$ rpki-client -vvf rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft File: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft (raw, json) Hash identifier: r4iruTTBiCcDUnXuc4GNavt3yQal1sQyEocT7NL4CmU= Subject key identifier: 51:B0:D5:8D:82:F5:32:A2:F6:D9:47:32:B5:FA:BD:6D:18:80:6B:B6 Authority key identifier: 97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7 Certificate issuer: /CN=A91597A7/serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft Manifest number: 3F Signing time: Sun 01 Mar 2026 09:52:03 +0000 Manifest this update: Sun 01 Mar 2026 09:52:02 +0000 Manifest next update: Sun 08 Mar 2026 09:52:02 +0000 Files and hashes: 1: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl (hash: gNYRIqsch0KhDahuiH3aH1+f/2pzCbBnfPL+5ih1ZC0=) 2: B674DD44BB3C11F0AD98C485C4F9AE02.roa (hash: gQ9o3ShWhFSXckCOxiyfc9G9ysU3P8Ay4D9+aX74JkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91597A7, serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7 Validity Not Before: Mar 1 09:52:02 2026 GMT Not After : Mar 8 09:52:02 2026 GMT Subject: CN=69a40c42-91a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f1:96:6c:55:34:70:48:82:8c:64:bb:32:06: 6b:aa:84:1f:5b:a3:36:bc:96:a4:4c:fb:b4:76:92: 7d:15:ee:ac:bd:2c:d5:9a:18:5b:9e:ac:81:ca:64: 2b:a8:44:3a:52:7c:06:99:e8:5d:7c:15:1c:f4:05: 97:e0:be:98:85:50:f2:ad:4a:01:1f:24:eb:d7:e1: a3:bc:25:b8:c2:5c:24:91:f5:a1:58:3c:ba:67:0d: f4:b3:03:6c:5d:6e:2c:0a:53:f8:5b:0c:0a:6a:2e: 58:8b:28:60:95:e9:b5:9a:ab:47:b5:4b:03:e8:dd: 22:1f:40:e8:d5:b4:c6:81:5b:31:ba:2c:3b:c4:12: cf:dc:d9:a0:7a:28:bc:1f:98:30:79:e0:af:18:c7: ba:12:38:7e:b2:07:1d:4c:83:c1:00:69:80:26:55: 8d:3d:d7:3f:c2:a6:03:b0:be:d3:1c:62:35:39:df: c4:10:a9:ff:95:60:1d:50:17:2a:8f:df:6b:5a:2d: d8:9f:3f:27:d0:1c:9a:9a:53:14:a8:48:6a:fc:b7: fe:ff:e6:9b:db:f4:04:59:26:dd:b8:fe:f9:2b:b8: a6:e7:a5:83:1b:21:c9:e8:6c:72:ec:0b:9c:f9:63: 4a:0a:95:87:c6:0c:97:b2:ff:e2:bc:03:cf:fa:e6: 25:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B0:D5:8D:82:F5:32:A2:F6:D9:47:32:B5:FA:BD:6D:18:80:6B:B6 X509v3 Authority Key Identifier: keyid:97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:4f:ae:75:e6:f8:35:9f:97:42:92:f7:1c:0f:d7:84:71:3b: e5:a1:c5:51:b3:36:b4:1c:19:ed:70:33:19:05:11:5e:40:c3: ab:67:42:7a:c9:1c:81:8d:65:79:bb:84:42:53:d8:7b:1d:0e: 1e:3c:44:ae:30:b4:ef:1c:28:15:e8:b5:0d:36:07:a6:af:69: ff:6a:4d:3e:0a:61:75:ec:e9:81:51:36:5f:86:ef:4d:f6:8d: b6:2b:a6:08:6b:3c:21:26:09:43:93:5b:74:85:7c:cd:3e:0e: a4:91:e2:d7:72:a9:d8:d8:97:91:28:3a:60:f3:85:0c:fc:70: 20:61:21:dd:de:a4:86:ea:f8:c5:ef:00:01:23:2b:6a:b4:d0: 71:24:db:44:91:30:30:fe:33:e0:66:12:e2:f0:c1:96:8b:6c: 39:37:f2:4a:90:fa:d1:96:5b:5a:86:4e:b9:3a:00:3c:a8:7e: b2:32:da:d6:10:2d:b7:16:f3:f7:13:15:29:66:02:6d:c7:af: 47:63:08:34:35:1d:1a:6b:3b:82:93:47:c3:0a:8b:4b:54:af: 23:ca:a7:fa:bb:ac:98:3b:1d:c8:24:f3:1b:f0:fb:dd:53:bd: 80:4b:07:95:d9:e0:fd:f2:17:19:9b:72:44:26:82:c1:ae:2d: 4c:c7:7b:c1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTdBNzExMC8GA1UEBRMoOTcxRjk5RDE4RjgzMERBRDQ1NTQ5MDZDQUQwQUQ1OTk4 QkJCNTJBNzAeFw0yNjAzMDEwOTUyMDJaFw0yNjAzMDgwOTUyMDJaMBgxFjAUBgNV BAMTDTY5YTQwYzQyLTkxYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH8ZZsVTRwSIKMZLsyBmuqhB9boza8lqRM+7R2kn0V7qy9LNWaGFuerIHKZCuo RDpSfAaZ6F18FRz0BZfgvpiFUPKtSgEfJOvX4aO8JbjCXCSR9aFYPLpnDfSzA2xd biwKU/hbDApqLliLKGCV6bWaq0e1SwPo3SIfQOjVtMaBWzG6LDvEEs/c2aB6KLwf mDB54K8Yx7oSOH6yBx1Mg8EAaYAmVY091z/CpgOwvtMcYjU538QQqf+VYB1QFyqP 32taLdifPyfQHJqaUxSoSGr8t/7/5pvb9ARZJt24/vkruKbnpYMbIcnobHLsC5z5 Y0oKlYfGDJey/+K8A8/65iVVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUbDVjYL1 MqL22Ucytfq9bRiAa7YwHwYDVR0jBBgwFoAUlx+Z0Y+DDa1FVJBsrQrVmYu7Uqcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5N0E3LzBCNEMyREEwQkEz ODExRjA5MzQwOEY2QkM0RjlBRTAyL2x4LVowWS1ERGExRlZKQnNyUXJWbVl1N1Vx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHgtWjBZLUREYTFGVkpCc3JRclZtWXU3VXFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 N0E3LzBCNEMyREEwQkEzODExRjA5MzQwOEY2QkM0RjlBRTAyL2x4LVowWS1ERGEx RlZKQnNyUXJWbVl1N1VxYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCRT6515vg1n5dCkvccD9eEcTvlocVRsza0HBntcDMZBRFeQMOrZ0J6yRyBjWV5 u4RCU9h7HQ4ePESuMLTvHCgV6LUNNgemr2n/ak0+CmF17OmBUTZfhu9N9o22K6YI azwhJglDk1t0hXzNPg6kkeLXcqnY2JeRKDpg84UM/HAgYSHd3qSG6vjF7wABIytq tNBxJNtEkTAw/jPgZhLi8MGWi2w5N/JKkPrRlltahk65OgA8qH6yMtrWEC23FvP3 ExUpZgJtx69HYwg0NR0aazuCk0fDCotLVK8jyqf6u6yYOx3IJPMb8PvdU72ASweV 2eD98hcZm3JEJoLBri1Mx3vB -----END CERTIFICATE-----Generated at Mon Mar 2 04:05:24 2026 by rpki-client