$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json) Hash identifier: c7t2WpxiSKuME7oRXFaMJCo3m6ILfqMbl6KO+8xtLiI= Subject key identifier: B0:D9:16:7C:08:CC:44:F9:EF:C7:BF:32:B9:32:DF:1C:AC:2F:A5:4D Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft Manifest number: 01A2 Signing time: Mon 21 Sep 2026 04:11:26 +0000 Manifest this update: Mon 21 Sep 2026 04:11:25 +0000 Manifest next update: Mon 28 Sep 2026 04:11:25 +0000 Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: 3KhOLkzt/BOE8MLz91cG4nn11ngkqdp0il7t1d0YM0M=) 2: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: PtbtJlcJRwUkYVZTTdhAVrVCAYKXUtPXtxl26TpZjBg=) 3: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: zAdUeLORZiO4f/KSBL4alxYSI+DmbONmLsqQbgHi324=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Validity Not Before: Sep 21 04:11:25 2026 GMT Not After : Sep 28 04:11:25 2026 GMT Subject: CN=6ab0ae6e-7348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:67:df:6d:74:21:25:b5:07:79:07:c0:ab:50: 03:10:a8:7c:13:1a:ad:78:d0:3e:ef:f7:ea:18:46: 8e:1c:4e:a4:f2:bd:08:bf:7b:ae:e3:48:97:85:05: e5:37:96:56:f9:a9:78:5a:ff:06:af:8e:b4:62:77: 95:95:34:ab:7c:82:59:bd:fc:49:5d:6f:78:1d:ab: 3a:d8:dd:51:3d:14:ec:28:de:27:0f:0d:06:9d:b3: 36:63:1e:22:84:f0:a6:b6:ff:1a:30:46:23:71:15: 43:48:da:dd:ef:74:d7:eb:b8:29:f3:76:e3:9d:9a: bc:e9:b7:9c:03:54:6d:fc:42:37:2b:49:c1:ce:d9: da:58:6b:b3:4c:7b:b3:9c:2d:ae:03:9c:c4:97:fc: 21:34:0b:77:6b:e0:ae:a1:a8:7f:7f:94:e2:26:ed: 5e:19:78:0a:1e:e9:28:1a:af:b2:d8:65:91:70:80: 3b:ce:d9:96:d3:ce:83:ca:74:46:02:a9:ba:d8:c6: b5:a1:99:c1:da:70:c7:ed:f8:45:5a:47:52:7c:9e: 5d:b2:69:58:cc:a9:74:ca:64:43:81:74:86:d0:1a: 9d:c5:dc:9c:52:40:fe:05:8f:4e:80:bb:db:31:84: 08:8b:f8:95:3c:43:5e:7b:bf:7e:62:c1:76:a6:d2: 45:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D9:16:7C:08:CC:44:F9:EF:C7:BF:32:B9:32:DF:1C:AC:2F:A5:4D X509v3 Authority Key Identifier: keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8e:1a:f7:ef:1a:5b:b6:f0:35:82:da:da:0d:3d:e6:89:8f: 21:77:14:4b:c5:11:ad:09:f1:4a:ba:26:3d:76:29:b0:d7:be: 21:30:39:9d:bd:d4:92:25:9b:e6:f4:89:99:88:56:53:9e:1b: e1:d4:87:8e:de:69:bf:a4:fe:83:37:7b:64:6f:e5:e6:fe:9b: ed:ed:e3:78:13:42:c4:34:13:24:2f:39:55:df:66:2f:87:8c: d1:0b:fc:fc:0a:17:8e:84:0e:51:3a:23:62:1d:66:38:55:2b: ca:a8:d6:24:b7:c1:61:0d:50:7b:ef:1a:28:fd:77:88:ee:3a: 42:d5:e6:03:72:26:0c:f2:90:51:89:93:38:1f:1e:4d:73:18: 45:11:a6:e3:45:da:1b:ef:fe:a2:5d:99:59:55:f6:93:38:f5: a0:7e:9a:94:5c:55:28:0e:c7:b1:4a:a6:ba:f4:20:7c:98:d1: a2:87:ca:1c:de:85:42:54:87:46:33:77:31:9f:e8:bf:04:cf: 99:56:95:f5:e4:62:78:e6:c4:a9:35:d6:a6:57:40:1f:1f:ab: 3b:a0:38:e9:d0:d8:e5:c9:f4:cd:02:7f:a9:19:d8:32:fa:3a: f6:85:b2:70:27:be:f4:cd:e1:f9:72:97:91:53:ad:e9:be:4a: de:1d:c7:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNDAxMTAvBgNVBAUTKDJENzQ4NEExN0Y0RTlFNjk0MTAwNTFFRjUzQjdCRTcx OTM3RjlGOUMwHhcNMjYwOTIxMDQxMTI1WhcNMjYwOTI4MDQxMTI1WjAYMRYwFAYD VQQDEw02YWIwYWU2ZS03MzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmffbXQhJbUHeQfAq1ADEKh8ExqteNA+7/fqGEaOHE6k8r0Iv3uu40iXhQXl N5ZW+al4Wv8Gr460YneVlTSrfIJZvfxJXW94Has62N1RPRTsKN4nDw0GnbM2Yx4i hPCmtv8aMEYjcRVDSNrd73TX67gp83bjnZq86becA1Rt/EI3K0nBztnaWGuzTHuz nC2uA5zEl/whNAt3a+Cuoah/f5TiJu1eGXgKHukoGq+y2GWRcIA7ztmW086DynRG Aqm62Ma1oZnB2nDH7fhFWkdSfJ5dsmlYzKl0ymRDgXSG0BqdxdycUkD+BY9OgLvb MYQIi/iVPENee79+YsF2ptJF6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLDZFnwI zET578e/Mrky3xysL6VNMB8GA1UdIwQYMBaAFC10hKF/Tp5pQQBR71O3vnGTf5+c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8xRkEwMjI1MDM4 RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25tbEJBRkh2VTdlLWNaTl9u NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xYU0VvWDlPbm1sQkFGSHZVN2UtY1pOX241dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI0MC8xRkEwMjI1MDM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25t bEJBRkh2VTdlLWNaTl9uNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP44a9+8aW7bwNYLa2g095omPIXcUS8URrQnxSromPXYpsNe+ITA5nb3UkiWb 5vSJmYhWU54b4dSHjt5pv6T+gzd7ZG/l5v6b7e3jeBNCxDQTJC85Vd9mL4eM0Qv8 /AoXjoQOUTojYh1mOFUryqjWJLfBYQ1Qe+8aKP13iO46QtXmA3ImDPKQUYmTOB8e TXMYRRGm40XaG+/+ol2ZWVX2kzj1oH6alFxVKA7HsUqmuvQgfJjRoofKHN6FQlSH RjN3MZ/ovwTPmVaV9eRieObEqTXWpldAHx+rO6A46dDY5cn0zQJ/qRnYMvo69oWy cCe+9M3h+XKXkVOt6b5K3h3H7A== -----END CERTIFICATE-----Generated at Tue Sep 22 10:25:35 2026 by rpki-client