$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft File: LHMz280_ygeHgDg3tsuuMawMS2U.mft (raw, json) Hash identifier: ofkMjHU0BsvLFJ2LHdGkV+kNOvydOzZoyFy3Z4q5OAM= Subject key identifier: 41:F7:B9:52:B2:32:F5:45:25:00:D3:6F:04:5A:0E:CE:43:E8:09:BD Authority key identifier: 2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 Certificate issuer: /CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Certificate serial: 0E33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft Manifest number: 0E21 Signing time: Tue 28 Jul 2026 17:56:43 +0000 Manifest this update: Tue 28 Jul 2026 17:56:43 +0000 Manifest next update: Tue 04 Aug 2026 17:56:43 +0000 Files and hashes: 1: LHMz280_ygeHgDg3tsuuMawMS2U.crl (hash: fR0D8r47UP8wxKWA4HWLJ0cnPFwEs6c1eReZTT/iFD4=) 2: 62BA539C48ED11EDBC251337C4F9AE02.roa (hash: 6dBwoytRH7N2p3z59t26vsmmZ8suypwfNSdSsbkrs/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3635 (0xe33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3FD3, serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Validity Not Before: Jul 28 17:56:43 2026 GMT Not After : Aug 4 17:56:43 2026 GMT Subject: CN=6a68ed5b-f9ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:17:fd:bd:c1:2e:51:41:2d:37:bc:01:eb:63: c0:ed:57:16:bf:59:92:0e:8f:ae:31:07:18:47:c3: 51:20:d6:63:ee:07:d7:40:8c:0c:e0:34:25:fb:5f: 00:6d:f7:11:d9:19:b2:40:4a:eb:61:80:8a:d8:ad: e9:ae:f5:8d:a8:2e:7f:a0:44:d1:b2:af:31:0a:86: 42:25:f9:bc:50:17:00:ac:2c:9e:89:7a:94:92:24: 00:b9:66:8e:87:0a:05:cb:6e:60:6b:ea:03:52:7f: 56:d1:9d:f9:4a:0a:88:d9:94:65:c0:c8:ed:b4:4b: ad:11:3b:94:9b:30:6c:a9:b5:3e:5e:0c:bb:3c:1e: 41:bf:0a:6a:ec:61:ec:bf:f8:ba:64:27:63:b5:18: 23:59:ac:9f:74:64:b6:8c:6c:b3:d4:1d:64:c2:26: 98:02:94:f5:e9:8b:f6:df:d1:e5:20:b1:37:ca:51: b3:f7:a9:9a:57:5d:c0:17:63:06:d9:3c:49:c8:62: a2:f2:3e:4d:12:50:3d:78:3e:c5:f1:28:81:75:e6: e6:35:de:50:4c:fe:a2:fa:94:de:5d:59:26:e4:1d: cc:d6:e0:56:2e:cb:f0:d9:82:92:f7:19:fb:98:82: 8f:30:d0:5d:bd:ef:60:fd:7f:f3:ff:2c:a2:96:81: c4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F7:B9:52:B2:32:F5:45:25:00:D3:6F:04:5A:0E:CE:43:E8:09:BD X509v3 Authority Key Identifier: keyid:2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:08:99:9d:88:43:2b:30:c4:d6:a3:1c:5d:2c:c3:18:53:f0: 61:d3:c2:c2:b3:a2:a1:fd:ed:88:1b:e3:e6:cf:36:35:07:a4: 66:4c:4c:13:b6:0c:e5:21:b1:c9:ff:33:8a:f5:8b:b1:95:85: f8:60:f0:9c:95:3d:32:54:4d:13:ca:1d:3b:0f:20:6c:ee:14: ed:29:c7:87:cb:b2:24:a1:25:bd:02:ec:a7:eb:4d:08:07:48: a1:17:3d:45:27:a6:c4:d6:e8:8e:25:61:98:a4:9e:94:cb:57: a5:1f:d9:6b:9a:64:1f:91:12:b7:38:b1:67:7e:82:96:5e:d1: 46:47:f9:e8:d5:fe:93:cd:45:6e:00:66:06:e6:d4:d0:c3:bb: b3:de:e2:e6:3f:21:5c:90:a7:33:34:d5:f3:90:0d:94:53:b3: e2:3b:af:d3:57:98:82:a5:a2:ee:66:44:35:36:e9:05:af:77: c3:d4:95:ee:e9:11:6f:42:bd:92:cb:ee:71:e8:a6:69:fa:28: 27:a3:9e:bc:45:cc:5b:78:77:b7:3a:d7:ec:42:7d:57:93:b5: 3c:c8:25:9e:12:d3:7a:8e:1c:18:8e:92:9b:47:b6:62:eb:a1: 58:18:a3:58:b0:d6:08:10:ec:a8:4b:01:fb:d0:50:61:92:62: 89:30:a4:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGRDMxMTAvBgNVBAUTKDJDNzMzM0RCQ0QzRkNBMDc4NzgwMzgzN0I2Q0JBRTMx QUMwQzRCNjUwHhcNMjYwNzI4MTc1NjQzWhcNMjYwODA0MTc1NjQzWjAYMRYwFAYD VQQDEw02YTY4ZWQ1Yi1mOWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhf9vcEuUUEtN7wB62PA7VcWv1mSDo+uMQcYR8NRINZj7gfXQIwM4DQl+18A bfcR2RmyQErrYYCK2K3prvWNqC5/oETRsq8xCoZCJfm8UBcArCyeiXqUkiQAuWaO hwoFy25ga+oDUn9W0Z35SgqI2ZRlwMjttEutETuUmzBsqbU+Xgy7PB5Bvwpq7GHs v/i6ZCdjtRgjWayfdGS2jGyz1B1kwiaYApT16Yv239HlILE3ylGz96maV13AF2MG 2TxJyGKi8j5NElA9eD7F8SiBdebmNd5QTP6i+pTeXVkm5B3M1uBWLsvw2YKS9xn7 mIKPMNBdve9g/X/z/yyiloHEMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEH3uVKy MvVFJQDTbwRaDs5D6Am9MB8GA1UdIwQYMBaAFCxzM9vNP8oHh4A4N7bLrjGsDEtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0ZEMy8yMURFNUI5QUQ0 OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3lnZUhnRGczdHN1dU1hd01T MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xITXoyODBfeWdlSGdEZzN0c3V1TWF3TVMyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0ZEMy8yMURFNUI5QUQ0OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3ln ZUhnRGczdHN1dU1hd01TMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjQiZnYhDKzDE1qMcXSzDGFPwYdPCwrOiof3tiBvj5s82NQekZkxME7YM5SGx yf8zivWLsZWF+GDwnJU9MlRNE8odOw8gbO4U7SnHh8uyJKElvQLsp+tNCAdIoRc9 RSemxNbojiVhmKSelMtXpR/Za5pkH5EStzixZ36Cll7RRkf56NX+k81FbgBmBubU 0MO7s97i5j8hXJCnMzTV85ANlFOz4juv01eYgqWi7mZENTbpBa93w9SV7ukRb0K9 ksvuceimafooJ6OevEXMW3h3tzrX7EJ9V5O1PMglnhLTeo4cGI6Sm0e2YuuhWBij WLDWCBDsqEsB+9BQYZJiiTCkqw== -----END CERTIFICATE-----Generated at Wed Jul 29 05:42:21 2026 by rpki-client