$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft File: LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft (raw, json) Hash identifier: 4ATiF9JnvTeny5309uL24Szfs95vi19wdRh5OAuTVB8= Subject key identifier: 33:4A:2B:44:6F:17:8C:85:DC:CB:36:01:45:6A:C2:A5:4A:C8:47:72 Authority key identifier: 2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 Certificate issuer: /CN=A91ABE54/serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Certificate serial: 04DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft Manifest number: 04CD Signing time: Sun 26 Apr 2026 23:49:22 +0000 Manifest this update: Sun 26 Apr 2026 23:49:21 +0000 Manifest next update: Sun 03 May 2026 23:49:21 +0000 Files and hashes: 1: LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl (hash: ODsTkk4hwSYWAQpZ4Oze1KDxi9/VyubRzT+tToPQ0RM=) 2: A69224164EAE11EDBF0D8256C4F9AE02.roa (hash: zzqL67oBfa7jh21a6YkB8pxmZp3PhnTtbMccXW5iB0o=) 3: A60006804EAE11EDBF0D8256C4F9AE02.roa (hash: RIwVKjVZKrFHjQ/9a+o2G3hFBPmeu0/eXYz01rKe7M4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 23:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1246 (0x4de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABE54, serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Validity Not Before: Apr 26 23:49:21 2026 GMT Not After : May 3 23:49:21 2026 GMT Subject: CN=69eea482-c3d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:d3:36:d7:60:26:80:cd:8d:2e:ae:d9:d8: 0f:b6:48:54:1d:ad:d9:e6:ca:83:af:a7:26:0b:c8: 82:18:22:3c:c6:cc:97:e2:8b:b3:d9:7f:96:ac:6f: ad:3f:43:33:2e:c3:f8:c2:c7:81:77:b2:5f:3a:60: f0:8d:8a:a8:5a:72:c3:fd:21:a6:f1:75:3d:b6:72: 75:7b:55:9c:61:00:7f:79:db:c6:dc:b9:f5:27:fa: 9c:a4:23:85:25:d9:7e:49:31:81:5e:bb:3a:af:ce: e3:28:9a:c7:52:8e:0e:43:24:96:ff:79:a2:6c:cb: 67:28:98:2d:c0:cc:de:6a:72:fd:8b:d6:01:63:b6: 9d:00:55:e0:de:02:9d:29:fa:15:ce:de:b6:8c:bb: 6d:82:59:f4:12:72:99:1d:a7:a7:09:1f:05:c9:b6: 52:04:f3:8f:8e:44:16:4b:7a:f7:cc:9c:cb:82:65: 1a:54:ff:23:a9:c5:f9:c7:a8:74:bd:ab:f3:0d:5b: 76:b1:f8:35:70:f2:da:45:bb:a3:8b:ae:8f:a0:0e: 2a:f2:1f:43:0d:df:72:dd:c5:ce:ae:12:67:fa:6e: 26:aa:c6:46:df:7a:61:a1:d7:93:7e:6a:fd:37:27: de:8f:6e:64:5c:e2:58:e5:8a:3f:86:ee:38:02:ad: 2b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4A:2B:44:6F:17:8C:85:DC:CB:36:01:45:6A:C2:A5:4A:C8:47:72 X509v3 Authority Key Identifier: keyid:2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:64:5c:a3:0e:e4:03:10:a1:98:63:43:97:15:45:49:d1:28: 38:40:d2:37:83:34:7c:a8:02:6b:bd:be:34:db:93:dd:10:7e: f1:e8:1f:ae:ca:19:8b:83:bf:b5:cc:5c:ce:d2:6c:a9:10:60: 1a:36:3b:7c:51:f5:10:86:09:36:eb:9c:14:3e:b1:28:33:71: f4:eb:72:66:99:47:76:24:3d:0d:b9:54:10:ce:cd:86:fe:92: 56:a8:ba:d2:39:82:d4:ac:00:bd:cd:6b:e5:ff:7b:db:cb:fa: 9b:6d:dd:ce:c4:26:15:fb:99:1f:ba:f6:fd:52:75:c6:10:e9: 72:ad:74:d3:a0:f4:5c:da:be:3d:46:7f:cf:56:51:ab:8a:c5: b8:68:d6:e1:91:d8:f0:b4:7d:15:9c:20:96:99:26:9d:0c:4e: 8c:cf:36:72:87:38:57:d6:f3:db:a6:2a:f5:bd:c0:a9:b8:67: d5:03:73:02:46:ec:6a:ee:8b:fd:ad:8d:6a:21:8a:8b:97:1b: 5f:9d:e1:05:2c:67:1a:db:85:49:07:b2:cd:e8:a6:e4:38:0d: 25:af:34:bd:a1:d8:da:65:ff:57:12:91:10:59:be:dd:1f:cf: a4:4b:b4:82:f6:81:9a:0d:f6:d3:1a:fe:70:a0:d7:cf:a3:fc: 82:e2:11:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFNTQxMTAvBgNVBAUTKDJEN0NFOTRGMTNEODJFNTRGODM0MjNDNjFFQjk2MzNB Rjk0MDU5MjQwHhcNMjYwNDI2MjM0OTIxWhcNMjYwNTAzMjM0OTIxWjAYMRYwFAYD VQQDEw02OWVlYTQ4Mi1jM2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu57TNtdgJoDNjS6u2dgPtkhUHa3Z5sqDr6cmC8iCGCI8xsyX4ouz2X+WrG+t P0MzLsP4wseBd7JfOmDwjYqoWnLD/SGm8XU9tnJ1e1WcYQB/edvG3Ln1J/qcpCOF Jdl+STGBXrs6r87jKJrHUo4OQySW/3mibMtnKJgtwMzeanL9i9YBY7adAFXg3gKd KfoVzt62jLttgln0EnKZHaenCR8FybZSBPOPjkQWS3r3zJzLgmUaVP8jqcX5x6h0 vavzDVt2sfg1cPLaRbuji66PoA4q8h9DDd9y3cXOrhJn+m4mqsZG33phodeTfmr9 Nyfej25kXOJY5Yo/hu44Aq0riQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDNKK0Rv F4yF3Ms2AUVqwqVKyEdyMB8GA1UdIwQYMBaAFC186U8T2C5U+DQjxh65Yzr5QFkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkU1NC9BNUMxNTBBQzY4 RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxsVDROQ1BHSHJsak92bEFX U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYenBUeFBZTGxUNE5DUEdIcmxqT3ZsQVdTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkU1NC9BNUMxNTBBQzY4RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxs VDROQ1BHSHJsak92bEFXU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUWRcow7kAxChmGNDlxVFSdEoOEDSN4M0fKgCa72+NNuT3RB+8egfrsoZi4O/ tcxcztJsqRBgGjY7fFH1EIYJNuucFD6xKDNx9OtyZplHdiQ9DblUEM7Nhv6SVqi6 0jmC1KwAvc1r5f9728v6m23dzsQmFfuZH7r2/VJ1xhDpcq1006D0XNq+PUZ/z1ZR q4rFuGjW4ZHY8LR9FZwglpkmnQxOjM82coc4V9bz26Yq9b3Aqbhn1QNzAkbsau6L /a2NaiGKi5cbX53hBSxnGtuFSQeyzeim5DgNJa80vaHY2mX/VxKREFm+3R/PpEu0 gvaBmg320xr+cKDXz6P8guIRZw== -----END CERTIFICATE-----Generated at Tue Apr 28 22:16:43 2026 by rpki-client