$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json) Hash identifier: L6VuFBqfMnuhTpIqclgrKN29W7WsvwXpi/tEVqlWPJw= Subject key identifier: 71:53:74:58:14:07:2F:CB:58:CF:19:14:1F:8A:88:5D:2B:27:84:FC Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft Manifest number: 0147 Signing time: Wed 25 Mar 2026 04:28:23 +0000 Manifest this update: Wed 25 Mar 2026 04:28:22 +0000 Manifest next update: Wed 01 Apr 2026 04:28:22 +0000 Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: dCTfV4/Xs1g5/JM1YFe7TqumKRHZmcHDNDvLJYgRYXU=) 2: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: PtbtJlcJRwUkYVZTTdhAVrVCAYKXUtPXtxl26TpZjBg=) 3: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: zAdUeLORZiO4f/KSBL4alxYSI+DmbONmLsqQbgHi324=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Validity Not Before: Mar 25 04:28:22 2026 GMT Not After : Apr 1 04:28:22 2026 GMT Subject: CN=69c36467-6537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:81:a0:55:5a:14:96:c8:c6:bf:ba:2f:da:78: 3f:23:1c:e2:a7:f5:27:0a:fc:36:d0:cd:70:2f:68: a6:3b:a5:a5:17:5f:dd:96:bf:d5:26:f2:f6:20:5f: 15:18:e2:04:93:84:de:a4:7a:52:a3:a3:cb:7a:f9: 6b:17:53:71:5e:77:9a:ce:70:c1:6e:1f:d8:83:6a: 98:95:c1:5a:c0:e7:54:bb:07:2a:e6:bd:8e:ab:c8: e1:3a:11:c6:4f:5b:7d:89:3d:75:d7:a2:c7:a5:e9: 23:8a:1d:68:e3:32:93:39:3e:63:d9:e0:24:7b:85: 2c:38:08:87:c6:81:7b:f7:82:f7:73:01:b0:80:9f: cd:78:39:2b:98:ea:63:27:c0:b8:ef:5f:16:0f:9a: 78:71:7a:cc:3c:3f:b7:0f:00:6f:93:3b:f5:11:66: 31:37:5b:e2:b9:ec:f8:da:24:a9:fd:59:75:f7:76: ea:6d:dd:7c:e0:01:e1:b5:77:2c:dd:72:36:88:6c: ff:95:ba:5f:a6:56:db:61:92:dc:ea:43:d1:e6:24: 33:c1:76:6e:df:6e:73:fb:57:46:20:1d:38:18:73: 42:ca:57:b9:47:77:b0:f1:5e:0c:04:cd:a9:9a:6c: d7:54:72:46:f7:9a:37:a3:17:74:70:d9:3f:c7:0d: 8c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:53:74:58:14:07:2F:CB:58:CF:19:14:1F:8A:88:5D:2B:27:84:FC X509v3 Authority Key Identifier: keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:9c:ba:77:26:c8:2a:61:9a:4c:c5:f6:b3:d1:3b:6b:d4:b1: 6d:b3:4e:8c:09:4a:bd:c8:a9:06:8c:6a:e6:f5:f1:eb:8b:3e: dc:3a:f9:eb:5d:8f:12:bb:19:7d:6b:80:a9:fa:4a:5a:68:f0: f6:a8:22:b5:3a:8c:98:5e:2c:4d:18:ff:94:72:01:8d:b0:7a: ed:60:5b:04:b1:6d:d2:d8:ae:f9:8d:cc:b0:a6:23:6b:ee:b8: 56:b9:c5:da:09:63:b0:87:52:05:57:a9:7a:a2:5f:3e:bf:62: 20:28:9d:4e:0a:bf:8e:35:cd:03:0d:77:3a:ab:f6:d1:74:79: 72:a1:68:36:a9:9a:d6:f3:35:47:3c:21:63:82:94:38:c6:04: d3:13:0c:9e:c3:b7:42:b1:e1:d4:53:64:3f:da:aa:34:1c:6e: fc:f9:20:02:48:8e:8c:ad:4c:69:2f:22:4e:99:90:cd:2c:ec: 4a:d9:38:b6:8b:09:d2:9a:dd:cd:7d:64:99:9c:3a:60:0f:c8: 86:a2:45:65:9d:38:eb:fc:09:5d:be:06:6b:0e:3a:0a:ff:77: 65:ef:fb:e7:9c:a6:2d:db:33:21:c9:1c:32:2a:10:b7:6d:6f: 88:c4:66:c7:5d:ab:cf:42:27:9a:8f:70:6c:72:42:5c:23:c0: 85:e9:18:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNDAxMTAvBgNVBAUTKDJENzQ4NEExN0Y0RTlFNjk0MTAwNTFFRjUzQjdCRTcx OTM3RjlGOUMwHhcNMjYwMzI1MDQyODIyWhcNMjYwNDAxMDQyODIyWjAYMRYwFAYD VQQDEw02OWMzNjQ2Ny02NTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgoGgVVoUlsjGv7ov2ng/Ixzip/UnCvw20M1wL2imO6WlF1/dlr/VJvL2IF8V GOIEk4TepHpSo6PLevlrF1NxXneaznDBbh/Yg2qYlcFawOdUuwcq5r2Oq8jhOhHG T1t9iT1116LHpekjih1o4zKTOT5j2eAke4UsOAiHxoF794L3cwGwgJ/NeDkrmOpj J8C4718WD5p4cXrMPD+3DwBvkzv1EWYxN1viuez42iSp/Vl193bqbd184AHhtXcs 3XI2iGz/lbpfplbbYZLc6kPR5iQzwXZu325z+1dGIB04GHNCyle5R3ew8V4MBM2p mmzXVHJG95o3oxd0cNk/xw2M/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHFTdFgU By/LWM8ZFB+KiF0rJ4T8MB8GA1UdIwQYMBaAFC10hKF/Tp5pQQBR71O3vnGTf5+c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8xRkEwMjI1MDM4 RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25tbEJBRkh2VTdlLWNaTl9u NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xYU0VvWDlPbm1sQkFGSHZVN2UtY1pOX241dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI0MC8xRkEwMjI1MDM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25t bEJBRkh2VTdlLWNaTl9uNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANZy6dybIKmGaTMX2s9E7a9SxbbNOjAlKvcipBoxq5vXx64s+3Dr5612PErsZ fWuAqfpKWmjw9qgitTqMmF4sTRj/lHIBjbB67WBbBLFt0tiu+Y3MsKYja+64VrnF 2gljsIdSBVepeqJfPr9iICidTgq/jjXNAw13Oqv20XR5cqFoNqma1vM1RzwhY4KU OMYE0xMMnsO3QrHh1FNkP9qqNBxu/PkgAkiOjK1MaS8iTpmQzSzsStk4tosJ0prd zX1kmZw6YA/IhqJFZZ046/wJXb4Gaw46Cv93Ze/755ymLdszIckcMioQt21viMRm x12rz0Inmo9wbHJCXCPAhekYlg== -----END CERTIFICATE-----Generated at Thu Mar 26 04:08:46 2026 by rpki-client