$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft File: lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft (raw, json) Hash identifier: XrWpMb8ioRuUthS6GXNLc+ZOhsYD1O0DiGxmfkfM4DE= Subject key identifier: 56:ED:24:3A:13:55:29:2D:B6:9E:D0:7F:34:66:ED:97:6F:CD:D7:39 Authority key identifier: 97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 Certificate issuer: /CN=A91A1C06/serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Certificate serial: 3543 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft Manifest number: 3532 Signing time: Sat 28 Feb 2026 15:00:46 +0000 Manifest this update: Sat 28 Feb 2026 15:00:46 +0000 Manifest next update: Sat 07 Mar 2026 15:00:46 +0000 Files and hashes: 1: lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl (hash: JDH6cTIfgXEJHR1kwL/uIvcXgNZ3WwGBjMse9ZFceR4=) 2: F3E1B79CB8F811F08ABED010C4F9AE02.roa (hash: BKiPGU3pkH/GpnVwYdXySPy4Cyi9I8GkRMl99dO+R2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13635 (0x3543) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1C06, serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Validity Not Before: Feb 28 15:00:46 2026 GMT Not After : Mar 7 15:00:46 2026 GMT Subject: CN=69a3031e-1f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:42:86:8d:be:7d:a8:47:ad:91:59:30:40:c4: b1:38:7f:f6:15:2e:1f:e9:3e:35:c2:e3:e4:97:3e: 87:79:20:f0:ee:8b:1f:6e:fa:3b:ec:6a:1d:25:4f: 1c:91:47:fc:d7:f1:1c:ae:7b:59:3c:5e:b7:7b:c1: 17:16:2a:b7:b3:28:73:e9:e0:57:de:65:79:81:ce: c5:ce:95:4f:5d:50:65:93:68:c1:a7:c7:f9:c0:9d: 0f:02:0e:96:9f:58:ac:07:78:19:e1:43:22:b8:49: 1c:35:d2:79:2d:a2:51:0e:01:42:a8:e8:99:cd:4e: a2:fc:0a:83:c6:c3:38:11:b8:6f:52:55:3e:64:ab: 72:32:10:ed:7d:98:48:b3:f9:f3:57:3c:36:74:6d: b3:ba:a4:17:e4:98:41:d3:30:11:73:8e:71:42:a4: 74:4b:59:3f:35:f3:68:71:d5:dd:a0:d7:fe:54:47: 4a:f7:ec:5e:62:26:d8:b1:74:ac:24:18:de:d1:3b: a8:b1:4e:2b:fb:9a:ec:5e:01:93:9d:a6:51:33:c8: de:9c:63:88:cb:8d:f3:34:ae:e8:ec:be:87:65:c2: 35:b5:66:0e:b4:2b:85:05:11:fc:1b:b4:b4:15:e1: db:3a:77:b3:ae:54:6a:b1:0d:7a:47:0e:e5:41:91: b3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:ED:24:3A:13:55:29:2D:B6:9E:D0:7F:34:66:ED:97:6F:CD:D7:39 X509v3 Authority Key Identifier: keyid:97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:bb:fb:ac:a1:d9:75:72:b1:8d:01:3a:01:1c:85:17:5a:7e: 57:9a:a6:e3:03:dd:f7:5f:ed:e2:fd:66:f4:c4:b9:ab:eb:94: 98:ab:3c:08:c8:aa:4d:9d:87:99:d9:e7:3d:52:2b:59:c5:bd: b9:39:11:20:94:81:31:d4:32:6a:77:8d:aa:16:9d:0c:90:af: f4:2c:11:65:00:fe:ec:12:ce:e0:82:a1:de:20:14:57:5e:8e: 89:4e:ad:e2:75:0e:1e:4a:eb:75:37:4a:c6:f6:fd:9c:ea:17: 4b:d8:18:e2:5f:0a:b6:b3:0e:a9:c3:ff:8f:af:b0:fb:97:82: 8f:80:e6:14:55:b6:93:e6:54:a8:bf:3b:25:e3:ef:26:37:d5: 70:21:74:1d:a4:5f:0d:1d:0e:f4:50:10:da:2c:10:3d:5a:17: 85:da:76:db:91:cd:9f:a2:b2:4a:2a:8c:3d:9f:37:26:6c:0c: 3d:ea:1a:71:80:d7:7c:7b:75:a9:01:8c:64:f4:8f:f8:99:14: 0f:e1:b4:c8:cd:ce:60:f0:6c:b9:27:b0:7e:2b:30:c9:5c:d0: 67:6d:e7:9e:4b:29:dc:9f:83:46:a1:cf:43:6d:cb:09:1f:b1: dc:08:fa:8e:20:88:70:14:8a:95:d0:34:1d:3d:2c:a9:c3:a2: e0:08:4a:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDMDYxMTAvBgNVBAUTKDk3Mzc3MTMwMDQ4MTlCNkI2NkZDNTZFNkVDODZCRTRE QzJFMjhFMTcwHhcNMjYwMjI4MTUwMDQ2WhcNMjYwMzA3MTUwMDQ2WjAYMRYwFAYD VQQDDA02OWEzMDMxZS0xZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA70KGjb59qEetkVkwQMSxOH/2FS4f6T41wuPklz6HeSDw7osfbvo77GodJU8c kUf81/EcrntZPF63e8EXFiq3syhz6eBX3mV5gc7FzpVPXVBlk2jBp8f5wJ0PAg6W n1isB3gZ4UMiuEkcNdJ5LaJRDgFCqOiZzU6i/AqDxsM4EbhvUlU+ZKtyMhDtfZhI s/nzVzw2dG2zuqQX5JhB0zARc45xQqR0S1k/NfNocdXdoNf+VEdK9+xeYibYsXSs JBje0TuosU4r+5rsXgGTnaZRM8jenGOIy43zNK7o7L6HZcI1tWYOtCuFBRH8G7S0 FeHbOnezrlRqsQ16Rw7lQZGzlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFbtJDoT VSkttp7QfzRm7Zdvzdc5MB8GA1UdIwQYMBaAFJc3cTAEgZtrZvxW5uyGvk3C4o4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUMwNi82REVBRTIxQzFE OUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0ydG1fRmJtN0lhLVRjTGlq aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6ZHhNQVNCbTJ0bV9GYm03SWEtVGNMaWpoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUMwNi82REVBRTIxQzFEOUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0y dG1fRmJtN0lhLVRjTGlqaGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANLv7rKHZdXKxjQE6ARyFF1p+V5qm4wPd91/t4v1m9MS5q+uUmKs8CMiqTZ2H mdnnPVIrWcW9uTkRIJSBMdQyaneNqhadDJCv9CwRZQD+7BLO4IKh3iAUV16OiU6t 4nUOHkrrdTdKxvb9nOoXS9gY4l8KtrMOqcP/j6+w+5eCj4DmFFW2k+ZUqL87JePv JjfVcCF0HaRfDR0O9FAQ2iwQPVoXhdp225HNn6KySiqMPZ83JmwMPeoacYDXfHt1 qQGMZPSP+JkUD+G0yM3OYPBsuSewfiswyVzQZ23nnksp3J+DRqHPQ23LCR+x3Aj6 jiCIcBSKldA0HT0sqcOi4AhK2Q== -----END CERTIFICATE-----Generated at Sun Mar 1 23:15:40 2026 by rpki-client