$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft File: LXsNej-fFd4AcqWmxO0KX48iHgM.mft (raw, json) Hash identifier: wl8XL0uOVAf6WO+aK+f1NdpviYOZdWDDwJ23xdiqeH8= Subject key identifier: 48:BD:C8:42:67:3B:AC:2F:7C:2B:6D:08:99:0A:C1:78:6C:7F:31:4F Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 Certificate issuer: /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Certificate serial: 0A3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft Manifest number: 0A34 Signing time: Sat 04 Apr 2026 19:32:09 +0000 Manifest this update: Sat 04 Apr 2026 19:32:09 +0000 Manifest next update: Sat 11 Apr 2026 19:32:09 +0000 Files and hashes: 1: LXsNej-fFd4AcqWmxO0KX48iHgM.crl (hash: FTY4QXAVP3Ep+gipwHV2Ly6HGla0g0+qfuhcKpd8EUw=) 2: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (hash: fZNOUj/iAXxAo54HM0txOio7TDOqa8olAoIhUWuhgT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2619 (0xa3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EC46, serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Validity Not Before: Apr 4 19:32:09 2026 GMT Not After : Apr 11 19:32:09 2026 GMT Subject: CN=69d16739-ecb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7d:14:f9:e4:5c:48:a6:ab:09:1f:39:dc:9a: b6:30:c4:18:60:3d:06:31:ab:ca:e3:5d:2e:6b:ff: 67:05:0a:92:12:b8:3c:ac:bc:ad:67:bb:4d:9c:c6: 0b:2e:ba:a2:19:a3:9b:3a:f0:a4:d3:27:de:8b:e8: c3:b5:0f:9e:3e:d9:d4:c9:4e:d4:53:a8:2e:d9:86: 04:0e:d1:f3:64:4c:e5:9c:59:71:b4:bb:1e:89:54: e6:50:af:94:21:5a:12:40:b8:5e:e4:16:10:22:61: 7e:b8:9d:35:6d:f3:1b:dc:3f:bf:4d:fb:a1:99:3b: d8:8e:77:84:88:a1:46:11:a7:2b:e2:af:66:7c:32: 77:22:35:64:06:58:58:9d:a9:df:93:05:f7:25:26: 91:63:d9:1b:92:7f:30:da:8a:c4:32:7b:00:22:be: 7f:a0:29:be:9e:f4:06:87:9a:93:d7:16:9a:ad:6a: a7:96:48:b7:34:5a:ad:0c:c1:fd:18:e9:85:f8:ac: a8:f7:ae:33:80:7d:b5:df:f9:cc:d8:14:79:cd:8f: 83:a4:32:b7:22:b1:9d:9a:1e:16:4d:e2:18:6c:11: c5:1b:18:9f:10:f9:15:74:f0:5f:0f:37:b0:45:5f: b3:04:21:e8:ae:89:5b:16:d4:52:f9:d8:47:f8:56: 65:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BD:C8:42:67:3B:AC:2F:7C:2B:6D:08:99:0A:C1:78:6C:7F:31:4F X509v3 Authority Key Identifier: keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:72:6d:5d:f9:2d:d5:4d:5a:92:74:60:eb:0b:db:62:17:a5: 14:15:11:1f:ed:f7:95:42:9f:52:17:1c:9e:7f:b8:ad:2d:f4: 76:5d:42:42:9a:0e:f7:42:26:8e:7e:0d:cb:10:99:c8:86:ca: 3a:d6:f3:37:0f:53:4b:de:8e:41:f0:10:fb:14:e2:b8:dd:95: 32:1b:99:4e:9a:1f:c8:2c:cc:5b:cf:ed:f2:55:38:48:e0:55: 72:a6:31:14:83:47:53:8c:c0:5a:e2:30:d5:09:1d:73:46:e8: 8e:da:5b:5c:8c:8f:70:c7:e1:12:a7:ca:c2:d4:87:d0:a9:92: cd:f7:49:09:23:61:75:40:18:04:01:0c:04:44:06:d8:ac:88: 9c:8a:2f:d6:ff:3c:bd:6d:21:78:c1:30:98:de:0e:6d:a4:81: c2:62:7f:f5:4f:69:6b:66:4e:d9:35:d7:dd:3b:17:a8:9c:9d: 7c:02:6c:16:90:81:ce:11:aa:fb:c7:5b:af:d9:2f:8d:47:82: 72:9d:20:7d:75:c2:1d:f2:d6:83:30:f4:33:a3:ac:11:14:c3: 1a:e2:a9:0d:22:f6:3e:5f:03:e8:a7:1b:9b:96:b1:c2:1e:3e: 49:7b:a6:5f:88:96:eb:35:d1:3e:a1:ed:52:95:38:19:e7:7e: 0d:dd:23:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDNDYxMTAvBgNVBAUTKDJEN0IwRDdBM0Y5RjE1REUwMDcyQTVBNkM0RUQwQTVG OEYyMjFFMDMwHhcNMjYwNDA0MTkzMjA5WhcNMjYwNDExMTkzMjA5WjAYMRYwFAYD VQQDEw02OWQxNjczOS1lY2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuH0U+eRcSKarCR853Jq2MMQYYD0GMavK410ua/9nBQqSErg8rLytZ7tNnMYL LrqiGaObOvCk0yfei+jDtQ+ePtnUyU7UU6gu2YYEDtHzZEzlnFlxtLseiVTmUK+U IVoSQLhe5BYQImF+uJ01bfMb3D+/TfuhmTvYjneEiKFGEacr4q9mfDJ3IjVkBlhY nanfkwX3JSaRY9kbkn8w2orEMnsAIr5/oCm+nvQGh5qT1xaarWqnlki3NFqtDMH9 GOmF+Kyo964zgH213/nM2BR5zY+DpDK3IrGdmh4WTeIYbBHFGxifEPkVdPBfDzew RV+zBCHorolbFtRS+dhH+FZlJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEi9yEJn O6wvfCttCJkKwXhsfzFPMB8GA1UdIwQYMBaAFC17DXo/nxXeAHKlpsTtCl+PIh4D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUM0Ni81OEY3NTEzRThB OEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZkNEFjcVdteE8wS1g0OGlI Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYc05lai1mRmQ0QWNxV214TzBLWDQ4aUhnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUM0Ni81OEY3NTEzRThBOEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZk NEFjcVdteE8wS1g0OGlIZ00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs3JtXfkt1U1aknRg6wvbYhelFBURH+33lUKfUhccnn+4rS30dl1CQpoO90Im jn4NyxCZyIbKOtbzNw9TS96OQfAQ+xTiuN2VMhuZTpofyCzMW8/t8lU4SOBVcqYx FINHU4zAWuIw1Qkdc0bojtpbXIyPcMfhEqfKwtSH0KmSzfdJCSNhdUAYBAEMBEQG 2KyInIov1v88vW0heMEwmN4ObaSBwmJ/9U9pa2ZO2TXX3TsXqJydfAJsFpCBzhGq +8dbr9kvjUeCcp0gfXXCHfLWgzD0M6OsERTDGuKpDSL2Pl8D6Kcbm5axwh4+SXum X4iW6zXRPqHtUpU4Ged+Dd0jjA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:52 2026 by rpki-client