$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft File: LHMz280_ygeHgDg3tsuuMawMS2U.mft (raw, json) Hash identifier: +OU1E7K/DsvoE2ihrNZQmkDfdRsrbStOi73jLGuk5As= Subject key identifier: 2C:E5:37:0A:FD:60:20:A2:4F:ED:53:9D:EC:08:90:8B:2D:EF:A1:7D Authority key identifier: 2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 Certificate issuer: /CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Certificate serial: 0E4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft Manifest number: 0E3D Signing time: Sun 20 Sep 2026 17:45:24 +0000 Manifest this update: Sun 20 Sep 2026 17:45:24 +0000 Manifest next update: Sun 27 Sep 2026 17:45:24 +0000 Files and hashes: 1: LHMz280_ygeHgDg3tsuuMawMS2U.crl (hash: lh73/4FugHVOgRrOYBYpaXoo7SCHK35YFIbFBI5qO80=) 2: 62BA539C48ED11EDBC251337C4F9AE02.roa (hash: 6dBwoytRH7N2p3z59t26vsmmZ8suypwfNSdSsbkrs/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3663 (0xe4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3FD3, serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Validity Not Before: Sep 20 17:45:24 2026 GMT Not After : Sep 27 17:45:24 2026 GMT Subject: CN=6ab01bb4-0cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4e:49:e6:bd:e6:0c:f0:76:16:fc:a9:7a:d8: d7:b6:29:9a:12:4a:70:a6:42:0c:59:a6:f1:88:f8: 49:fb:a2:50:4f:9a:13:39:38:03:7f:57:cc:a4:d4: 25:63:4e:b9:96:7c:ec:1e:bf:5d:2b:e8:16:ac:a2: 82:46:fd:7d:11:e4:bd:8a:cd:5a:cc:57:0e:ad:7f: de:67:bf:df:fc:e9:6f:11:2c:ea:3c:f3:fa:bd:2f: 9d:e4:cf:25:a4:32:34:e6:0a:cf:03:a0:00:a3:97: 7c:af:b2:e4:15:23:a3:13:86:60:c4:20:79:53:a4: 1f:4a:c3:18:de:a5:10:0a:71:bf:f7:14:0f:f0:14: 96:60:1a:6c:21:2d:6d:ec:0e:e0:1e:93:d0:ce:21: 56:33:fc:4b:05:b7:c8:27:b9:96:13:e2:4c:a3:47: 5e:3f:78:d2:ac:30:cd:e6:6b:20:33:b8:6c:0a:72: a4:bf:bf:e5:ef:45:c6:26:68:b1:62:1a:66:2f:cf: 3c:7d:4f:2a:cf:ed:57:60:5c:d4:fb:9a:18:f3:0d: 42:89:c1:13:72:e6:36:33:c0:06:84:f2:52:a3:54: 49:cd:2d:c3:22:bd:55:77:3f:b2:11:68:ec:70:7e: 31:84:2a:81:cb:17:91:d4:c7:e6:34:39:67:59:72: fb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E5:37:0A:FD:60:20:A2:4F:ED:53:9D:EC:08:90:8B:2D:EF:A1:7D X509v3 Authority Key Identifier: keyid:2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:fc:53:56:0d:fe:fc:e3:f4:b9:3e:f6:ee:05:82:61:e9:c8: 88:dd:3d:83:97:3f:46:c7:27:e9:a5:39:11:81:4b:df:55:02: 2a:10:c5:20:9f:ef:f2:6f:a3:96:1b:61:60:b1:d6:99:33:1f: 08:37:23:2d:ad:71:9a:03:9a:56:16:7d:41:28:48:4e:a0:1f: e7:d5:14:82:42:53:b7:ff:ca:4b:e0:51:5a:e0:27:d9:cd:01: dc:f3:03:be:0c:d8:d0:b6:22:92:f5:c7:da:f8:db:2b:12:4a: 52:f6:85:ee:fe:3c:6d:26:ff:fe:32:5f:3b:f5:10:94:ae:5c: 93:64:14:59:74:1f:9e:62:98:28:88:5d:e9:ad:68:0b:e6:7b: 45:db:f4:78:35:06:eb:f0:dc:0a:15:7c:cd:c9:73:9d:c1:b0: 4f:67:38:c0:5d:fd:8d:78:d2:da:ee:5d:e2:fa:68:2f:8c:75: fc:20:ff:3a:d8:e9:8c:17:bb:ff:b0:66:30:c5:bc:18:12:11: 75:32:b5:56:88:34:3b:47:2c:2c:78:f9:e6:af:30:69:0c:9d: de:ba:06:57:d7:1c:33:83:2a:9f:e0:e6:6b:1d:f4:16:5f:5d: 23:98:81:fe:2a:47:cb:ab:47:5d:e8:ce:39:cd:b9:fd:c4:7d: 7e:41:eb:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGRDMxMTAvBgNVBAUTKDJDNzMzM0RCQ0QzRkNBMDc4NzgwMzgzN0I2Q0JBRTMx QUMwQzRCNjUwHhcNMjYwOTIwMTc0NTI0WhcNMjYwOTI3MTc0NTI0WjAYMRYwFAYD VQQDEw02YWIwMWJiNC0wY2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoE5J5r3mDPB2FvypetjXtimaEkpwpkIMWabxiPhJ+6JQT5oTOTgDf1fMpNQl Y065lnzsHr9dK+gWrKKCRv19EeS9is1azFcOrX/eZ7/f/OlvESzqPPP6vS+d5M8l pDI05grPA6AAo5d8r7LkFSOjE4ZgxCB5U6QfSsMY3qUQCnG/9xQP8BSWYBpsIS1t 7A7gHpPQziFWM/xLBbfIJ7mWE+JMo0deP3jSrDDN5msgM7hsCnKkv7/l70XGJmix YhpmL888fU8qz+1XYFzU+5oY8w1CicETcuY2M8AGhPJSo1RJzS3DIr1Vdz+yEWjs cH4xhCqByxeR1MfmNDlnWXL7jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCzlNwr9 YCCiT+1TnewIkIst76F9MB8GA1UdIwQYMBaAFCxzM9vNP8oHh4A4N7bLrjGsDEtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0ZEMy8yMURFNUI5QUQ0 OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3lnZUhnRGczdHN1dU1hd01T MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xITXoyODBfeWdlSGdEZzN0c3V1TWF3TVMyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0ZEMy8yMURFNUI5QUQ0OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3ln ZUhnRGczdHN1dU1hd01TMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZfxTVg3+/OP0uT727gWCYenIiN09g5c/Rscn6aU5EYFL31UCKhDFIJ/v8m+j lhthYLHWmTMfCDcjLa1xmgOaVhZ9QShITqAf59UUgkJTt//KS+BRWuAn2c0B3PMD vgzY0LYikvXH2vjbKxJKUvaF7v48bSb//jJfO/UQlK5ck2QUWXQfnmKYKIhd6a1o C+Z7Rdv0eDUG6/DcChV8zclzncGwT2c4wF39jXjS2u5d4vpoL4x1/CD/OtjpjBe7 /7BmMMW8GBIRdTK1Vog0O0csLHj55q8waQyd3roGV9ccM4Mqn+Dmax30Fl9dI5iB /ipHy6tHXejOOc25/cR9fkHr5g== -----END CERTIFICATE-----Generated at Mon Sep 21 10:23:58 2026 by rpki-client