$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft File: LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft (raw, json) Hash identifier: CzrXjAAJFW5iVrmJUvNdfxq1e/xq7z+DpagJbflOj8s= Subject key identifier: 75:3D:3F:2D:CE:8D:52:D5:37:DF:70:3B:27:E2:8D:59:BD:9D:1A:77 Authority key identifier: 2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 Certificate issuer: /CN=A91ABE54/serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Certificate serial: 04CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft Manifest number: 04BC Signing time: Tue 24 Mar 2026 23:36:17 +0000 Manifest this update: Tue 24 Mar 2026 23:36:17 +0000 Manifest next update: Tue 31 Mar 2026 23:36:17 +0000 Files and hashes: 1: LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl (hash: u+nCLlzRH/evUymDcWOhxVa3w58te28G+9saiNfZf8M=) 2: A60006804EAE11EDBF0D8256C4F9AE02.roa (hash: RIwVKjVZKrFHjQ/9a+o2G3hFBPmeu0/eXYz01rKe7M4=) 3: A69224164EAE11EDBF0D8256C4F9AE02.roa (hash: zzqL67oBfa7jh21a6YkB8pxmZp3PhnTtbMccXW5iB0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1229 (0x4cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABE54, serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Validity Not Before: Mar 24 23:36:17 2026 GMT Not After : Mar 31 23:36:17 2026 GMT Subject: CN=69c31ff1-a3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:48:ee:81:cb:e8:5c:a8:33:82:9f:bc:93: 70:20:29:b2:2d:e1:4a:1f:d8:b3:cc:fd:d8:ff:1e: c1:3d:c7:d1:96:77:1a:df:34:5c:cd:09:5c:e2:32: ff:26:30:ea:51:89:a0:8e:7e:4d:5a:95:81:32:f3: 29:08:89:68:68:8f:1f:b4:b3:3f:3e:43:c7:65:26: 70:ed:1f:8e:07:cf:70:97:76:a1:00:24:19:21:ef: ff:8f:b5:d6:58:ee:79:cf:54:53:09:88:d3:11:f6: 70:27:40:ff:c3:41:51:c5:62:a4:a3:82:96:b6:e3: 0b:ec:4d:04:f2:fb:c3:d0:9b:1b:7a:16:cd:4f:83: 0a:ce:44:b5:18:b1:09:e1:0d:ad:cd:b8:d1:09:a5: 3a:cd:03:7e:39:a8:53:75:ff:26:a3:d4:46:90:2b: 0d:50:18:3f:0e:e5:53:7c:32:d5:55:f7:fa:0b:74: 2c:c7:3a:c7:e6:bf:47:83:af:33:0d:99:f2:1e:20: c7:0b:cf:aa:ac:e2:f0:6c:e2:34:4a:88:56:95:fc: 10:a3:3b:bf:3b:40:8d:46:f8:41:1c:6c:ef:90:4a: a2:54:e2:95:fa:44:82:93:f0:6d:e8:9b:eb:da:d1: 4f:1c:0c:bc:9a:f1:18:5e:6b:94:f9:00:cd:81:bd: a4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:3D:3F:2D:CE:8D:52:D5:37:DF:70:3B:27:E2:8D:59:BD:9D:1A:77 X509v3 Authority Key Identifier: keyid:2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:b9:6f:a7:8e:30:6c:d1:d7:ad:18:cd:73:79:0e:7a:f3:bb: 9f:17:5b:08:71:2a:b1:7a:81:06:3e:1a:ad:f9:21:fa:24:69: e6:b4:34:6a:46:20:db:21:0b:f8:99:8b:06:01:bb:39:a5:c2: c2:dd:22:0b:b2:42:ec:0b:1d:7f:3e:3b:10:31:2a:f9:61:7c: 4e:84:d6:a3:15:a5:ef:ce:cf:46:85:d8:ab:c3:29:eb:4d:7a: 34:92:81:39:25:87:bb:c0:d0:c8:bf:ff:29:6d:94:39:72:20: 8a:b6:5c:85:28:03:bc:b0:9f:20:8f:82:28:53:c5:1d:75:ed: 28:37:6e:d6:f5:94:fb:7a:a8:10:a2:57:93:ec:8b:f5:8c:0f: a3:58:d1:d6:e3:f5:a7:34:11:c3:78:1f:a2:e7:17:ec:2f:94: 42:65:d3:fe:d4:d5:61:c8:a0:96:6f:8e:76:7e:f9:0a:80:8c: 44:18:58:b9:ae:9a:4a:97:5d:df:3e:29:38:6a:cf:10:4b:4e: 47:9e:68:50:b8:83:1d:22:32:b9:69:0f:fb:5f:28:0d:c3:21: 9a:74:0c:b1:18:b5:a2:98:1c:6f:64:4c:d5:88:bd:3a:55:1b: 97:79:91:6f:7c:d7:c7:57:fb:77:24:fa:bd:7f:9e:62:e1:00: 65:91:c8:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFNTQxMTAvBgNVBAUTKDJEN0NFOTRGMTNEODJFNTRGODM0MjNDNjFFQjk2MzNB Rjk0MDU5MjQwHhcNMjYwMzI0MjMzNjE3WhcNMjYwMzMxMjMzNjE3WjAYMRYwFAYD VQQDEw02OWMzMWZmMS1hM2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzpI7oHL6FyoM4KfvJNwICmyLeFKH9izzP3Y/x7BPcfRlnca3zRczQlc4jL/ JjDqUYmgjn5NWpWBMvMpCIloaI8ftLM/PkPHZSZw7R+OB89wl3ahACQZIe//j7XW WO55z1RTCYjTEfZwJ0D/w0FRxWKko4KWtuML7E0E8vvD0JsbehbNT4MKzkS1GLEJ 4Q2tzbjRCaU6zQN+OahTdf8mo9RGkCsNUBg/DuVTfDLVVff6C3QsxzrH5r9Hg68z DZnyHiDHC8+qrOLwbOI0SohWlfwQozu/O0CNRvhBHGzvkEqiVOKV+kSCk/Bt6Jvr 2tFPHAy8mvEYXmuU+QDNgb2k0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHU9Py3O jVLVN99wOyfijVm9nRp3MB8GA1UdIwQYMBaAFC186U8T2C5U+DQjxh65Yzr5QFkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkU1NC9BNUMxNTBBQzY4 RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxsVDROQ1BHSHJsak92bEFX U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYenBUeFBZTGxUNE5DUEdIcmxqT3ZsQVdTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkU1NC9BNUMxNTBBQzY4RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxs VDROQ1BHSHJsak92bEFXU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEblvp44wbNHXrRjNc3kOevO7nxdbCHEqsXqBBj4arfkh+iRp5rQ0akYg2yEL +JmLBgG7OaXCwt0iC7JC7Asdfz47EDEq+WF8ToTWoxWl787PRoXYq8Mp6016NJKB OSWHu8DQyL//KW2UOXIgirZchSgDvLCfII+CKFPFHXXtKDdu1vWU+3qoEKJXk+yL 9YwPo1jR1uP1pzQRw3gfoucX7C+UQmXT/tTVYciglm+Odn75CoCMRBhYua6aSpdd 3z4pOGrPEEtOR55oULiDHSIyuWkP+18oDcMhmnQMsRi1opgcb2RM1Yi9OlUbl3mR b3zXx1f7dyT6vX+eYuEAZZHIuw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:31:53 2026 by rpki-client