$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json) Hash identifier: X6ZyohzU8vj0OEtonajgpqxZlmPNEc2BLX54AFvek/I= Subject key identifier: 58:07:F4:4C:B6:8E:2A:3D:08:E7:54:15:05:EF:86:D0:5A:1E:1E:A7 Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft Manifest number: 01AB Signing time: Fri 09 Oct 2026 04:40:39 +0000 Manifest this update: Fri 09 Oct 2026 04:40:38 +0000 Manifest next update: Fri 16 Oct 2026 04:40:38 +0000 Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: 7/cumCWt0FNlxynSlmD0a1f+9jancwA9zEyhEKN8OrM=) 2: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: PtbtJlcJRwUkYVZTTdhAVrVCAYKXUtPXtxl26TpZjBg=) 3: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: zAdUeLORZiO4f/KSBL4alxYSI+DmbONmLsqQbgHi324=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 04:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Validity Not Before: Oct 9 04:40:38 2026 GMT Not After : Oct 16 04:40:38 2026 GMT Subject: CN=6ac87047-d41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f5:82:72:0d:6b:48:da:6d:fd:c5:b6:4d:b7: db:7c:85:f3:15:59:a1:2a:fd:c8:f6:1d:3a:00:6b: 8a:11:02:73:25:50:22:09:fe:9b:0b:1c:bb:7e:a2: 93:80:f8:46:73:7f:f4:69:ef:bc:9e:98:9e:ae:04: 3e:7c:2f:56:2a:92:36:07:2a:30:20:7e:94:f6:1a: ad:0c:e6:1d:7d:d3:87:83:f5:a7:33:9d:b0:25:0c: 5d:bd:af:01:92:cc:c1:62:d1:be:c5:0a:d0:d5:69: 99:8d:41:88:1e:3f:0e:df:60:27:76:d4:75:72:b4: 0b:9f:e3:72:62:a4:55:48:8d:db:0c:0d:47:85:dc: 22:6b:56:21:89:56:5d:d3:7f:7f:a0:f5:ee:b9:a2: ec:36:a3:21:e7:2b:ba:b6:db:d6:87:e8:92:6a:7f: 68:f0:d6:cd:e0:5c:90:37:92:af:83:44:a7:03:fe: 13:01:4e:8c:00:b5:77:95:cc:40:06:f0:c2:64:d8: 36:43:84:dd:76:6d:c4:67:8f:84:e1:d4:43:a6:13: cf:39:0e:83:1c:6f:f4:4c:94:c2:17:89:62:6e:4b: 24:c3:8b:38:bb:48:0b:5b:a8:8d:f6:2a:9a:3a:dd: 04:7c:52:c8:3a:a0:9c:ce:40:2a:40:b1:80:10:5d: 9b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:07:F4:4C:B6:8E:2A:3D:08:E7:54:15:05:EF:86:D0:5A:1E:1E:A7 X509v3 Authority Key Identifier: keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:b8:3a:4b:3c:8d:56:79:a0:7b:4d:26:af:03:79:5b:bf:fc: a8:f2:28:05:d3:c3:3e:38:64:c1:fb:18:67:2c:cd:cf:20:47: 1a:19:f2:d3:d7:7e:0a:04:6b:d7:4b:65:e5:57:df:63:9e:38: 29:e9:b7:3c:93:d9:34:7d:8f:5a:b8:e1:b5:46:74:b2:ea:b8: 86:00:18:9d:ee:f0:cb:e7:63:50:4a:35:97:36:3d:69:42:2a: be:c5:73:dd:9a:56:81:58:49:11:4f:d7:69:0f:9d:4c:a7:a0: 73:c3:da:6e:11:67:d2:ba:ef:e1:08:c0:b0:62:85:7c:ba:05: 83:5b:2d:46:2f:89:f1:d2:31:2c:ba:1a:a8:ad:4a:56:87:67: a8:57:83:6e:8d:a8:a3:a3:ab:ee:93:fc:3c:d6:05:50:67:f9: ce:11:a6:69:6a:87:bc:ec:7a:1d:d6:30:90:1b:3c:fb:35:58: a7:fa:54:81:3c:1c:d5:a0:d3:2a:7b:ac:0a:6c:0f:cd:58:86: 81:f9:d2:fc:45:ef:e2:62:22:e9:78:59:54:22:e5:e4:cb:01: d8:ed:65:fe:c2:bb:b0:c9:14:d7:01:4e:64:a7:11:8e:fa:97: ac:be:00:05:b6:3a:c4:3d:c9:3b:55:5d:7a:e3:e7:a9:13:e6: c0:cc:84:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNDAxMTAvBgNVBAUTKDJENzQ4NEExN0Y0RTlFNjk0MTAwNTFFRjUzQjdCRTcx OTM3RjlGOUMwHhcNMjYxMDA5MDQ0MDM4WhcNMjYxMDE2MDQ0MDM4WjAYMRYwFAYD VQQDEw02YWM4NzA0Ny1kNDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vWCcg1rSNpt/cW2TbfbfIXzFVmhKv3I9h06AGuKEQJzJVAiCf6bCxy7fqKT gPhGc3/0ae+8npiergQ+fC9WKpI2ByowIH6U9hqtDOYdfdOHg/WnM52wJQxdva8B kszBYtG+xQrQ1WmZjUGIHj8O32AndtR1crQLn+NyYqRVSI3bDA1Hhdwia1YhiVZd 039/oPXuuaLsNqMh5yu6ttvWh+iSan9o8NbN4FyQN5Kvg0SnA/4TAU6MALV3lcxA BvDCZNg2Q4Tddm3EZ4+E4dRDphPPOQ6DHG/0TJTCF4libkskw4s4u0gLW6iN9iqa Ot0EfFLIOqCczkAqQLGAEF2bnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFgH9Ey2 jio9COdUFQXvhtBaHh6nMB8GA1UdIwQYMBaAFC10hKF/Tp5pQQBR71O3vnGTf5+c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8xRkEwMjI1MDM4 RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25tbEJBRkh2VTdlLWNaTl9u NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xYU0VvWDlPbm1sQkFGSHZVN2UtY1pOX241dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI0MC8xRkEwMjI1MDM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25t bEJBRkh2VTdlLWNaTl9uNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJbg6SzyNVnmge00mrwN5W7/8qPIoBdPDPjhkwfsYZyzNzyBHGhny09d+CgRr 10tl5VffY544Kem3PJPZNH2PWrjhtUZ0suq4hgAYne7wy+djUEo1lzY9aUIqvsVz 3ZpWgVhJEU/XaQ+dTKegc8PabhFn0rrv4QjAsGKFfLoFg1stRi+J8dIxLLoaqK1K VodnqFeDbo2oo6Or7pP8PNYFUGf5zhGmaWqHvOx6HdYwkBs8+zVYp/pUgTwc1aDT KnusCmwPzViGgfnS/EXv4mIi6XhZVCLl5MsB2O1l/sK7sMkU1wFOZKcRjvqXrL4A BbY6xD3JO1VdeuPnqRPmwMyE+w== -----END CERTIFICATE-----Generated at Fri Oct 9 20:04:22 2026 by rpki-client