$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json) Hash identifier: GN2e4Odso6FSq3prPt9kUd+E55jKUc5BkCVpMm1KggM= Subject key identifier: BA:B0:29:E4:3D:6D:F0:E1:96:20:3F:4D:C0:A2:CE:85:24:DE:75:0D Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft Manifest number: 01A3 Signing time: Wed 23 Sep 2026 04:01:11 +0000 Manifest this update: Wed 23 Sep 2026 04:01:10 +0000 Manifest next update: Wed 30 Sep 2026 04:01:10 +0000 Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: yebn+gD6kErOZTwKGbaT+Hj/KaHXQWAFHRpFVc4Ibfw=) 2: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: zAdUeLORZiO4f/KSBL4alxYSI+DmbONmLsqQbgHi324=) 3: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: PtbtJlcJRwUkYVZTTdhAVrVCAYKXUtPXtxl26TpZjBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Validity Not Before: Sep 23 04:01:10 2026 GMT Not After : Sep 30 04:01:10 2026 GMT Subject: CN=6ab34f07-c167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:96:30:a9:82:2d:a1:42:d1:3d:52:9a:98:84: fb:e2:1f:29:6c:9d:24:22:79:e5:f7:26:dc:0b:4b: e8:e6:1a:73:e0:3f:70:77:12:99:15:31:a1:77:a3: 9c:5e:1a:df:41:35:11:52:a7:57:92:e7:5b:e5:95: c2:80:07:b3:cb:75:68:a3:b9:68:3d:4f:96:6a:84: 1b:4a:9e:77:1b:68:84:d2:bc:be:9b:7f:51:50:e5: 84:b5:ea:02:b4:39:87:c1:b4:e5:4c:c0:e2:f9:c7: ad:29:8a:c2:8c:63:d7:28:90:42:5e:bf:d8:5d:04: 1f:12:11:ba:1e:91:92:99:a4:5d:04:0d:6d:94:ab: d3:c5:97:1a:18:a0:21:9e:79:09:f8:67:42:22:bd: 5f:3a:1b:16:73:d7:9f:4c:cd:d2:14:a8:8b:e7:fb: 5d:1b:04:02:a6:bb:92:77:c8:a4:cc:e2:30:ac:4c: 67:e1:32:c0:16:fb:d5:20:08:8a:1c:3a:2a:2c:77: 07:fc:eb:60:b6:49:81:fe:45:b4:bc:85:8c:f0:1f: f1:b8:06:fe:d9:e6:90:0d:93:7d:a3:47:aa:6b:37: cf:cc:4e:2b:a4:71:a1:0c:e2:5b:8b:7a:f2:c3:9f: 3e:41:3f:68:4c:16:ed:e6:37:a8:d1:d6:66:50:82: fc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B0:29:E4:3D:6D:F0:E1:96:20:3F:4D:C0:A2:CE:85:24:DE:75:0D X509v3 Authority Key Identifier: keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:55:af:12:28:3c:6f:7f:c2:cd:d4:be:60:a5:aa:9c:23:b6: 6b:bd:2f:ee:50:98:8f:50:3c:0b:53:fa:2e:77:78:25:ce:ca: ee:c6:3f:c5:7f:d0:be:8f:37:6f:6a:2d:b8:fd:fd:40:e8:52: 54:61:65:54:98:31:f3:62:84:56:0c:18:de:20:3a:65:1a:03: 3c:58:78:ef:50:c9:76:3b:2d:66:33:3f:c0:9a:26:be:2a:c1: fe:fe:c4:c9:4f:21:8a:3f:4e:ab:f0:69:b9:7c:22:94:53:56: 34:d8:f1:8f:5a:b9:16:94:6c:cc:ef:a1:45:ea:aa:64:d4:4e: 04:32:53:a9:ed:5f:70:08:74:f5:f1:1b:00:55:e5:03:d1:09: 5b:78:41:ad:bf:d3:c1:e5:49:ac:af:2c:95:3c:1c:2d:e0:69: eb:94:2b:d5:03:3c:5a:1f:e5:6b:6a:e1:ed:11:78:79:00:32: 91:b7:28:e0:1a:10:92:2e:33:7f:2d:4e:9f:6d:5a:8d:5f:78: 8d:60:9c:74:1e:9f:f8:4e:29:b1:7f:94:b0:00:fc:da:de:b5: e7:9d:41:27:36:92:29:43:e0:7c:fd:e5:fb:5d:0a:4b:9a:37: 8b:0a:df:b9:42:c4:dd:2a:35:f6:84:9a:ff:72:6d:3d:33:b3: 0d:4d:4e:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNDAxMTAvBgNVBAUTKDJENzQ4NEExN0Y0RTlFNjk0MTAwNTFFRjUzQjdCRTcx OTM3RjlGOUMwHhcNMjYwOTIzMDQwMTEwWhcNMjYwOTMwMDQwMTEwWjAYMRYwFAYD VQQDEw02YWIzNGYwNy1jMTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5YwqYItoULRPVKamIT74h8pbJ0kInnl9ybcC0vo5hpz4D9wdxKZFTGhd6Oc XhrfQTURUqdXkudb5ZXCgAezy3Voo7loPU+WaoQbSp53G2iE0ry+m39RUOWEteoC tDmHwbTlTMDi+cetKYrCjGPXKJBCXr/YXQQfEhG6HpGSmaRdBA1tlKvTxZcaGKAh nnkJ+GdCIr1fOhsWc9efTM3SFKiL5/tdGwQCpruSd8ikzOIwrExn4TLAFvvVIAiK HDoqLHcH/OtgtkmB/kW0vIWM8B/xuAb+2eaQDZN9o0eqazfPzE4rpHGhDOJbi3ry w58+QT9oTBbt5jeo0dZmUIL8TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLqwKeQ9 bfDhliA/TcCizoUk3nUNMB8GA1UdIwQYMBaAFC10hKF/Tp5pQQBR71O3vnGTf5+c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8xRkEwMjI1MDM4 RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25tbEJBRkh2VTdlLWNaTl9u NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xYU0VvWDlPbm1sQkFGSHZVN2UtY1pOX241dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI0MC8xRkEwMjI1MDM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25t bEJBRkh2VTdlLWNaTl9uNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeFWvEig8b3/CzdS+YKWqnCO2a70v7lCYj1A8C1P6Lnd4Jc7K7sY/xX/Qvo83 b2otuP39QOhSVGFlVJgx82KEVgwY3iA6ZRoDPFh471DJdjstZjM/wJomvirB/v7E yU8hij9Oq/BpuXwilFNWNNjxj1q5FpRszO+hReqqZNROBDJTqe1fcAh09fEbAFXl A9EJW3hBrb/TweVJrK8slTwcLeBp65Qr1QM8Wh/la2rh7RF4eQAykbco4BoQki4z fy1On21ajV94jWCcdB6f+E4psX+UsAD82t61551BJzaSKUPgfP3l+10KS5o3iwrf uULE3So19oSa/3JtPTOzDU1Ouw== -----END CERTIFICATE-----Generated at Thu Sep 24 23:37:15 2026 by rpki-client