+GjCIXgiOA=) 2: F3E1B79CB8F811F08ABED010C4F9AE02.roa (hash: tS4RWCL5pxa5UjyzIdHh2QDGb2clP9SaVI3vEhg55R8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 15:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13715 (0x3593) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1C06, serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Validity Not Before: Jul 24 15:03:09 2026 GMT Not After : Jul 31 15:03:09 2026 GMT Subject: CN=6a637eae-5992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:77:3b:9d:b3:3a:75:86:1b:c2:e1:a4:71:09: d2:00:09:7e:61:86:64:1f:66:86:76:02:f8:fd:3d: 60:ef:e0:02:fb:16:dc:25:24:2b:a6:71:a8:3c:d1: 8e:6b:1b:85:cf:eb:96:9f:87:6e:c2:42:4e:e6:73: 4d:0b:f0:4d:ac:12:6f:fc:18:7c:ff:5a:54:1d:ec: be:bc:70:af:46:b9:46:cc:c3:f9:85:20:c9:af:1b: 0f:fb:22:3e:66:86:9e:7d:b7:58:1e:3b:ca:d2:ff: d9:d9:56:24:f2:2e:1f:2a:08:a9:41:c5:8b:32:e8: 92:bf:0d:73:91:ad:f1:f1:69:45:f7:c5:c7:43:59: 8e:5c:ae:51:1d:9f:a3:a3:3a:bc:9a:49:b2:e6:a1: 46:2d:80:23:a3:3c:69:f1:7d:8a:7d:b5:ec:28:ba: fe:3a:c4:b7:74:ad:17:06:ce:dc:aa:ea:9d:d5:62: d7:ed:f1:7a:d6:76:51:0f:bf:b5:d9:e1:ef:af:e2: 90:12:fa:dc:56:a8:bf:0b:d3:57:e2:6a:cc:a1:2a: 68:64:b8:8d:5b:56:d8:16:97:cc:f3:fa:7f:e5:47: 03:a3:5e:f9:12:ed:05:4c:40:c3:2a:f4:19:75:02: 03:a1:ba:b4:de:b6:ab:47:ca:04:8f:b4:91:47:2f: ed:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:11:74:D5:1B:79:9D:B6:42:81:1E:54:65:36:B7:D1:E7:5E:24:25 X509v3 Authority Key Identifier: keyid:97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:1e:63:b9:09:dd:97:6a:82:84:32:59:f0:b0:94:a8:06:38: 22:57:5c:c4:08:bd:e1:63:15:32:9f:02:b0:61:67:b2:88:de: 6b:62:a5:dc:d0:db:60:68:0b:f8:96:03:0a:eb:b0:0b:9d:e6: b3:b3:40:98:09:d2:45:2d:39:00:dc:6e:06:f4:5a:d2:ee:e3: 81:d9:80:08:de:ce:ac:26:56:55:30:ea:fb:ca:ae:04:6e:cb: e2:73:3f:3f:0a:bd:f4:a3:cf:3a:66:2c:60:45:26:be:7c:0b: fb:fa:5c:bd:8d:74:99:f8:77:c5:44:e0:f8:1c:45:d0:3e:f2: 45:ef:b0:03:68:72:ee:21:46:47:89:b6:86:1a:46:c9:b5:11: e4:32:08:80:55:ad:c6:8f:a4:0f:30:fd:0c:2a:7c:dc:2d:fc: 6f:b4:c7:29:58:4e:1c:50:d3:2e:69:7d:0e:3e:8f:16:04:e5: 3c:8d:f0:4a:61:b3:6e:34:e4:61:48:ee:11:d3:e0:1d:94:bf: cd:21:27:35:f9:28:ce:33:cb:70:be:3b:db:a9:50:ee:ae:f9: ea:8a:21:37:16:94:79:d5:b6:14:bc:09:db:97:75:2d:b1:9e: 1d:9d:bb:87:9c:24:0a:65:93:e1:87:c2:60:8f:5f:14:19:ae: 12:a0:f0:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDMDYxMTAvBgNVBAUTKDk3Mzc3MTMwMDQ4MTlCNkI2NkZDNTZFNkVDODZCRTRE QzJFMjhFMTcwHhcNMjYwNzI0MTUwMzA5WhcNMjYwNzMxMTUwMzA5WjAYMRYwFAYD VQQDEw02YTYzN2VhZS01OTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHc7nbM6dYYbwuGkcQnSAAl+YYZkH2aGdgL4/T1g7+AC+xbcJSQrpnGoPNGO axuFz+uWn4duwkJO5nNNC/BNrBJv/Bh8/1pUHey+vHCvRrlGzMP5hSDJrxsP+yI+ ZoaefbdYHjvK0v/Z2VYk8i4fKgipQcWLMuiSvw1zka3x8WlF98XHQ1mOXK5RHZ+j ozq8mkmy5qFGLYAjozxp8X2KfbXsKLr+OsS3dK0XBs7cquqd1WLX7fF61nZRD7+1 2eHvr+KQEvrcVqi/C9NX4mrMoSpoZLiNW1bYFpfM8/p/5UcDo175Eu0FTEDDKvQZ dQIDobq03rarR8oEj7SRRy/tgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI4RdNUb eZ22QoEeVGU2t9HnXiQlMB8GA1UdIwQYMBaAFJc3cTAEgZtrZvxW5uyGvk3C4o4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUMwNi82REVBRTIxQzFE OUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0ydG1fRmJtN0lhLVRjTGlq aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6ZHhNQVNCbTJ0bV9GYm03SWEtVGNMaWpoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUMwNi82REVBRTIxQzFEOUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0y dG1fRmJtN0lhLVRjTGlqaGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUx5juQndl2qChDJZ8LCUqAY4IldcxAi94WMVMp8CsGFnsojea2Kl3NDbYGgL +JYDCuuwC53ms7NAmAnSRS05ANxuBvRa0u7jgdmACN7OrCZWVTDq+8quBG7L4nM/ Pwq99KPPOmYsYEUmvnwL+/pcvY10mfh3xUTg+BxF0D7yRe+wA2hy7iFGR4m2hhpG ybUR5DIIgFWtxo+kDzD9DCp83C38b7THKVhOHFDTLml9Dj6PFgTlPI3wSmGzbjTk YUjuEdPgHZS/zSEnNfkozjPLcL4726lQ7q756oohNxaUedW2FLwJ25d1LbGeHZ27 h5wkCmWT4YfCYI9fFBmuEqDw8g== -----END CERTIFICATE-----Generated at Fri Jul 24 19:03:30 2026 by rpki-client