$ rpki-client -vvvf rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft File: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft (raw, json) Hash identifier: HV88otE7BvurxtshlQlcGlL/TfH8+AnHYEjsCLnGdyI= Subject key identifier: 7F:63:09:7E:33:80:3C:C4:C9:C6:3E:EE:9A:45:D1:DC:16:8A:1F:2C Authority key identifier: 97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7 Certificate issuer: /CN=A91597A7/serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft Manifest number: A7 Signing time: Mon 21 Sep 2026 07:12:07 +0000 Manifest this update: Mon 21 Sep 2026 07:12:07 +0000 Manifest next update: Mon 28 Sep 2026 07:12:07 +0000 Files and hashes: 1: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl (hash: z2ECquKeC0W4eaxawAvut/NYehdl27c9eEwSKCmliY0=) 2: hi8Da_f1U_A7dPFYvZnKn1AJNaY.asa (hash: tFI3fphkrBha6He4WZbmhJjoS74HVWZeFSvJVQfj8sU=) 3: B674DD44BB3C11F0AD98C485C4F9AE02.roa (hash: gQ9o3ShWhFSXckCOxiyfc9G9ysU3P8Ay4D9+aX74JkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91597A7, serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7 Validity Not Before: Sep 21 07:12:07 2026 GMT Not After : Sep 28 07:12:07 2026 GMT Subject: CN=6ab0d8c7-4e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2d:21:fe:a0:85:dd:a2:de:73:0e:1c:f1:6e: 46:29:f9:85:bc:93:6b:30:84:bc:9e:31:86:df:93: cb:fd:ea:00:63:da:96:b1:8c:7d:bd:ff:5f:e7:68: 43:31:35:b3:c3:3c:18:90:ec:3c:a2:91:77:57:0d: 23:4f:06:f7:b2:41:31:9d:63:c0:7c:71:c2:49:fb: ab:be:a8:60:9b:ce:d4:3c:7d:67:0b:9c:a9:4f:6b: 9f:f1:a2:e4:6b:15:5b:c8:e1:5e:5f:ab:96:8f:54: 42:53:47:16:7a:d9:2d:05:af:3c:83:dd:9c:56:f2: 50:32:99:4f:a6:21:d5:cf:a0:d9:6a:eb:af:97:0e: 47:41:44:e2:42:93:99:b7:a6:b9:23:9c:69:60:9a: 03:eb:83:6e:94:21:ed:28:d6:44:48:a2:23:f2:55: 16:43:d2:1d:af:72:72:d0:ef:83:5f:c7:4f:ed:16: 0f:41:96:ba:67:ad:5c:10:b3:75:4f:14:ea:91:41: 5f:cd:27:e0:62:74:71:2e:3b:91:41:e6:e0:f5:f4: a3:14:65:d6:70:55:e1:7b:66:99:de:a9:56:2e:b6: 31:32:d2:f0:4a:71:d8:e1:02:b8:2b:7b:95:b3:fb: 85:43:ab:cb:a8:83:2d:39:21:ae:9a:ed:1d:70:38: 37:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:63:09:7E:33:80:3C:C4:C9:C6:3E:EE:9A:45:D1:DC:16:8A:1F:2C X509v3 Authority Key Identifier: keyid:97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:fc:63:15:a6:fd:d7:e2:3b:15:d6:6b:cc:c1:d6:f3:1e:37: 4f:b2:8f:7b:29:43:30:eb:b3:53:d4:be:e9:36:8f:32:bf:78: 35:d1:d4:c7:89:6f:3e:cb:a0:6a:31:e5:16:48:45:44:f5:ee: ea:ec:6d:16:ef:5d:c8:a3:17:96:7c:98:d9:64:31:42:9c:c8: b3:74:36:c7:22:4a:f7:91:6f:db:ba:5a:c6:5c:7c:5d:50:c5: 4b:46:38:65:98:35:dc:d9:a5:ac:6a:77:5f:d1:61:06:d1:12: bf:16:73:e2:b1:02:7f:aa:18:4a:b2:94:8e:40:9e:a2:6f:bd: 5e:ec:09:0e:33:b9:cd:a9:11:96:95:cc:df:19:df:83:f2:f8: 3b:8c:2f:bc:49:f2:da:58:0c:5c:57:8e:b3:1f:23:6c:04:b9: a4:33:90:3d:d7:a5:af:42:79:11:ee:80:17:12:c1:aa:da:d3: 2d:ac:57:16:a5:21:b9:3f:63:23:81:a4:4b:47:67:ea:38:58: 17:f9:ec:2d:7a:92:5f:64:8a:fc:29:e0:b7:db:15:fc:4b:66: 2e:0b:23:22:ca:ed:e9:08:55:a8:eb:e9:77:3e:d5:51:0e:39: 8a:13:90:61:12:4b:7c:04:22:17:e8:38:54:c5:c7:b0:cb:80: 2f:71:0c:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk3QTcxMTAvBgNVBAUTKDk3MUY5OUQxOEY4MzBEQUQ0NTU0OTA2Q0FEMEFENTk5 OEJCQjUyQTcwHhcNMjYwOTIxMDcxMjA3WhcNMjYwOTI4MDcxMjA3WjAYMRYwFAYD VQQDEw02YWIwZDhjNy00ZTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnS0h/qCF3aLecw4c8W5GKfmFvJNrMIS8njGG35PL/eoAY9qWsYx9vf9f52hD MTWzwzwYkOw8opF3Vw0jTwb3skExnWPAfHHCSfurvqhgm87UPH1nC5ypT2uf8aLk axVbyOFeX6uWj1RCU0cWetktBa88g92cVvJQMplPpiHVz6DZauuvlw5HQUTiQpOZ t6a5I5xpYJoD64NulCHtKNZESKIj8lUWQ9Idr3Jy0O+DX8dP7RYPQZa6Z61cELN1 TxTqkUFfzSfgYnRxLjuRQebg9fSjFGXWcFXhe2aZ3qlWLrYxMtLwSnHY4QK4K3uV s/uFQ6vLqIMtOSGumu0dcDg3YwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH9jCX4z gDzEycY+7ppF0dwWih8sMB8GA1UdIwQYMBaAFJcfmdGPgw2tRVSQbK0K1ZmLu1Kn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTdBNy8wQjRDMkRBMEJB MzgxMUYwOTM0MDhGNkJDNEY5QUUwMi9seC1aMFktRERhMUZWSkJzclFyVm1ZdTdV cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x4LVowWS1ERGExRlZKQnNyUXJWbVl1N1VxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTdBNy8wQjRDMkRBMEJBMzgxMUYwOTM0MDhGNkJDNEY5QUUwMi9seC1aMFktRERh MUZWSkJzclFyVm1ZdTdVcWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkfxjFab91+I7FdZrzMHW8x43T7KPeylDMOuzU9S+6TaPMr94NdHUx4lvPsug ajHlFkhFRPXu6uxtFu9dyKMXlnyY2WQxQpzIs3Q2xyJK95Fv27paxlx8XVDFS0Y4 ZZg13NmlrGp3X9FhBtESvxZz4rECf6oYSrKUjkCeom+9XuwJDjO5zakRlpXM3xnf g/L4O4wvvEny2lgMXFeOsx8jbAS5pDOQPdelr0J5Ee6AFxLBqtrTLaxXFqUhuT9j I4GkS0dn6jhYF/nsLXqSX2SK/Cngt9sV/EtmLgsjIsrt6QhVqOvpdz7VUQ45ihOQ YRJLfAQiF+g4VMXHsMuAL3EMfg== -----END CERTIFICATE-----Generated at Tue Sep 22 12:54:27 2026 by rpki-client