$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json) Hash identifier: xFtAH7oCuY3bUc2/+86u1ykY8C6aG1aonTvCHn2F9Go= Subject key identifier: 76:82:EA:5D:FC:DB:A6:DB:86:5A:7E:83:4E:46:28:CA:FA:E5:95:62 Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft Manifest number: 0154 Signing time: Sun 19 Apr 2026 04:43:43 +0000 Manifest this update: Sun 19 Apr 2026 04:43:42 +0000 Manifest next update: Sun 26 Apr 2026 04:43:42 +0000 Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: Gbw/04OJEs+5gGT91C7EO+WsHhFLvAqb8CUXvXsdqR0=) 2: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: zAdUeLORZiO4f/KSBL4alxYSI+DmbONmLsqQbgHi324=) 3: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: PtbtJlcJRwUkYVZTTdhAVrVCAYKXUtPXtxl26TpZjBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Validity Not Before: Apr 19 04:43:42 2026 GMT Not After : Apr 26 04:43:42 2026 GMT Subject: CN=69e45d7f-4543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:72:31:3a:a2:ea:be:21:9b:7e:f4:1f:cc:8b: d6:b3:c7:61:b3:ad:85:75:4c:7c:18:d3:4c:2c:5a: fa:66:87:34:e7:79:1a:0f:5e:df:5d:5b:5e:40:04: 03:d5:2f:4e:a3:89:c6:3a:38:05:97:69:70:b7:99: b6:8e:3c:2f:fd:30:bc:3b:7c:cc:4c:20:02:1e:be: b3:69:94:99:29:3f:34:dd:f7:a3:48:43:d1:c1:ad: 93:7e:a9:f5:f9:07:94:96:b9:ec:71:2d:80:c4:65: 3d:26:3c:02:f2:da:84:47:a2:ff:8e:c7:57:42:12: af:46:bd:f3:cc:4d:85:8f:5b:43:1c:96:7b:48:1e: 0a:41:78:45:c2:5c:a8:6b:f3:1c:3c:57:46:1a:c7: 27:df:9a:52:12:57:08:5b:0d:5e:92:53:71:89:15: 31:d5:0d:90:f9:74:bd:4a:59:10:87:82:f5:4c:75: 99:f0:4c:ef:9b:79:67:df:4e:0f:12:3b:50:89:35: 90:eb:35:47:19:92:90:1b:33:2e:b5:27:92:43:7e: d7:ca:07:34:b6:9d:99:24:4c:8c:c1:57:5b:d0:6c: 57:f6:29:1b:42:4d:5e:a1:8d:86:ff:e1:76:5c:e7: fa:76:61:5c:18:de:64:fd:1b:9b:b7:56:8a:1a:c2: 8b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:82:EA:5D:FC:DB:A6:DB:86:5A:7E:83:4E:46:28:CA:FA:E5:95:62 X509v3 Authority Key Identifier: keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0d:24:fa:af:7a:dd:41:6e:33:79:1f:3b:47:47:0b:98:94: a8:85:95:de:17:ed:29:74:7c:d2:c0:98:f9:2f:f3:3b:3c:40: 32:16:89:fe:68:a3:74:c0:5c:06:62:d8:d9:0f:ec:4c:35:37: 3c:b0:5a:15:a0:c3:31:a7:ce:64:7b:53:17:7d:1c:98:3f:cb: cf:37:d4:f2:80:a6:cd:d7:48:0f:47:f7:d5:cb:0e:6e:cd:40: e0:f3:4d:93:a2:c7:e0:43:62:c3:bf:27:93:95:18:68:60:1b: 3b:95:7f:10:03:fd:05:d9:d0:41:f9:49:d3:19:be:f0:d5:c0: 32:9d:12:4e:08:4e:0c:86:b2:de:e5:83:34:e3:34:65:4b:57: ee:0a:67:3e:ae:e9:52:be:dd:a9:65:95:af:aa:32:eb:73:1c: 84:1e:50:2c:96:c6:a3:3e:79:a7:ec:6d:75:91:7b:e0:f7:28: c5:f7:48:cb:37:93:dc:31:fa:1b:68:82:25:34:7a:de:81:43: fe:05:14:c0:44:ee:1c:81:0e:78:dc:0f:d6:a7:12:07:6e:22: fe:c7:a3:25:a3:50:cf:f6:bf:2f:fc:74:b7:0c:a6:54:a7:bf: 67:ab:22:20:49:b2:26:d5:02:cf:42:bb:e1:fd:a4:66:a1:46: 10:72:3d:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNDAxMTAvBgNVBAUTKDJENzQ4NEExN0Y0RTlFNjk0MTAwNTFFRjUzQjdCRTcx OTM3RjlGOUMwHhcNMjYwNDE5MDQ0MzQyWhcNMjYwNDI2MDQ0MzQyWjAYMRYwFAYD VQQDEw02OWU0NWQ3Zi00NTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnIxOqLqviGbfvQfzIvWs8dhs62FdUx8GNNMLFr6Zoc053kaD17fXVteQAQD 1S9Oo4nGOjgFl2lwt5m2jjwv/TC8O3zMTCACHr6zaZSZKT803fejSEPRwa2Tfqn1 +QeUlrnscS2AxGU9JjwC8tqER6L/jsdXQhKvRr3zzE2Fj1tDHJZ7SB4KQXhFwlyo a/McPFdGGscn35pSElcIWw1eklNxiRUx1Q2Q+XS9SlkQh4L1THWZ8Ezvm3ln304P EjtQiTWQ6zVHGZKQGzMutSeSQ37Xygc0tp2ZJEyMwVdb0GxX9ikbQk1eoY2G/+F2 XOf6dmFcGN5k/Rubt1aKGsKLgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHaC6l38 26bbhlp+g05GKMr65ZViMB8GA1UdIwQYMBaAFC10hKF/Tp5pQQBR71O3vnGTf5+c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8xRkEwMjI1MDM4 RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25tbEJBRkh2VTdlLWNaTl9u NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xYU0VvWDlPbm1sQkFGSHZVN2UtY1pOX241dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI0MC8xRkEwMjI1MDM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25t bEJBRkh2VTdlLWNaTl9uNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGg0k+q963UFuM3kfO0dHC5iUqIWV3hftKXR80sCY+S/zOzxAMhaJ/mijdMBc BmLY2Q/sTDU3PLBaFaDDMafOZHtTF30cmD/LzzfU8oCmzddID0f31csObs1A4PNN k6LH4ENiw78nk5UYaGAbO5V/EAP9BdnQQflJ0xm+8NXAMp0STghODIay3uWDNOM0 ZUtX7gpnPq7pUr7dqWWVr6oy63MchB5QLJbGoz55p+xtdZF74PcoxfdIyzeT3DH6 G2iCJTR63oFD/gUUwETuHIEOeNwP1qcSB24i/sejJaNQz/a/L/x0twymVKe/Z6si IEmyJtUCz0K74f2kZqFGEHI94g== -----END CERTIFICATE-----Generated at Sun Apr 19 09:45:56 2026 by rpki-client