$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json) Hash identifier: Gp93m2OGEA+DekCE6NH8873uYV9WAJtLyqIh4fjvMdE= Subject key identifier: B6:1A:E7:12:C4:13:D4:A7:97:9E:9B:BA:2D:62:2C:9E:FE:4B:C7:9F Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft Manifest number: 016A Signing time: Mon 01 Jun 2026 05:34:50 +0000 Manifest this update: Mon 01 Jun 2026 05:34:50 +0000 Manifest next update: Mon 08 Jun 2026 05:34:50 +0000 Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: 4IqVmImv9tKUk6r2iOKUjjxrFZGREIsJQaUvgp5P2Sk=) 2: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: PtbtJlcJRwUkYVZTTdhAVrVCAYKXUtPXtxl26TpZjBg=) 3: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: zAdUeLORZiO4f/KSBL4alxYSI+DmbONmLsqQbgHi324=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 05:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Validity Not Before: Jun 1 05:34:50 2026 GMT Not After : Jun 8 05:34:50 2026 GMT Subject: CN=6a1d19fa-eecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:92:c0:39:0c:95:53:27:15:ea:79:70:d1:a7: 69:91:81:4f:40:9a:91:04:29:72:79:e0:4d:1d:b3: 65:f5:24:0e:d6:4e:2e:44:da:4c:ff:9a:71:78:8b: d9:cd:c3:1a:ac:f3:f8:65:5f:57:4d:d2:57:bb:f6: ad:a0:bc:45:d3:14:e9:75:4a:67:45:a8:fe:5f:55: 20:56:89:f2:3c:f4:3f:d8:d5:c4:7b:6b:14:c2:0d: 43:61:81:52:2e:f6:37:9b:d2:7b:76:65:cc:ba:a2: 20:e9:5e:c5:4d:21:ec:fa:46:5b:20:1c:85:39:65: 64:dc:e4:85:9d:57:a3:9c:56:4e:85:34:00:5f:37: 83:4a:12:97:b7:00:3c:60:8c:24:3e:59:98:11:ed: 2a:a7:a0:27:39:d6:51:b8:01:b5:d4:85:24:90:d2: 38:a2:00:ab:a9:3d:49:30:89:69:ed:e9:c0:2c:82: 04:85:50:96:23:9a:bd:44:46:61:73:6e:c0:3f:33: 7b:28:ef:25:57:c6:15:4b:42:15:d2:2b:2e:f9:65: 86:00:ce:df:77:a7:cb:07:67:e5:ac:c4:a8:d3:75: 79:ee:dd:ec:8c:56:54:a8:a6:6e:e3:ff:55:0a:a1: d3:ca:e0:28:0a:4d:46:36:a5:41:d6:04:27:fd:1f: cf:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1A:E7:12:C4:13:D4:A7:97:9E:9B:BA:2D:62:2C:9E:FE:4B:C7:9F X509v3 Authority Key Identifier: keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:99:b0:c0:66:fe:42:50:8b:1b:df:f1:87:46:38:66:60:33: 8b:58:e8:20:19:e1:78:da:52:0c:01:73:59:03:c7:05:43:c1: a3:24:97:3f:5a:ee:f5:55:bc:77:0f:b9:c9:92:8c:55:7c:e9: 22:fd:6a:58:35:87:ae:fc:6c:f6:76:8a:bc:be:f4:63:b9:87: de:64:ae:e0:7e:65:ba:29:a2:1a:28:60:3e:d7:6e:64:e9:0e: d6:34:9d:7a:69:fe:2c:6d:1d:7e:6f:7d:cf:34:b6:0f:28:cf: d7:9d:2b:5c:1f:df:36:8b:2b:5e:35:81:dc:51:f7:1c:3d:fd: 0d:d2:97:07:0f:d8:01:ae:9f:59:89:eb:7e:f6:e2:2d:a4:09: 71:d0:70:a1:20:b5:da:13:4e:33:92:20:68:47:d9:6f:e7:9a: 6d:f3:de:d4:1f:f3:5f:1f:42:be:32:1b:26:bc:bd:56:3a:ef: e8:bd:d8:0a:4f:d1:45:3a:0d:9c:bb:a7:99:36:fb:d0:8e:26: ee:b3:47:0c:52:0e:27:60:91:d0:f2:30:3b:2d:82:75:2a:17: 65:bd:9c:88:9f:4d:b8:e9:e5:76:f6:18:55:90:0a:ab:14:57: 33:01:ff:f5:f5:6a:0c:de:97:00:04:3f:4e:10:b9:60:c5:ee: 3d:02:29:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNDAxMTAvBgNVBAUTKDJENzQ4NEExN0Y0RTlFNjk0MTAwNTFFRjUzQjdCRTcx OTM3RjlGOUMwHhcNMjYwNjAxMDUzNDUwWhcNMjYwNjA4MDUzNDUwWjAYMRYwFAYD VQQDEw02YTFkMTlmYS1lZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpLAOQyVUycV6nlw0adpkYFPQJqRBClyeeBNHbNl9SQO1k4uRNpM/5pxeIvZ zcMarPP4ZV9XTdJXu/atoLxF0xTpdUpnRaj+X1UgVonyPPQ/2NXEe2sUwg1DYYFS LvY3m9J7dmXMuqIg6V7FTSHs+kZbIByFOWVk3OSFnVejnFZOhTQAXzeDShKXtwA8 YIwkPlmYEe0qp6AnOdZRuAG11IUkkNI4ogCrqT1JMIlp7enALIIEhVCWI5q9REZh c27APzN7KO8lV8YVS0IV0isu+WWGAM7fd6fLB2flrMSo03V57t3sjFZUqKZu4/9V CqHTyuAoCk1GNqVB1gQn/R/PpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLYa5xLE E9Snl56bui1iLJ7+S8efMB8GA1UdIwQYMBaAFC10hKF/Tp5pQQBR71O3vnGTf5+c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8xRkEwMjI1MDM4 RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25tbEJBRkh2VTdlLWNaTl9u NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xYU0VvWDlPbm1sQkFGSHZVN2UtY1pOX241dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI0MC8xRkEwMjI1MDM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25t bEJBRkh2VTdlLWNaTl9uNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALZmwwGb+QlCLG9/xh0Y4ZmAzi1joIBnheNpSDAFzWQPHBUPBoySXP1ru9VW8 dw+5yZKMVXzpIv1qWDWHrvxs9naKvL70Y7mH3mSu4H5luimiGihgPtduZOkO1jSd emn+LG0dfm99zzS2DyjP150rXB/fNosrXjWB3FH3HD39DdKXBw/YAa6fWYnrfvbi LaQJcdBwoSC12hNOM5IgaEfZb+eabfPe1B/zXx9CvjIbJry9Vjrv6L3YCk/RRToN nLunmTb70I4m7rNHDFIOJ2CR0PIwOy2CdSoXZb2ciJ9NuOnldvYYVZAKqxRXMwH/ 9fVqDN6XAAQ/ThC5YMXuPQIpQA== -----END CERTIFICATE-----Generated at Tue Jun 2 21:19:33 2026 by rpki-client