$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft File: lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft (raw, json) Hash identifier: WeoB5x+TBYHOgXaIsyXYNon6WNNK6ehlm0McSblJaWI= Subject key identifier: 58:4C:6C:69:E1:D7:86:89:B4:E3:AB:42:B6:83:7F:A0:08:36:0A:4C Authority key identifier: 97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 Certificate issuer: /CN=A91A1C06/serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Certificate serial: 3595 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft Manifest number: 3582 Signing time: Tue 28 Jul 2026 15:02:40 +0000 Manifest this update: Tue 28 Jul 2026 15:02:39 +0000 Manifest next update: Tue 04 Aug 2026 15:02:39 +0000 Files and hashes: 1: lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl (hash: NrhGFP8B6G+A1wIkbKfDxmv1hIsMMHO+M1jfV2pxTRo=) 2: F3E1B79CB8F811F08ABED010C4F9AE02.roa (hash: tS4RWCL5pxa5UjyzIdHh2QDGb2clP9SaVI3vEhg55R8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13717 (0x3595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1C06, serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Validity Not Before: Jul 28 15:02:39 2026 GMT Not After : Aug 4 15:02:39 2026 GMT Subject: CN=6a68c490-f865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:76:21:c5:b1:22:91:e5:38:43:82:43:bd:ed: d6:17:4e:fb:e5:fd:3e:43:bd:4a:5c:4b:bc:cf:d4: 87:d0:c7:fb:3b:52:f4:a9:51:96:c3:26:78:c4:40: 8a:37:e1:10:ce:42:1c:75:ca:3e:18:c8:8a:2e:5b: 1e:d8:4f:3e:aa:50:dc:38:b5:68:28:da:94:a0:e7: 4c:29:db:b5:65:05:10:41:14:16:4d:8d:da:f4:8f: 8f:fa:3b:06:31:7c:34:75:c5:f7:32:4d:ea:34:7e: 32:20:52:2a:b8:69:7a:4d:0d:63:a3:9d:e5:23:7b: 3f:69:05:71:b8:10:54:37:e2:69:f0:2f:4d:f5:6c: df:ce:5d:30:1f:01:45:27:84:87:32:7a:03:fc:be: 69:ce:c8:54:04:1d:fd:21:d6:b2:2f:b2:a8:a3:eb: 4f:50:3f:57:23:d0:37:e2:01:97:0e:62:89:b9:4d: ff:1b:eb:c0:57:12:0e:84:f6:69:59:f7:fa:cf:ee: 1a:cc:c6:93:fc:3d:d0:c6:b8:2c:8d:5e:9b:71:4a: 5a:30:73:46:15:17:3b:8e:a7:13:1f:77:cd:96:65: 91:eb:3d:5b:18:34:85:f2:4c:44:a6:99:5a:da:c6: 88:cb:5c:dd:99:ed:a6:c5:68:cc:8c:88:84:60:f2: 06:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4C:6C:69:E1:D7:86:89:B4:E3:AB:42:B6:83:7F:A0:08:36:0A:4C X509v3 Authority Key Identifier: keyid:97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:f0:06:f3:2f:99:6d:8c:92:70:9f:71:4a:90:99:45:af:bd: 06:f1:51:c6:a6:d6:d9:5e:63:22:00:96:d5:24:0d:ad:59:16: d9:3b:8a:e1:81:18:87:55:9c:4c:be:6b:8b:98:b7:3b:9b:5b: 40:73:81:de:e8:dd:d7:fe:0c:d9:ad:17:ed:99:2a:de:c5:f2: 68:cf:f3:5c:c4:c2:4f:7c:9e:29:73:ad:70:95:8d:53:2a:1a: 46:fc:ff:88:f6:17:77:c5:f3:6c:f9:6a:12:15:93:00:08:4c: 33:a5:04:c9:b9:93:19:d3:d3:1f:f7:45:d1:44:bc:55:62:36: f5:b7:d0:9d:89:75:ef:12:8b:e9:e8:ec:c3:c0:20:f6:6b:14: 88:ac:e9:f2:8b:d0:b4:d4:2c:13:48:5f:f1:ee:76:c7:e1:28: b9:79:ab:be:42:bd:88:72:6e:e1:46:06:b8:7c:16:b2:42:67: 9f:19:98:5b:d6:19:f8:cf:5e:61:fd:bc:cb:94:47:73:fe:fe: a7:3d:36:ed:8d:a1:88:49:c4:c9:cc:3c:0c:79:85:e9:c4:00: 7a:e1:1e:24:30:66:80:e6:e5:77:b5:fb:b3:ab:0f:97:5b:29: 0f:39:c0:59:54:56:19:72:11:15:2d:a6:c9:53:2c:3a:12:83: 7f:87:c3:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDMDYxMTAvBgNVBAUTKDk3Mzc3MTMwMDQ4MTlCNkI2NkZDNTZFNkVDODZCRTRE QzJFMjhFMTcwHhcNMjYwNzI4MTUwMjM5WhcNMjYwODA0MTUwMjM5WjAYMRYwFAYD VQQDEw02YTY4YzQ5MC1mODY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+HYhxbEikeU4Q4JDve3WF0775f0+Q71KXEu8z9SH0Mf7O1L0qVGWwyZ4xECK N+EQzkIcdco+GMiKLlse2E8+qlDcOLVoKNqUoOdMKdu1ZQUQQRQWTY3a9I+P+jsG MXw0dcX3Mk3qNH4yIFIquGl6TQ1jo53lI3s/aQVxuBBUN+Jp8C9N9Wzfzl0wHwFF J4SHMnoD/L5pzshUBB39IdayL7Koo+tPUD9XI9A34gGXDmKJuU3/G+vAVxIOhPZp Wff6z+4azMaT/D3QxrgsjV6bcUpaMHNGFRc7jqcTH3fNlmWR6z1bGDSF8kxEppla 2saIy1zdme2mxWjMjIiEYPIGQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFhMbGnh 14aJtOOrQraDf6AINgpMMB8GA1UdIwQYMBaAFJc3cTAEgZtrZvxW5uyGvk3C4o4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUMwNi82REVBRTIxQzFE OUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0ydG1fRmJtN0lhLVRjTGlq aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6ZHhNQVNCbTJ0bV9GYm03SWEtVGNMaWpoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUMwNi82REVBRTIxQzFEOUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0y dG1fRmJtN0lhLVRjTGlqaGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw/AG8y+ZbYyScJ9xSpCZRa+9BvFRxqbW2V5jIgCW1SQNrVkW2TuK4YEYh1Wc TL5ri5i3O5tbQHOB3ujd1/4M2a0X7Zkq3sXyaM/zXMTCT3yeKXOtcJWNUyoaRvz/ iPYXd8XzbPlqEhWTAAhMM6UEybmTGdPTH/dF0US8VWI29bfQnYl17xKL6ejsw8Ag 9msUiKzp8ovQtNQsE0hf8e52x+EouXmrvkK9iHJu4UYGuHwWskJnnxmYW9YZ+M9e Yf28y5RHc/7+pz027Y2hiEnEycw8DHmF6cQAeuEeJDBmgObld7X7s6sPl1spDznA WVRWGXIRFS2myVMsOhKDf4fDFA== -----END CERTIFICATE-----Generated at Wed Jul 29 11:22:49 2026 by rpki-client