$ rpki-client -vvf rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft File: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft (raw, json) Hash identifier: GHqAfu32HTR8s6UtsbcMB96TJ1zRIyo9qQ/UFb9ohoc= Subject key identifier: 85:01:70:B5:25:AF:6E:11:D6:82:39:0F:C3:CE:E5:47:86:20:56:81 Authority key identifier: 97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7 Certificate issuer: /CN=A91597A7/serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft Manifest number: 56 Signing time: Wed 15 Apr 2026 07:42:37 +0000 Manifest this update: Wed 15 Apr 2026 07:42:36 +0000 Manifest next update: Wed 22 Apr 2026 07:42:36 +0000 Files and hashes: 1: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl (hash: f5CHjnwpyTJMuGlq2NT9LNqI/jjJvoGPkbDuoBD2Jn4=) 2: B674DD44BB3C11F0AD98C485C4F9AE02.roa (hash: gQ9o3ShWhFSXckCOxiyfc9G9ysU3P8Ay4D9+aX74JkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 07:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91597A7, serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7 Validity Not Before: Apr 15 07:42:36 2026 GMT Not After : Apr 22 07:42:36 2026 GMT Subject: CN=69df416d-f85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a2:9c:cf:c9:f4:fd:ac:82:4f:dd:1d:7b:4f: 9e:1d:c5:14:be:36:e8:38:ee:9d:62:0f:9b:2e:28: 6c:2f:02:06:99:33:77:10:3c:a3:b1:d9:26:07:d8: 10:14:89:6e:0e:b6:9c:26:9a:ae:94:7b:a5:05:d3: 3b:03:17:88:1d:9f:00:cb:7e:ec:fd:47:11:38:d3: 4c:0c:f8:94:26:fe:ff:cc:89:9d:5a:d5:ed:1b:8e: 99:16:90:1b:4f:97:47:2d:37:19:de:75:6a:e4:c3: ee:6e:6e:de:39:31:46:54:82:99:bf:9e:ab:34:5b: 5c:95:04:ca:3d:79:26:e7:13:c8:31:50:e4:43:37: 04:b8:11:b1:b0:6c:0a:17:b8:50:79:cf:c6:5d:3b: bc:ba:94:67:42:bf:02:64:33:1f:79:7e:41:2c:13: 24:5e:04:2f:49:c7:36:03:d7:b4:71:7d:a6:35:52: 6f:c1:67:1d:ab:c0:4f:5d:4f:42:12:47:6e:0a:e0: 16:de:ad:73:fa:64:17:ab:0a:fa:39:7a:9d:c0:81: 41:13:e8:f2:3f:db:ad:1e:66:af:42:71:4f:b8:b2: bd:6a:3a:c6:c3:40:e5:a2:00:fa:d3:3f:bc:09:70: a4:db:cc:8d:5d:ab:13:75:32:93:bb:d7:2b:30:98: 29:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:01:70:B5:25:AF:6E:11:D6:82:39:0F:C3:CE:E5:47:86:20:56:81 X509v3 Authority Key Identifier: keyid:97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:3a:56:e3:a8:11:c3:b3:a4:1a:7b:21:94:d9:82:25:6e:e2: 2e:2d:88:43:7d:d1:df:52:19:a3:a7:da:c1:9b:af:07:45:2a: b6:99:2c:67:a8:99:de:92:71:b3:17:da:80:fb:95:0b:b7:39: 4c:43:d0:01:61:3b:a6:7e:e7:9d:33:d2:c3:45:89:49:a6:fb: 62:d2:22:59:05:9b:53:e0:d7:04:8e:74:5f:84:cc:1b:53:66: d0:2e:e2:6f:86:bc:40:98:b2:06:1a:13:dd:e4:8f:60:b0:0a: 6a:7b:4b:ca:ab:6b:11:45:15:1c:32:fa:68:44:56:8c:57:93: e7:16:09:be:35:e7:73:b1:3d:44:b6:b1:a9:33:0b:41:75:5f: 78:a1:86:c3:a1:3c:0e:64:d6:5e:43:11:4d:39:af:bd:cd:50: c3:0e:2a:0d:8d:1a:f6:57:9b:5f:7c:b8:ab:d1:a4:12:2f:7a: 44:d5:7a:2e:da:10:90:70:47:d1:c0:78:e9:92:92:5f:ff:d7: 9c:00:c8:28:b4:b2:1a:3b:1d:91:80:a1:8a:c6:56:21:7c:29: d5:77:8e:d6:94:1c:b9:a4:87:d6:8b:e0:2b:e2:f2:14:74:95: 26:46:de:01:b1:18:36:f3:dd:21:4e:7c:06:85:aa:3a:50:f7: 8d:f0:b9:4f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTdBNzExMC8GA1UEBRMoOTcxRjk5RDE4RjgzMERBRDQ1NTQ5MDZDQUQwQUQ1OTk4 QkJCNTJBNzAeFw0yNjA0MTUwNzQyMzZaFw0yNjA0MjIwNzQyMzZaMBgxFjAUBgNV BAMTDTY5ZGY0MTZkLWY4NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgopzPyfT9rIJP3R17T54dxRS+Nug47p1iD5suKGwvAgaZM3cQPKOx2SYH2BAU iW4Otpwmmq6Ue6UF0zsDF4gdnwDLfuz9RxE400wM+JQm/v/MiZ1a1e0bjpkWkBtP l0ctNxnedWrkw+5ubt45MUZUgpm/nqs0W1yVBMo9eSbnE8gxUORDNwS4EbGwbAoX uFB5z8ZdO7y6lGdCvwJkMx95fkEsEyReBC9JxzYD17RxfaY1Um/BZx2rwE9dT0IS R24K4BberXP6ZBerCvo5ep3AgUET6PI/260eZq9CcU+4sr1qOsbDQOWiAPrTP7wJ cKTbzI1dqxN1MpO71yswmCmHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhQFwtSWv bhHWgjkPw87lR4YgVoEwHwYDVR0jBBgwFoAUlx+Z0Y+DDa1FVJBsrQrVmYu7Uqcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5N0E3LzBCNEMyREEwQkEz ODExRjA5MzQwOEY2QkM0RjlBRTAyL2x4LVowWS1ERGExRlZKQnNyUXJWbVl1N1Vx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHgtWjBZLUREYTFGVkpCc3JRclZtWXU3VXFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 N0E3LzBCNEMyREEwQkEzODExRjA5MzQwOEY2QkM0RjlBRTAyL2x4LVowWS1ERGEx RlZKQnNyUXJWbVl1N1VxYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQACOlbjqBHDs6QaeyGU2YIlbuIuLYhDfdHfUhmjp9rBm68HRSq2mSxnqJneknGz F9qA+5ULtzlMQ9ABYTumfuedM9LDRYlJpvti0iJZBZtT4NcEjnRfhMwbU2bQLuJv hrxAmLIGGhPd5I9gsApqe0vKq2sRRRUcMvpoRFaMV5PnFgm+NedzsT1EtrGpMwtB dV94oYbDoTwOZNZeQxFNOa+9zVDDDioNjRr2V5tffLir0aQSL3pE1Xou2hCQcEfR wHjpkpJf/9ecAMgotLIaOx2RgKGKxlYhfCnVd47WlBy5pIfWi+Ar4vIUdJUmRt4B sRg2890hTnwGhao6UPeN8LlP -----END CERTIFICATE-----Generated at Fri Apr 17 07:04:24 2026 by rpki-client