$ rpki-client -vvf rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft File: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft (raw, json) Hash identifier: 4whi/5RyKMIkNITBAejge5/MgI45+hFHBlZgwVGtahk= Subject key identifier: 0D:ED:DD:CA:11:19:E1:11:13:B9:42:D0:DE:C6:07:D5:50:53:9E:3E Authority key identifier: 97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7 Certificate issuer: /CN=A91597A7/serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft Manifest number: 73 Signing time: Sat 13 Jun 2026 07:52:04 +0000 Manifest this update: Sat 13 Jun 2026 07:52:03 +0000 Manifest next update: Sat 20 Jun 2026 07:52:03 +0000 Files and hashes: 1: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl (hash: OxB4pxHR6e92YACLIs43VwdsSuqwOQ0MB091ioYAsWM=) 2: B674DD44BB3C11F0AD98C485C4F9AE02.roa (hash: gQ9o3ShWhFSXckCOxiyfc9G9ysU3P8Ay4D9+aX74JkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 07:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91597A7, serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7 Validity Not Before: Jun 13 07:52:03 2026 GMT Not After : Jun 20 07:52:03 2026 GMT Subject: CN=6a2d0c24-399b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fa:90:be:0f:e3:43:5d:10:24:fe:32:9c:0e: 50:4c:d1:43:97:fe:f2:bd:f6:82:27:e5:9b:a2:88: fd:47:47:34:12:d7:da:c6:ab:75:b4:1f:52:37:18: ba:69:ee:44:f5:1c:03:ec:0d:9b:ba:d6:ae:20:d6: 50:6c:80:17:3c:39:8f:24:ce:cb:99:cc:19:7f:b8: 47:8a:a1:10:8e:a1:2e:64:8b:91:d9:f4:de:28:6d: 99:59:7b:ba:43:7a:a2:ee:f2:e5:ff:ec:2f:1c:a6: eb:37:de:38:50:43:8f:71:07:19:6a:35:65:43:ec: 63:f0:a9:53:49:d5:07:21:c5:b4:9e:95:9d:8a:92: a4:e2:ab:e0:d0:ef:cd:ff:84:70:18:20:8e:cf:bd: a1:07:78:2a:d5:bc:5b:a5:6b:a0:db:ff:0e:6b:e4: 2e:66:31:dc:18:3e:b8:8d:54:cb:31:31:af:96:da: e1:61:f2:3e:51:8b:55:b2:cd:ce:51:a2:d9:cc:ae: b2:27:c4:5b:04:0d:cd:fa:23:52:f1:5d:54:87:19: ef:13:5f:ce:be:58:90:0b:a5:f0:4d:d9:9d:cf:ba: 69:2c:97:cd:54:04:bf:94:53:e7:dd:de:62:b4:94: 3c:02:05:f8:e8:30:82:35:ae:78:1e:85:db:0d:e3: c3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:ED:DD:CA:11:19:E1:11:13:B9:42:D0:DE:C6:07:D5:50:53:9E:3E X509v3 Authority Key Identifier: keyid:97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:cc:17:9d:b6:e7:96:3e:2a:40:a8:8b:da:30:8c:32:be:52: 64:3e:3f:6b:57:ed:c4:89:8b:40:b2:83:cd:74:74:35:0a:93: 38:e3:94:fc:18:51:87:39:fd:8f:5d:dc:f1:4c:51:6b:2f:fe: 2a:06:7f:9c:61:73:0d:e2:7d:7d:f7:cc:34:e6:14:f5:26:af: 07:10:db:2f:c5:e8:24:c4:ba:03:d8:7b:b1:d9:32:31:aa:b7: 7c:ff:2f:af:d9:c3:6b:d7:b7:94:1a:3f:0f:00:20:11:06:a3: 6e:03:30:01:41:bb:81:6d:f7:82:ee:e1:d0:ed:61:55:f5:ff: 62:09:c1:da:fd:5d:32:6d:d6:69:39:6d:77:d7:35:3d:96:a8: a4:2f:60:4e:e6:57:c7:1d:85:13:8a:05:e6:f0:13:0e:c3:c7: e2:d2:f8:62:be:4e:65:8f:ae:fe:08:ff:38:35:ec:40:a0:41: 17:9a:58:f9:77:77:c9:72:d8:75:98:f4:69:ed:af:4f:25:5f: 25:b0:17:b3:86:a3:fe:53:21:46:c0:57:43:dc:7b:64:50:10: 08:be:75:94:79:01:8c:62:c2:00:8e:6a:00:50:84:f4:72:51: 02:52:85:59:06:0a:41:5f:11:b4:47:8a:80:63:ff:87:85:08: bf:70:ea:f0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTdBNzExMC8GA1UEBRMoOTcxRjk5RDE4RjgzMERBRDQ1NTQ5MDZDQUQwQUQ1OTk4 QkJCNTJBNzAeFw0yNjA2MTMwNzUyMDNaFw0yNjA2MjAwNzUyMDNaMBgxFjAUBgNV BAMTDTZhMmQwYzI0LTM5OWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCG+pC+D+NDXRAk/jKcDlBM0UOX/vK99oIn5ZuiiP1HRzQS19rGq3W0H1I3GLpp 7kT1HAPsDZu61q4g1lBsgBc8OY8kzsuZzBl/uEeKoRCOoS5ki5HZ9N4obZlZe7pD eqLu8uX/7C8cpus33jhQQ49xBxlqNWVD7GPwqVNJ1QchxbSelZ2KkqTiq+DQ783/ hHAYII7PvaEHeCrVvFula6Db/w5r5C5mMdwYPriNVMsxMa+W2uFh8j5Ri1Wyzc5R otnMrrInxFsEDc36I1LxXVSHGe8TX86+WJALpfBN2Z3Pumksl81UBL+UU+fd3mK0 lDwCBfjoMII1rngehdsN48NlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDe3dyhEZ 4RETuULQ3sYH1VBTnj4wHwYDVR0jBBgwFoAUlx+Z0Y+DDa1FVJBsrQrVmYu7Uqcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5N0E3LzBCNEMyREEwQkEz ODExRjA5MzQwOEY2QkM0RjlBRTAyL2x4LVowWS1ERGExRlZKQnNyUXJWbVl1N1Vx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHgtWjBZLUREYTFGVkpCc3JRclZtWXU3VXFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 N0E3LzBCNEMyREEwQkEzODExRjA5MzQwOEY2QkM0RjlBRTAyL2x4LVowWS1ERGEx RlZKQnNyUXJWbVl1N1VxYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAozBedtueWPipAqIvaMIwyvlJkPj9rV+3EiYtAsoPNdHQ1CpM445T8GFGHOf2P XdzxTFFrL/4qBn+cYXMN4n1998w05hT1Jq8HENsvxegkxLoD2Hux2TIxqrd8/y+v 2cNr17eUGj8PACARBqNuAzABQbuBbfeC7uHQ7WFV9f9iCcHa/V0ybdZpOW131zU9 lqikL2BO5lfHHYUTigXm8BMOw8fi0vhivk5lj67+CP84NexAoEEXmlj5d3fJcth1 mPRp7a9PJV8lsBezhqP+UyFGwFdD3HtkUBAIvnWUeQGMYsIAjmoAUIT0clECUoVZ BgpBXxG0R4qAY/+HhQi/cOrw -----END CERTIFICATE-----Generated at Sat Jun 13 13:20:14 2026 by rpki-client