$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft File: lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft (raw, json) Hash identifier: MnaTb79cvQmNomDv6ewxqurwxQXDUB9CdLyR5Cy2/RA= Subject key identifier: 7D:59:1A:F9:8F:D5:CA:87:3F:6D:17:91:24:C1:01:4D:29:AD:6F:88 Authority key identifier: 97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 Certificate issuer: /CN=A91A1C06/serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Certificate serial: 354C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft Manifest number: 353A Signing time: Thu 12 Mar 2026 14:57:29 +0000 Manifest this update: Thu 12 Mar 2026 14:57:29 +0000 Manifest next update: Thu 19 Mar 2026 14:57:29 +0000 Files and hashes: 1: lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl (hash: 8bKstsDgvwdeqs2Q8LvLxmisY8tKeWuQ5YmwT9woP9A=) 2: F3E1B79CB8F811F08ABED010C4F9AE02.roa (hash: HjuuUU5Hjru1oMEmmlPOI9SeAkfKsJ5rRrHQC6vo5ZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 14:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13644 (0x354c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1C06, serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Validity Not Before: Mar 12 14:57:29 2026 GMT Not After : Mar 19 14:57:29 2026 GMT Subject: CN=69b2d459-ec88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:78:c0:5d:8c:da:a4:85:d4:05:49:80:d8:a3: 1f:d6:4b:d4:ec:36:ed:59:01:49:59:e6:2e:8d:6d: 11:c8:12:c6:9a:35:f5:4b:62:0a:ef:d0:3e:f1:52: ba:61:1c:e4:ac:d9:ef:93:7e:0a:e3:ca:c6:b0:1a: cc:06:3c:7f:7b:e9:8e:94:cf:60:d1:b1:ff:94:ab: 78:ba:6e:7f:c6:1a:87:05:9e:77:67:d2:24:6f:a0: d6:36:19:18:d7:c1:a4:1c:34:61:f6:3d:be:0c:c4: 43:43:18:04:28:cc:52:5f:be:a2:bb:66:c2:25:16: 4f:a7:13:fa:85:8e:43:48:e2:47:11:03:9d:74:2a: cc:78:81:e7:18:e5:bd:da:25:aa:d3:89:45:58:16: 90:b9:21:40:4d:08:d1:71:40:45:54:0a:c5:d1:0b: b3:72:bf:e2:f4:78:1e:76:7e:4e:98:f9:8d:4a:8f: 23:7d:42:aa:fb:3f:a4:ec:63:b8:56:1c:24:3b:16: 54:9d:d5:7e:24:bb:fb:4a:33:2e:11:59:98:a0:c9: c7:81:87:9a:5b:30:80:48:2a:79:4f:54:96:46:0d: 73:f6:1a:1f:85:bf:80:b9:5a:23:3e:f7:e2:e5:0c: ea:d2:31:bf:ca:e0:d4:16:fe:0a:36:a8:34:9c:ca: dd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:59:1A:F9:8F:D5:CA:87:3F:6D:17:91:24:C1:01:4D:29:AD:6F:88 X509v3 Authority Key Identifier: keyid:97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:19:88:1d:d2:c4:9e:85:77:67:58:f3:6e:c6:b7:41:4b:7d: ab:d6:45:7c:96:fa:1b:9a:80:b6:74:0c:30:ab:45:9c:1e:5f: 21:5a:51:a9:cf:f6:f9:52:91:1c:02:a4:52:d2:98:94:19:e1: 28:17:a7:c8:12:68:a2:65:2f:ae:9d:f0:c1:73:1a:13:41:75: bb:09:21:d9:c0:94:66:5a:25:e2:47:6b:6b:3d:81:9d:88:cf: f1:fe:cc:27:8f:20:98:76:49:a9:58:0b:2a:31:02:c4:df:07: fe:61:e6:c1:d3:c9:7a:3f:78:a4:8e:2f:f4:ea:f0:e9:39:3f: ee:c7:28:e0:8b:07:60:ff:be:5f:fb:7d:14:85:32:0a:54:7d: 05:7b:fb:fa:fb:31:4f:20:5f:0f:6f:69:e4:d6:dd:d5:da:6b: 1a:db:69:30:85:56:22:32:98:47:99:cb:32:2b:02:80:b8:96: 7d:28:f7:7d:17:4b:eb:83:02:50:ba:72:a4:84:a2:7e:ba:67: e5:d3:47:4c:c9:af:22:ca:46:7b:8b:87:f0:68:c6:d7:2c:f3: ff:6e:bb:5a:05:c1:a6:06:6c:c7:6f:5f:49:f9:87:1d:ef:01: 9f:23:8f:81:43:a1:a1:a3:89:17:af:cc:87:19:f1:e1:ca:09: 4b:b2:2d:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDMDYxMTAvBgNVBAUTKDk3Mzc3MTMwMDQ4MTlCNkI2NkZDNTZFNkVDODZCRTRE QzJFMjhFMTcwHhcNMjYwMzEyMTQ1NzI5WhcNMjYwMzE5MTQ1NzI5WjAYMRYwFAYD VQQDEw02OWIyZDQ1OS1lYzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3jAXYzapIXUBUmA2KMf1kvU7DbtWQFJWeYujW0RyBLGmjX1S2IK79A+8VK6 YRzkrNnvk34K48rGsBrMBjx/e+mOlM9g0bH/lKt4um5/xhqHBZ53Z9Ikb6DWNhkY 18GkHDRh9j2+DMRDQxgEKMxSX76iu2bCJRZPpxP6hY5DSOJHEQOddCrMeIHnGOW9 2iWq04lFWBaQuSFATQjRcUBFVArF0Quzcr/i9Hgedn5OmPmNSo8jfUKq+z+k7GO4 VhwkOxZUndV+JLv7SjMuEVmYoMnHgYeaWzCASCp5T1SWRg1z9hofhb+AuVojPvfi 5Qzq0jG/yuDUFv4KNqg0nMrdaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH1ZGvmP 1cqHP20XkSTBAU0prW+IMB8GA1UdIwQYMBaAFJc3cTAEgZtrZvxW5uyGvk3C4o4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUMwNi82REVBRTIxQzFE OUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0ydG1fRmJtN0lhLVRjTGlq aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6ZHhNQVNCbTJ0bV9GYm03SWEtVGNMaWpoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUMwNi82REVBRTIxQzFEOUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0y dG1fRmJtN0lhLVRjTGlqaGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgxmIHdLEnoV3Z1jzbsa3QUt9q9ZFfJb6G5qAtnQMMKtFnB5fIVpRqc/2+VKR HAKkUtKYlBnhKBenyBJoomUvrp3wwXMaE0F1uwkh2cCUZlol4kdraz2BnYjP8f7M J48gmHZJqVgLKjECxN8H/mHmwdPJej94pI4v9Orw6Tk/7sco4IsHYP++X/t9FIUy ClR9BXv7+vsxTyBfD29p5Nbd1dprGttpMIVWIjKYR5nLMisCgLiWfSj3fRdL64MC ULpypISifrpn5dNHTMmvIspGe4uH8GjG1yzz/267WgXBpgZsx29fSfmHHe8BnyOP gUOhoaOJF6/Mhxnx4coJS7Itaw== -----END CERTIFICATE-----Generated at Fri Mar 13 07:25:55 2026 by rpki-client