$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft File: LHMz280_ygeHgDg3tsuuMawMS2U.mft (raw, json) Hash identifier: WX6XdsGSZsWSss5+zMLF5XCifx23SflgqzkhcKgEdis= Subject key identifier: C0:A1:24:83:95:70:96:1E:8F:F5:38:92:AC:9B:E3:14:C5:FA:5F:88 Authority key identifier: 2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 Certificate issuer: /CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Certificate serial: 0DF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft Manifest number: 0DE1 Signing time: Tue 24 Mar 2026 17:44:20 +0000 Manifest this update: Tue 24 Mar 2026 17:44:20 +0000 Manifest next update: Tue 31 Mar 2026 17:44:20 +0000 Files and hashes: 1: LHMz280_ygeHgDg3tsuuMawMS2U.crl (hash: mVJTnys4C9ocSX00ISWm8KpcCBRPuM1SXfoQigOZRGI=) 2: 62BA539C48ED11EDBC251337C4F9AE02.roa (hash: 6dBwoytRH7N2p3z59t26vsmmZ8suypwfNSdSsbkrs/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3571 (0xdf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3FD3, serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Validity Not Before: Mar 24 17:44:20 2026 GMT Not After : Mar 31 17:44:20 2026 GMT Subject: CN=69c2cd74-1519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:16:de:e7:3f:a2:74:89:aa:f2:ef:fe:da:4a: 9c:0a:40:3c:62:82:f5:38:51:13:df:b1:b0:40:39: 57:d0:fc:ca:82:e6:a8:f9:0e:36:59:5e:b2:ad:1c: 9b:97:d5:da:eb:72:46:83:3c:e8:95:3c:92:0a:fc: 7e:80:e6:5e:fa:d3:a6:7e:b2:41:58:dc:cb:53:6e: 6e:f3:21:2e:6b:2e:fb:53:b3:e4:4d:69:bc:6b:9c: 9c:c1:0e:f6:98:a5:fb:bd:fa:8e:cd:09:0f:31:52: 64:01:c2:fe:03:ea:d1:5b:56:b7:19:66:f9:e8:c5: e0:30:25:dc:c8:5f:c8:ee:04:0d:9b:f1:9f:ea:e7: b8:fd:b7:8e:8f:20:f6:ad:7c:4b:7c:08:94:cd:84: ce:cf:47:4e:48:37:63:ea:4b:8f:4d:e4:59:7c:84: 31:7b:9c:70:69:47:29:b6:c6:4c:6b:f2:ef:e5:da: 5a:93:fe:24:92:ad:00:f7:a7:23:73:44:f8:45:06: ff:de:78:68:0a:48:81:e7:b0:54:95:fb:3c:e2:59: 00:05:23:61:73:f3:9e:53:3c:1c:11:5b:34:fe:93: 82:f9:8e:33:4f:75:f3:5a:68:8a:6f:d2:92:13:75: 28:ef:b1:1a:ba:e2:a0:d5:8d:78:a1:25:b9:30:5c: 8b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A1:24:83:95:70:96:1E:8F:F5:38:92:AC:9B:E3:14:C5:FA:5F:88 X509v3 Authority Key Identifier: keyid:2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c9:91:6a:b6:cd:ed:40:3f:61:75:8c:7c:22:22:96:6d:23: 30:c3:97:ea:4c:60:09:ff:93:be:d2:59:2d:e4:3e:71:ae:e9: c2:5f:ab:ca:a7:a8:ec:8b:20:45:6a:7a:ed:13:a1:19:8c:7e: 6f:d0:e0:12:b7:d0:1d:79:2b:db:83:d0:c6:b2:49:5a:c7:09: ee:ec:c3:15:74:90:f3:18:c6:37:db:4b:35:4c:24:87:bf:16: 8f:27:e2:fe:e1:42:c7:a3:08:de:d2:a7:9d:13:f7:4c:81:db: 29:50:7d:a6:b5:4a:5e:f7:5f:79:87:17:cf:12:5e:d5:b7:15: 9a:5c:d6:9b:e4:86:1f:df:28:a5:94:ae:9e:a9:bb:4d:1b:94: 7a:da:bf:15:e7:d0:26:a4:14:d4:5a:a1:73:5d:6a:d4:4c:49: ed:7f:ba:cf:7e:74:5d:d8:95:03:35:f2:1a:63:ec:e4:c7:a4: 58:85:20:6c:18:d9:7b:cb:b4:81:71:8d:2d:31:20:a5:b6:a5: 25:2c:b7:5c:61:81:1d:1e:03:59:7a:1f:6b:0d:53:c4:db:0a: ad:d2:7b:07:2e:c9:a4:d5:77:a4:6d:7c:a1:ef:45:12:6c:46: 5e:d6:cd:af:6b:0a:d2:4c:f1:e7:22:68:bf:da:e5:bb:1e:36: b0:ce:b7:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGRDMxMTAvBgNVBAUTKDJDNzMzM0RCQ0QzRkNBMDc4NzgwMzgzN0I2Q0JBRTMx QUMwQzRCNjUwHhcNMjYwMzI0MTc0NDIwWhcNMjYwMzMxMTc0NDIwWjAYMRYwFAYD VQQDEw02OWMyY2Q3NC0xNTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxbe5z+idImq8u/+2kqcCkA8YoL1OFET37GwQDlX0PzKguao+Q42WV6yrRyb l9Xa63JGgzzolTySCvx+gOZe+tOmfrJBWNzLU25u8yEuay77U7PkTWm8a5ycwQ72 mKX7vfqOzQkPMVJkAcL+A+rRW1a3GWb56MXgMCXcyF/I7gQNm/Gf6ue4/beOjyD2 rXxLfAiUzYTOz0dOSDdj6kuPTeRZfIQxe5xwaUcptsZMa/Lv5dpak/4kkq0A96cj c0T4RQb/3nhoCkiB57BUlfs84lkABSNhc/OeUzwcEVs0/pOC+Y4zT3XzWmiKb9KS E3Uo77EauuKg1Y14oSW5MFyLlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMChJIOV cJYej/U4kqyb4xTF+l+IMB8GA1UdIwQYMBaAFCxzM9vNP8oHh4A4N7bLrjGsDEtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0ZEMy8yMURFNUI5QUQ0 OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3lnZUhnRGczdHN1dU1hd01T MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xITXoyODBfeWdlSGdEZzN0c3V1TWF3TVMyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0ZEMy8yMURFNUI5QUQ0OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3ln ZUhnRGczdHN1dU1hd01TMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATsmRarbN7UA/YXWMfCIilm0jMMOX6kxgCf+TvtJZLeQ+ca7pwl+ryqeo7Isg RWp67ROhGYx+b9DgErfQHXkr24PQxrJJWscJ7uzDFXSQ8xjGN9tLNUwkh78Wjyfi /uFCx6MI3tKnnRP3TIHbKVB9prVKXvdfeYcXzxJe1bcVmlzWm+SGH98opZSunqm7 TRuUetq/FefQJqQU1Fqhc11q1ExJ7X+6z350XdiVAzXyGmPs5MekWIUgbBjZe8u0 gXGNLTEgpbalJSy3XGGBHR4DWXofaw1TxNsKrdJ7By7JpNV3pG18oe9FEmxGXtbN r2sK0kzx5yJov9rlux42sM63BQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:27:23 2026 by rpki-client