$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft File: lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft (raw, json) Hash identifier: 7gOm6I4TTzdVHklR6m3zhLhnHHkCNQDCPgmT4TH7mAs= Subject key identifier: CD:FB:90:1A:1F:82:63:8C:C2:BF:E7:01:25:3F:CC:69:44:FA:8A:6E Authority key identifier: 97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 Certificate issuer: /CN=A91A1C06/serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Certificate serial: 3567 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft Manifest number: 3554 Signing time: Tue 28 Apr 2026 15:00:57 +0000 Manifest this update: Tue 28 Apr 2026 15:00:57 +0000 Manifest next update: Tue 05 May 2026 15:00:57 +0000 Files and hashes: 1: lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl (hash: zfsZ4Skw+c4gdURutWLypqAe7StMXhvUKCpD4M6z73Y=) 2: F3E1B79CB8F811F08ABED010C4F9AE02.roa (hash: tS4RWCL5pxa5UjyzIdHh2QDGb2clP9SaVI3vEhg55R8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 May 2026 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13671 (0x3567) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1C06, serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Validity Not Before: Apr 28 15:00:57 2026 GMT Not After : May 5 15:00:57 2026 GMT Subject: CN=69f0cba9-f3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cd:51:ff:2a:ac:d5:77:d5:a6:03:73:81:02: c1:ce:40:a0:af:c6:31:87:44:11:79:98:12:6f:f9: 98:59:1c:6e:32:fd:7f:40:c7:c1:b3:8c:fd:5c:8f: 7f:2f:a7:63:e0:1e:28:ec:c1:0b:f5:9a:4c:03:bc: fd:50:cb:99:76:1e:f7:78:79:80:d4:31:cd:50:dc: 67:47:59:ca:ba:60:7f:a3:2a:c2:9a:74:69:5b:c6: 86:c6:2f:56:31:5d:7d:0c:8a:77:e4:2d:14:9c:73: ab:b2:8f:9b:a4:ee:ca:04:6d:bd:e5:c7:c7:3f:29: 0d:e4:9d:84:a1:be:0d:74:32:85:67:ce:1e:d8:0f: 8c:1c:6a:ef:9f:a2:af:d1:30:5f:33:26:83:66:91: ea:5b:f9:d2:e1:c1:56:0e:c3:af:ce:39:33:0c:46: e2:40:c0:b8:bd:9b:50:2f:34:c1:2a:b1:da:e5:1e: 52:e6:19:2a:4d:85:9f:88:b7:1e:84:b8:93:84:f2: 4f:3b:5c:cf:ed:e1:51:b9:cc:11:1d:61:0d:c6:6d: ea:1d:69:13:5c:de:8c:9a:1b:cd:96:ff:10:b5:ea: 5c:c0:de:ce:52:30:ad:99:a3:15:19:8f:c7:ae:97: 67:55:7b:13:da:db:47:17:4b:6a:9d:de:bf:b2:d2: 34:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FB:90:1A:1F:82:63:8C:C2:BF:E7:01:25:3F:CC:69:44:FA:8A:6E X509v3 Authority Key Identifier: keyid:97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:84:e0:65:5d:70:85:df:ce:2f:0a:61:41:05:64:e2:aa:96: a9:1e:68:9b:85:01:ce:3a:b6:56:0d:21:a8:cc:b6:3c:50:19: a4:7e:76:0c:10:a3:cd:73:a6:0a:9e:5f:fa:2e:2e:93:b3:df: c0:31:23:f4:8f:a7:3b:8e:90:2a:a8:5f:57:65:29:8f:24:4e: ed:52:77:20:96:02:3a:d2:b4:13:35:a8:7e:d6:86:1b:c6:07: db:2c:de:a8:6a:87:b3:9b:9c:c0:62:27:fe:af:6c:af:ea:cc: 02:0e:d3:02:6f:9f:78:6d:fa:20:5e:43:21:f0:8c:f2:0d:e3: 82:9f:a9:6f:bf:ff:03:c9:69:a6:92:4d:5d:ba:d2:e7:73:39: fa:8d:c9:1e:87:87:7d:77:ce:ec:a0:4c:7d:1e:77:cc:27:1d: ed:c3:2a:08:67:e0:86:c9:3d:b1:bb:83:30:f7:e2:f4:70:32: e5:2b:68:a0:86:d8:47:f6:0c:93:d9:ba:e1:51:55:f1:e5:40: 34:e7:81:ba:c1:cc:4a:a6:e7:76:43:bd:30:bf:89:f3:1f:e2: 18:ff:42:15:09:3d:21:61:28:21:b5:9a:cb:84:f9:8e:96:c9: 0b:2a:50:69:fb:8e:f4:4e:6b:5a:50:10:e3:a8:5b:63:35:97: 88:b3:88:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDMDYxMTAvBgNVBAUTKDk3Mzc3MTMwMDQ4MTlCNkI2NkZDNTZFNkVDODZCRTRE QzJFMjhFMTcwHhcNMjYwNDI4MTUwMDU3WhcNMjYwNTA1MTUwMDU3WjAYMRYwFAYD VQQDEw02OWYwY2JhOS1mM2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1M1R/yqs1XfVpgNzgQLBzkCgr8Yxh0QReZgSb/mYWRxuMv1/QMfBs4z9XI9/ L6dj4B4o7MEL9ZpMA7z9UMuZdh73eHmA1DHNUNxnR1nKumB/oyrCmnRpW8aGxi9W MV19DIp35C0UnHOrso+bpO7KBG295cfHPykN5J2Eob4NdDKFZ84e2A+MHGrvn6Kv 0TBfMyaDZpHqW/nS4cFWDsOvzjkzDEbiQMC4vZtQLzTBKrHa5R5S5hkqTYWfiLce hLiThPJPO1zP7eFRucwRHWENxm3qHWkTXN6MmhvNlv8QtepcwN7OUjCtmaMVGY/H rpdnVXsT2ttHF0tqnd6/stI0kwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM37kBof gmOMwr/nASU/zGlE+opuMB8GA1UdIwQYMBaAFJc3cTAEgZtrZvxW5uyGvk3C4o4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUMwNi82REVBRTIxQzFE OUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0ydG1fRmJtN0lhLVRjTGlq aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6ZHhNQVNCbTJ0bV9GYm03SWEtVGNMaWpoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUMwNi82REVBRTIxQzFEOUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0y dG1fRmJtN0lhLVRjTGlqaGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfITgZV1whd/OLwphQQVk4qqWqR5om4UBzjq2Vg0hqMy2PFAZpH52DBCjzXOm Cp5f+i4uk7PfwDEj9I+nO46QKqhfV2UpjyRO7VJ3IJYCOtK0EzWoftaGG8YH2yze qGqHs5ucwGIn/q9sr+rMAg7TAm+feG36IF5DIfCM8g3jgp+pb7//A8lpppJNXbrS 53M5+o3JHoeHfXfO7KBMfR53zCcd7cMqCGfghsk9sbuDMPfi9HAy5StooIbYR/YM k9m64VFV8eVANOeBusHMSqbndkO9ML+J8x/iGP9CFQk9IWEoIbWay4T5jpbJCypQ afuO9E5rWlAQ46hbYzWXiLOI/w== -----END CERTIFICATE-----Generated at Wed Apr 29 13:46:34 2026 by rpki-client