$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft File: lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft (raw, json) Hash identifier: oh4A+VyJo60j6O/yCKdDQUIqMMpGqi+GQ3kBbKhUi8Q= Subject key identifier: 4E:ED:37:4A:E4:2B:C6:24:1F:CB:47:2C:C4:8A:F2:B7:32:9B:F5:F7 Authority key identifier: 97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 Certificate issuer: /CN=A91A1C06/serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Certificate serial: 35B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft Manifest number: 35A2 Signing time: Mon 28 Sep 2026 14:59:27 +0000 Manifest this update: Mon 28 Sep 2026 14:59:26 +0000 Manifest next update: Mon 05 Oct 2026 14:59:26 +0000 Files and hashes: 1: lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl (hash: V/D9/56+fUu/b6bmyLwCEATDiGrHaBab4PtvWAkcSro=) 2: F3E1B79CB8F811F08ABED010C4F9AE02.roa (hash: tS4RWCL5pxa5UjyzIdHh2QDGb2clP9SaVI3vEhg55R8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 14:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13749 (0x35b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1C06, serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Validity Not Before: Sep 28 14:59:26 2026 GMT Not After : Oct 5 14:59:26 2026 GMT Subject: CN=6aba80cf-14a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:30:29:2d:11:4c:a7:31:55:a7:ed:92:cb:03: 6d:41:ef:2e:39:e3:e1:16:37:90:be:73:1d:67:6d: ca:d0:b0:4c:66:c7:7f:0b:81:8e:77:27:70:28:6d: d0:c1:f6:85:68:a1:2a:64:31:2b:4e:b6:51:3d:43: 8f:88:21:81:6a:c0:af:04:c8:e6:6d:2b:aa:bc:70: f8:da:a7:cf:9f:ea:74:1b:c2:c7:2c:68:76:94:09: b7:bb:af:01:55:db:73:40:00:77:b8:cb:25:77:c0: 76:3a:04:16:79:b9:8a:d6:ae:ce:78:d4:1d:83:f5: 90:fd:4b:f6:e8:0c:0f:90:64:ac:68:2b:d5:69:31: 65:6c:2c:00:04:5e:6c:41:62:89:84:64:c8:b0:52: fe:8a:a2:79:94:2d:f7:b4:1b:54:64:fd:c9:8d:cb: 33:1a:9e:d9:f2:77:28:e5:c6:52:1b:01:41:13:d8: b0:e1:49:3a:24:8d:48:9a:bd:6c:de:6e:48:a2:4c: e1:a5:e2:dc:c3:02:08:8f:5d:21:d7:75:15:8b:e3: c6:48:e3:63:fb:8d:d1:55:e9:85:d7:26:a1:c8:d4: f9:02:a7:26:15:5c:8b:b8:ec:0c:a4:26:cc:f2:65: 5a:86:ce:ea:0e:2f:63:45:1f:41:56:11:63:ed:31: 91:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:ED:37:4A:E4:2B:C6:24:1F:CB:47:2C:C4:8A:F2:B7:32:9B:F5:F7 X509v3 Authority Key Identifier: keyid:97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:8b:ad:61:d7:a4:7a:19:81:9c:37:26:b7:91:72:f2:5b:ba: 2c:27:c5:c5:65:06:28:84:5a:4f:96:aa:31:ef:02:00:76:0d: a2:61:ad:d4:60:18:7d:a1:1b:50:06:70:d9:50:4d:0e:98:61: 1e:03:f0:ed:8c:7f:f2:91:6c:01:ec:a5:4f:b2:3b:78:bd:dd: f5:1b:12:34:ad:7d:9a:56:d4:cd:11:c6:8f:1c:fe:fa:d9:9a: 0c:78:74:3f:dc:85:ef:29:12:3b:48:7d:ba:27:ae:e2:a5:9d: e7:85:04:c5:b3:84:ae:34:2d:e8:33:f5:94:f5:70:26:50:7f: c7:8f:0a:bc:85:3c:ee:d9:05:1a:f2:ff:a4:8f:1d:51:21:01: 19:21:83:dc:aa:b8:c0:9f:da:b5:38:30:26:02:05:7d:43:c8: 37:78:8b:4c:3d:6a:35:79:05:da:6a:4e:be:d6:e8:c3:f6:0a: 19:d1:71:c5:d3:87:e8:d6:cc:c4:be:59:cd:ff:1a:90:e4:fd: 7e:1e:a7:ab:bf:4c:86:ed:43:04:7c:2d:83:5c:02:85:6f:4b: 3d:ed:3f:a4:50:2a:60:aa:d3:42:6e:29:d2:93:72:94:d3:d2: de:5b:d0:2b:0a:1d:68:13:52:c6:06:7b:d0:d2:59:fa:23:1f: 43:76:52:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDMDYxMTAvBgNVBAUTKDk3Mzc3MTMwMDQ4MTlCNkI2NkZDNTZFNkVDODZCRTRE QzJFMjhFMTcwHhcNMjYwOTI4MTQ1OTI2WhcNMjYxMDA1MTQ1OTI2WjAYMRYwFAYD VQQDEw02YWJhODBjZi0xNGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jApLRFMpzFVp+2SywNtQe8uOePhFjeQvnMdZ23K0LBMZsd/C4GOdydwKG3Q wfaFaKEqZDErTrZRPUOPiCGBasCvBMjmbSuqvHD42qfPn+p0G8LHLGh2lAm3u68B VdtzQAB3uMsld8B2OgQWebmK1q7OeNQdg/WQ/Uv26AwPkGSsaCvVaTFlbCwABF5s QWKJhGTIsFL+iqJ5lC33tBtUZP3JjcszGp7Z8nco5cZSGwFBE9iw4Uk6JI1Imr1s 3m5IokzhpeLcwwIIj10h13UVi+PGSONj+43RVemF1yahyNT5AqcmFVyLuOwMpCbM 8mVahs7qDi9jRR9BVhFj7TGRCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7tN0rk K8YkH8tHLMSK8rcym/X3MB8GA1UdIwQYMBaAFJc3cTAEgZtrZvxW5uyGvk3C4o4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUMwNi82REVBRTIxQzFE OUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0ydG1fRmJtN0lhLVRjTGlq aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6ZHhNQVNCbTJ0bV9GYm03SWEtVGNMaWpoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUMwNi82REVBRTIxQzFEOUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0y dG1fRmJtN0lhLVRjTGlqaGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANoutYdekehmBnDcmt5Fy8lu6LCfFxWUGKIRaT5aqMe8CAHYNomGt1GAYfaEb UAZw2VBNDphhHgPw7Yx/8pFsAeylT7I7eL3d9RsSNK19mlbUzRHGjxz++tmaDHh0 P9yF7ykSO0h9uieu4qWd54UExbOErjQt6DP1lPVwJlB/x48KvIU87tkFGvL/pI8d USEBGSGD3Kq4wJ/atTgwJgIFfUPIN3iLTD1qNXkF2mpOvtbow/YKGdFxxdOH6NbM xL5Zzf8akOT9fh6nq79Mhu1DBHwtg1wChW9LPe0/pFAqYKrTQm4p0pNylNPS3lvQ KwodaBNSxgZ70NJZ+iMfQ3ZS9Q== -----END CERTIFICATE-----Generated at Mon Sep 28 23:12:10 2026 by rpki-client